$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8522d5d-2fb5-3dff-a48a-7321eb4db5e0.roa File: d8522d5d-2fb5-3dff-a48a-7321eb4db5e0.roa (raw, json) Hash identifier: BJnHoUNe8Xp1XFoza/3dbAHzttlSZoOpItA0q6G3Sng= Subject key identifier: 4F:E9:C5:D8:A9:7A:DD:E7:15:AD:7C:D2:31:B9:32:E6:D7:80:9A:30 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BBFA5AE442F9E7BE6228F4080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8522d5d-2fb5-3dff-a48a-7321eb4db5e0.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 20940 IP address blocks: 23.75.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:ae:44:2f:9e:7b:e6:22:8f:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=249bfbfe-2aa7-4939-8192-068e5e05a963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ef:da:0a:9a:75:f7:36:6e:44:9e:56:70:2d: bb:82:c7:77:87:a3:5e:75:70:3d:24:54:63:e6:bb: 86:e7:f6:23:ac:a3:93:79:ad:95:69:d3:e5:e4:77: 97:16:e7:6b:a6:09:e6:e8:a1:08:ce:4f:3a:e2:bd: 2a:42:90:57:83:e0:3c:41:b1:77:25:c8:33:bc:6d: 75:72:2c:f0:76:8c:76:4a:af:77:c1:d4:8c:9f:e1: 3c:b8:18:6d:b2:1c:33:e5:ca:e8:9e:df:20:9b:5f: 78:9a:a4:36:90:90:7b:b2:03:9d:93:86:a4:12:19: 84:d6:e6:59:71:9f:ce:14:bb:a2:32:a9:51:4c:0a: 4c:0f:46:f7:f0:8b:62:c3:a4:71:1d:1a:1c:57:1e: 1c:57:ab:e6:11:29:ad:39:65:40:3a:05:03:e5:76: 4c:b3:14:f9:b8:29:16:48:aa:16:ec:07:db:14:39: a9:b2:8e:1e:3e:4d:03:96:4d:6a:0e:48:90:16:94: 5f:bb:e8:d8:c0:66:aa:90:33:e1:c0:f5:b4:37:47: 56:32:8e:ed:6c:d3:59:06:a6:62:32:58:77:f6:01: 09:0f:de:f5:d2:00:02:56:f0:15:1b:7d:26:c5:85: 0d:7d:e4:81:d2:a0:5c:c6:b1:69:3a:e7:bc:b4:7c: 23:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E9:C5:D8:A9:7A:DD:E7:15:AD:7C:D2:31:B9:32:E6:D7:80:9A:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8522d5d-2fb5-3dff-a48a-7321eb4db5e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.75.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:2b:ed:18:27:b8:d9:36:9a:56:e3:30:5c:a9:66:2b:dd:f8: c1:7f:a6:81:5f:3f:b8:5b:e6:a5:fd:14:ff:a0:dd:0d:9e:a2: 0d:64:0b:a2:f3:83:08:7c:26:61:48:3d:29:f0:9c:e7:8b:af: 8b:67:91:a5:90:25:89:08:6c:26:f4:25:98:b2:cb:31:e3:93: a7:e0:ef:57:e3:de:b9:ec:f4:52:06:0d:a4:2c:91:80:bb:d3: 5b:c5:91:8e:e3:04:d9:db:9b:c3:95:30:8c:8f:76:04:77:01: 0a:13:66:80:ea:52:b6:e7:c5:c7:be:ab:53:a2:e8:5d:dd:dc: 34:62:8f:03:6a:f6:49:e9:6e:b8:11:52:93:36:4f:42:49:c0: 26:e1:a8:33:30:ff:2a:fa:76:41:b6:c1:95:15:d4:d0:51:b5: 8d:c1:1c:5a:7e:2f:64:d3:08:4a:d2:3d:44:1c:de:b2:67:56: f2:45:58:93:50:1b:a9:ac:d9:20:38:b1:82:fc:ca:43:02:bd: b0:f6:86:6f:e3:ba:5f:41:f5:60:69:03:a1:56:e5:9a:26:fd: 4a:4a:30:72:43:d6:b3:f2:27:2e:b4:59:19:e5:2e:06:22:d2: 10:d7:ee:ee:c3:d9:a4:89:f4:3b:a4:6f:0e:c5:c5:93:a0:28: 4d:ab:02:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pa5EL5575iKPQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MjQ5YmZiZmUtMmFhNy00OTM5LTgxOTItMDY4ZTVlMDVhOTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+/aCpp19zZuRJ5WcC27gsd3h6NedXA9JFRj 5ruG5/YjrKOTea2VadPl5HeXFudrpgnm6KEIzk864r0qQpBXg+A8QbF3JcgzvG11 cizwdox2Sq93wdSMn+E8uBhtshwz5cront8gm194mqQ2kJB7sgOdk4akEhmE1uZZ cZ/OFLuiMqlRTApMD0b38Itiw6RxHRocVx4cV6vmESmtOWVAOgUD5XZMsxT5uCkW SKoW7AfbFDmpso4ePk0Dlk1qDkiQFpRfu+jYwGaqkDPhwPW0N0dWMo7tbNNZBqZi Mlh39gEJD9710gACVvAVG30mxYUNfeSB0qBcxrFpOue8tHwj9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/pxdipet3nFa180jG5MubXgJowMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDg1MjJkNWQtMmZiNS0z ZGZmLWE0OGEtNzMyMWViNGRiNWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0sUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwr7RgnuNk2mlbjMFypZivd+MF/poFfP7hb5qX9FP+g3Q2eog1kC6Lz gwh8JmFIPSnwnOeLr4tnkaWQJYkIbCb0JZiyyzHjk6fg71fj3rns9FIGDaQskYC7 01vFkY7jBNnbm8OVMIyPdgR3AQoTZoDqUrbnxce+q1Oi6F3d3DRijwNq9knpbrgR UpM2T0JJwCbhqDMw/yr6dkG2wZUV1NBRtY3BHFp+L2TTCErSPUQc3rJnVvJFWJNQ G6ms2SA4sYL8ykMCvbD2hm/jul9B9WBpA6FW5Zom/UpKMHJD1rPyJy60WRnlLgYi 0hDX7u7D2aSJ9Dukbw7FxZOgKE2rAmU= -----END CERTIFICATE-----Generated at Tue Nov 4 22:17:52 2025 by rpki-client