$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e17f18b1-52f6-32b0-adc7-5ca9eb503e95.roa File: e17f18b1-52f6-32b0-adc7-5ca9eb503e95.roa (raw, json) Hash identifier: GkBUj92lcDaQbuKacDi0jpGb+wBxa+w/DhJq4xSKxLo= Subject key identifier: E3:3D:13:D4:76:BE:B5:FB:F3:DC:52:F6:D0:7F:D4:35:AD:62:6A:88 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA0D26785CD1BC22C11A5E580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e17f18b1-52f6-32b0-adc7-5ca9eb503e95.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 20940 IP address blocks: 23.48.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:67:85:cd:1b:c2:2c:11:a5:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=a486845d-ec8b-40c3-8fbe-a5087e954bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3f:46:4f:f0:b8:df:7d:1c:8e:85:20:dd:0f: 12:90:ee:81:53:25:e0:c3:87:81:8d:79:55:1c:01: 9c:3b:fe:f0:39:92:fa:d8:b0:58:30:d9:70:dc:a0: 7a:4e:e9:61:7d:a2:3f:81:b8:eb:c6:d1:b4:5d:65: 8a:52:eb:3a:2b:fd:0c:f1:cd:f1:10:3a:10:b3:31: 3a:26:d1:06:e3:c6:e7:6f:30:8a:bc:2d:6e:e5:ac: a3:51:b6:60:d2:b0:c7:b8:c7:a4:ff:ee:66:b4:a9: 22:d0:3f:5a:b7:b5:8c:77:10:a5:64:2b:04:6c:c6: 27:3d:54:73:f6:80:1d:a8:f3:eb:0f:86:95:9c:c5: 5a:d9:83:78:e5:c0:86:18:c2:fe:35:bf:dc:3f:b7: f0:57:83:e6:4e:7d:44:2c:b6:b3:36:71:0d:cc:be: b9:67:91:d8:66:59:01:38:13:55:2a:8b:0f:39:39: 8b:f6:2d:d8:80:98:fa:66:53:22:44:6c:46:ae:70: 14:16:84:54:29:b8:62:09:eb:c1:b3:e7:bb:5d:fb: 2b:a9:f3:32:32:fa:53:c2:91:bc:af:6b:9a:a7:61: d3:ce:f3:ef:52:f1:0e:5d:9d:79:25:e7:85:ec:19: fb:8b:e8:2a:cd:ec:60:ad:2d:5d:46:0f:c1:54:41: 24:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3D:13:D4:76:BE:B5:FB:F3:DC:52:F6:D0:7F:D4:35:AD:62:6A:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e17f18b1-52f6-32b0-adc7-5ca9eb503e95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:4a:05:25:57:fc:73:51:a0:8b:e9:09:f6:1d:a1:10:94:f0: a6:ea:e7:7c:ed:8c:9a:12:9b:15:b4:55:31:a1:13:ee:6c:47: f6:aa:82:78:d0:92:9b:e8:c0:1e:54:84:14:90:b1:8d:06:f1: f2:a0:29:a8:27:e2:84:a7:50:4a:0a:13:5c:03:99:e2:89:c7: 52:2b:37:64:5b:26:1f:02:ed:04:89:85:be:4b:83:4a:11:e6: 06:4f:3b:95:81:02:51:bd:35:81:2d:cd:7a:2b:94:4a:b7:1e: 54:76:49:87:96:3b:f4:f0:71:f2:1b:2d:d8:e8:e2:50:d8:e1: c1:62:d6:e6:85:fc:dd:52:4f:00:7a:2f:c6:85:16:9c:a5:17: 77:31:88:5b:1a:0f:e8:88:e0:4d:4b:fd:c1:c7:03:23:bb:d4: 17:57:97:1b:0f:ec:6d:43:b6:6a:ef:46:fc:e8:b9:65:2e:86: 19:0c:0a:19:a5:4f:2f:de:1c:de:c8:cd:ee:10:db:44:d2:77: 31:da:2d:85:9f:73:aa:76:2c:bd:c1:f3:54:a5:70:b2:ad:a2: 35:ba:6f:0e:7d:b9:f1:c1:b7:30:2e:c6:da:20:78:d8:d1:91: 49:81:36:f7:67:eb:40:f2:72:ba:95:f0:53:70:38:e4:04:ba: 51:39:34:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0meFzRvCLBGl5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YTQ4Njg0NWQtZWM4Yi00MGMzLThmYmUtYTUwODdlOTU0YmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj9GT/C4330cjoUg3Q8SkO6BUyXgw4eBjXlV HAGcO/7wOZL62LBYMNlw3KB6TulhfaI/gbjrxtG0XWWKUus6K/0M8c3xEDoQszE6 JtEG48bnbzCKvC1u5ayjUbZg0rDHuMek/+5mtKki0D9at7WMdxClZCsEbMYnPVRz 9oAdqPPrD4aVnMVa2YN45cCGGML+Nb/cP7fwV4PmTn1ELLazNnENzL65Z5HYZlkB OBNVKosPOTmL9i3YgJj6ZlMiRGxGrnAUFoRUKbhiCevBs+e7XfsrqfMyMvpTwpG8 r2uap2HTzvPvUvEOXZ15JeeF7Bn7i+gqzexgrS1dRg/BVEEkRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOM9E9R2vrX789xS9tB/1DWtYmqIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTE3ZjE4YjEtNTJmNi0z MmIwLWFkYzctNWNhOWViNTAzZTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNKBSVX/HNRoIvpCfYdoRCU8Kbq53ztjJoSmxW0VTGhE+5sR/aqgnjQ kpvowB5UhBSQsY0G8fKgKagn4oSnUEoKE1wDmeKJx1IrN2RbJh8C7QSJhb5Lg0oR 5gZPO5WBAlG9NYEtzXorlEq3HlR2SYeWO/TwcfIbLdjo4lDY4cFi1uaF/N1STwB6 L8aFFpylF3cxiFsaD+iI4E1L/cHHAyO71BdXlxsP7G1DtmrvRvzouWUuhhkMChml Ty/eHN7Ize4Q20TSdzHaLYWfc6p2LL3B81SlcLKtojW6bw59ufHBtzAuxtogeNjR kUmBNvdn60DycrqV8FNwOOQEulE5NHc= -----END CERTIFICATE-----Generated at Wed Nov 5 00:50:37 2025 by rpki-client