$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf9a01c4-df8e-3ac4-aee6-c476a8e0f71e.roa File: bf9a01c4-df8e-3ac4-aee6-c476a8e0f71e.roa (raw, json) Hash identifier: Zv3+8bLfhS7MT6Jr04Hn0z1kYviIpFT3HctGDTTiFKw= Subject key identifier: 9B:9E:A6:F7:6F:AD:BE:77:D6:43:AC:63:02:4A:FF:4F:FB:06:E7:3A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BB45D3CF998D0EB19E4651C40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf9a01c4-df8e-3ac4-aee6-c476a8e0f71e.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 20940 IP address blocks: 23.64.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:3c:f9:98:d0:eb:19:e4:65:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=911ec1f1-8e89-4afd-af23-ae7986c5ad7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ba:aa:e7:e1:ed:95:6e:ca:b5:a6:86:e9:b9: 84:e7:84:d5:be:3f:01:4b:57:db:1b:f2:36:a6:1a: f4:a6:bb:0f:30:92:68:cb:83:d4:18:e7:0f:ba:ce: 95:45:b9:ae:7a:e8:28:6e:22:84:37:37:6f:22:86: 85:79:bd:be:77:05:a5:4a:96:f4:64:fa:05:9a:14: 6d:3a:72:cb:24:38:d6:4d:b2:a8:e0:90:58:6a:47: 52:77:b3:0b:36:53:3f:d9:ab:05:dd:b4:3e:52:e7: 64:12:e8:4a:b0:24:c9:d8:ae:0d:03:4c:aa:4e:1b: 2f:81:7f:48:79:9b:71:56:e0:1c:4c:b8:57:b3:6d: 29:1e:86:67:e7:2c:19:5c:fe:27:c7:e3:c3:13:69: 35:25:da:6e:14:d2:0a:47:a1:42:01:0c:a1:54:99: a3:9a:93:9c:d3:22:20:82:c5:63:ea:c5:19:e2:1e: bc:0d:7e:d3:56:8e:27:c9:01:8c:88:ec:b3:dd:3c: 26:05:53:a5:6e:37:4b:c0:3b:6e:e2:85:6c:97:21: f5:7c:b6:18:6c:e8:de:59:4e:be:1b:3a:29:c8:3f: 48:88:d0:84:fd:64:2a:99:21:3b:ec:9f:1a:9e:c7: 3a:31:8e:79:ed:fc:8c:56:09:31:55:6b:fc:6f:a0: 63:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:9E:A6:F7:6F:AD:BE:77:D6:43:AC:63:02:4A:FF:4F:FB:06:E7:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf9a01c4-df8e-3ac4-aee6-c476a8e0f71e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.64.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:ad:61:4a:f0:7d:a4:6c:d7:72:05:4c:4c:49:3a:ed:10:09: 07:98:ec:64:b4:c8:bb:76:0e:28:de:de:c6:f9:00:a1:a8:0b: ef:27:35:5d:84:b1:ed:7f:1b:90:22:e7:fd:20:85:52:ba:6b: cd:6a:ee:ac:f9:c6:d0:bf:11:b1:e3:c9:92:68:4b:0d:f3:f1: 8c:ac:ef:b0:b3:f7:72:1b:d4:b3:7b:34:cf:d5:b1:1c:7d:ac: ab:48:4a:f7:ea:b3:70:d8:cb:98:c6:7f:8b:eb:f3:df:20:d5: 38:7f:68:0a:20:3a:61:d0:97:9d:73:97:37:79:d5:1a:46:36: b6:77:16:b0:e8:e9:2c:fb:10:38:90:9a:38:7f:3f:31:6f:be: 23:54:ce:09:49:4f:1a:ab:3c:9f:1f:58:30:04:0e:14:33:cb: bf:31:92:45:30:0c:41:73:d8:77:82:73:fc:82:47:24:f8:bf: 44:41:d0:5c:66:e7:6e:25:88:ba:14:e0:13:de:b4:1a:4c:00: 6c:8c:fc:3e:0d:f9:59:b8:7e:df:aa:d0:4f:59:fe:03:dc:3a: 7c:90:7f:98:6a:8d:68:c2:ca:10:43:e0:ed:7b:32:99:1c:a3: bb:75:4c:93:b1:b9:0d:13:c2:79:ad:e8:c0:19:1d:14:52:5a: 53:02:31:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XTz5mNDrGeRlHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk OTExZWMxZjEtOGU4OS00YWZkLWFmMjMtYWU3OTg2YzVhZDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7qq5+HtlW7KtaaG6bmE54TVvj8BS1fbG/I2 phr0prsPMJJoy4PUGOcPus6VRbmueugobiKENzdvIoaFeb2+dwWlSpb0ZPoFmhRt OnLLJDjWTbKo4JBYakdSd7MLNlM/2asF3bQ+UudkEuhKsCTJ2K4NA0yqThsvgX9I eZtxVuAcTLhXs20pHoZn5ywZXP4nx+PDE2k1JdpuFNIKR6FCAQyhVJmjmpOc0yIg gsVj6sUZ4h68DX7TVo4nyQGMiOyz3TwmBVOlbjdLwDtu4oVslyH1fLYYbOjeWU6+ GzopyD9IiNCE/WQqmSE77J8ansc6MY557fyMVgkxVWv8b6BjgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuepvdvrb531kOsYwJK/0/7Buc6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmY5YTAxYzQtZGY4ZS0z YWM0LWFlZTYtYzQ3NmE4ZTBmNzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0B6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqtYUrwfaRs13IFTExJOu0QCQeY7GS0yLt2Dije3sb5AKGoC+8nNV2E se1/G5Ai5/0ghVK6a81q7qz5xtC/EbHjyZJoSw3z8Yys77Cz93Ib1LN7NM/VsRx9 rKtISvfqs3DYy5jGf4vr898g1Th/aAogOmHQl51zlzd51RpGNrZ3FrDo6Sz7EDiQ mjh/PzFvviNUzglJTxqrPJ8fWDAEDhQzy78xkkUwDEFz2HeCc/yCRyT4v0RB0Fxm 524liLoU4BPetBpMAGyM/D4N+Vm4ft+q0E9Z/gPcOnyQf5hqjWjCyhBD4O17Mpkc o7t1TJOxuQ0Twnmt6MAZHRRSWlMCMUI= -----END CERTIFICATE-----Generated at Wed Nov 5 00:51:08 2025 by rpki-client