$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dca916ca-ad90-3431-af73-4909a30fd958.roa File: dca916ca-ad90-3431-af73-4909a30fd958.roa (raw, json) Hash identifier: XbP/nCV3R8tXLl3m5NNvoVh+7GOFWQh08Bz/ValH57k= Subject key identifier: A4:FF:47:3E:23:24:CE:49:EC:F5:D8:98:3E:83:9A:5E:2D:67:8C:52 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BB45D0DC96BFC672FEB454080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dca916ca-ad90-3431-af73-4909a30fd958.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 20940 IP address blocks: 23.3.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:0d:c9:6b:fc:67:2f:eb:45:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=9cbcc254-2ff6-4eff-ba2f-c5486cfe3ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:a7:64:c8:fd:4a:08:94:fb:4f:bd:94:39: 46:a4:53:b2:a5:0a:1f:b8:25:f0:06:f1:94:72:42: e9:62:20:6f:da:1d:9b:0c:f7:88:92:e1:2d:c8:51: 03:e7:2b:14:11:9a:d9:a2:84:09:0d:00:9c:fc:76: 5a:81:28:4c:13:ce:b8:9e:6a:66:7e:af:5c:4a:cb: 29:c8:37:06:5d:48:ac:bb:5d:f8:d5:51:d2:22:58: 1a:c8:e2:92:ba:d1:c4:1d:18:15:12:b2:25:29:dc: 10:99:a0:b5:af:61:49:1b:9e:ee:48:1d:29:ef:23: 7e:c2:6d:b4:74:52:70:f4:bb:99:17:f5:e7:d7:0a: 1f:86:33:d5:dd:cc:26:58:b4:47:7f:8a:23:07:88: da:08:8a:93:f2:17:7f:1c:bf:97:33:b4:8a:60:33: 84:89:ee:3f:ea:fd:3d:1d:73:5c:3e:b2:e5:18:c6: 94:64:d1:15:b9:c5:51:bb:7d:80:bd:55:35:b5:e6: 89:fa:bd:be:55:0b:ea:90:7b:aa:2c:43:4e:00:85: d4:4d:83:40:10:3e:b2:ed:c3:f1:aa:1d:88:4e:c1: 88:72:58:d6:f5:95:69:7e:d9:6a:a1:a7:d6:c9:cf: 83:b8:3a:97:a4:3f:70:64:2a:a5:a9:6f:85:80:ef: f5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FF:47:3E:23:24:CE:49:EC:F5:D8:98:3E:83:9A:5E:2D:67:8C:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dca916ca-ad90-3431-af73-4909a30fd958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:3d:3e:50:88:5e:23:71:d8:1d:59:2a:4b:f7:50:dd:e3:a0: 50:17:8f:5e:24:ce:52:01:9a:3b:ad:57:a6:69:ee:cc:24:00: ba:e0:a8:c7:47:b5:71:f4:ff:e5:0c:ab:06:af:0a:7b:9c:2c: f7:39:3e:1a:2f:e0:98:eb:ac:92:0c:f2:6c:8e:8a:84:61:34: 0c:3a:86:f6:27:68:50:4c:cd:56:3f:07:2c:6f:47:68:53:83: 34:af:7a:a3:4d:5d:4f:1e:c1:22:7e:b0:c0:13:6a:cb:d4:61: 5c:f0:41:ef:c8:02:b8:7a:b6:8b:66:c1:17:82:84:75:84:77: 40:43:c1:4e:74:0c:a5:e4:92:76:55:b4:77:af:70:cb:81:e1: af:f8:1c:56:57:92:c9:f7:60:ac:37:0f:2e:c5:5a:05:d1:f9: f5:be:b4:53:0d:80:a8:52:04:b9:79:97:2d:36:68:e2:aa:b5: df:22:7c:96:01:8d:fb:9a:a1:6f:99:15:ee:4a:5c:ed:8b:56: 50:37:70:fa:1f:ca:c3:9b:a3:63:34:a1:28:6f:df:79:84:61: e9:af:59:bc:2b:85:f6:58:9b:ed:60:5d:3b:a8:87:18:a5:61: 94:47:b9:2c:b7:8e:ae:13:f4:8c:ef:8b:fe:d6:b5:5b:1a:d8: bb:46:a2:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XQ3Ja/xnL+tFQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk OWNiY2MyNTQtMmZmNi00ZWZmLWJhMmYtYzU0ODZjZmUzY2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulqnZMj9SgiU+0+9lDlGpFOypQofuCXwBvGU ckLpYiBv2h2bDPeIkuEtyFED5ysUEZrZooQJDQCc/HZagShME864nmpmfq9cSssp yDcGXUisu1341VHSIlgayOKSutHEHRgVErIlKdwQmaC1r2FJG57uSB0p7yN+wm20 dFJw9LuZF/Xn1wofhjPV3cwmWLRHf4ojB4jaCIqT8hd/HL+XM7SKYDOEie4/6v09 HXNcPrLlGMaUZNEVucVRu32AvVU1teaJ+r2+VQvqkHuqLENOAIXUTYNAED6y7cPx qh2ITsGIcljW9ZVpftlqoafWyc+DuDqXpD9wZCqlqW+FgO/1TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKT/Rz4jJM5J7PXYmD6Dml4tZ4xSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGNhOTE2Y2EtYWQ5MC0z NDMxLWFmNzMtNDkwOWEzMGZkOTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwNEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEU9PlCIXiNx2B1ZKkv3UN3joFAXj14kzlIBmjutV6Zp7swkALrgqMdH tXH0/+UMqwavCnucLPc5Phov4JjrrJIM8myOioRhNAw6hvYnaFBMzVY/ByxvR2hT gzSveqNNXU8ewSJ+sMATasvUYVzwQe/IArh6totmwReChHWEd0BDwU50DKXkknZV tHevcMuB4a/4HFZXksn3YKw3Dy7FWgXR+fW+tFMNgKhSBLl5ly02aOKqtd8ifJYB jfuaoW+ZFe5KXO2LVlA3cPofysObo2M0oShv33mEYemvWbwrhfZYm+1gXTuohxil YZRHuSy3jq4T9Izvi/7WtVsa2LtGouw= -----END CERTIFICATE-----Generated at Wed Nov 5 07:27:24 2025 by rpki-client