$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f23db843-7c81-3761-aa09-2ac6c393b0ee.roa File: f23db843-7c81-3761-aa09-2ac6c393b0ee.roa (raw, json) Hash identifier: DFkCZ76Afn8ukF8Qb/ck1nJvZJkomTfQbMft2j0tksY= Subject key identifier: C7:E7:F0:5E:18:C8:97:72:B0:0C:B7:D4:D8:C6:A6:01:86:8F:36:A6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BB45D3D776318017323266880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f23db843-7c81-3761-aa09-2ac6c393b0ee.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 16625 IP address blocks: 23.65.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:3d:77:63:18:01:73:23:26:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=4ca06ed9-f8cd-40f7-9e41-97abf96cd8f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3e:59:b6:87:a0:15:d6:32:80:17:70:81:8f: 75:e6:0b:54:b5:76:94:03:9b:43:db:15:e8:1f:5d: ff:fc:92:b7:a8:03:7d:8f:d1:1a:fd:71:70:1f:0d: 2b:b3:14:23:00:7f:44:56:2b:b8:d7:6a:8e:06:5d: d7:86:6d:e9:a6:eb:1c:0c:ba:81:e3:7a:61:b8:89: 40:7e:2b:e8:9c:8d:87:27:a8:a1:0c:48:f6:74:62: 5f:da:44:8d:da:67:63:08:58:69:a9:6f:57:35:5a: 55:e7:62:48:a0:2d:de:8d:da:5b:1a:93:2a:36:87: c5:82:4f:43:22:97:f9:12:12:ee:fb:9d:f9:5f:b1: 80:d2:29:20:df:2d:3a:4f:40:bb:00:61:40:a7:33: ae:58:6f:ac:2d:33:b5:87:48:f3:ee:b9:1d:cf:77: d0:ed:39:d7:0f:c6:0c:6e:23:e6:0d:6e:11:5f:a8: 1e:70:3a:d3:9d:68:ae:88:6f:fb:3e:db:65:8f:8f: 66:03:af:0f:15:b0:8c:05:37:c9:58:c5:5e:63:69: 37:16:b4:7d:30:c6:10:e3:66:47:06:6f:fe:11:8f: d3:0e:7d:16:69:b1:57:a7:08:90:e2:8d:6c:46:6a: 34:54:66:3a:ec:ac:df:43:69:14:f1:de:65:21:ca: 38:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E7:F0:5E:18:C8:97:72:B0:0C:B7:D4:D8:C6:A6:01:86:8F:36:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f23db843-7c81-3761-aa09-2ac6c393b0ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.65.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:b5:eb:77:08:b7:68:bb:31:79:ea:69:09:ce:b9:f1:6d:1f: 3d:6c:51:ec:df:3b:11:9c:50:67:30:c9:9e:08:9d:ea:56:d1: e0:d0:e7:e0:1c:c1:90:e1:4a:b9:57:03:0a:e3:53:4e:99:8d: 44:02:c3:2c:84:4c:e7:b2:1e:83:af:f4:cb:5f:38:0a:65:40: ca:a4:b7:c4:b4:d8:86:0c:09:c0:c7:34:cc:e4:6b:0d:67:04: 8f:e7:13:11:9e:eb:be:9d:15:45:21:b1:7c:88:fc:ba:48:fd: aa:a9:cd:4d:d7:f0:35:1c:44:f7:53:87:c5:32:42:91:b5:fc: 35:bd:3c:f6:ed:8a:97:7f:72:c4:b4:71:67:34:87:e3:ce:49: bc:33:c2:e7:26:fb:b1:34:35:3e:69:e2:3f:eb:cf:09:a0:94: da:e6:ee:34:6a:14:7d:45:c9:09:fd:4b:05:ae:eb:ee:44:a9: 33:08:5d:d7:b9:fb:e4:ad:75:6c:30:99:8e:16:8c:7b:89:84: 93:d1:f3:80:99:5c:99:9b:fb:1d:c2:91:4d:11:5d:42:f7:a6: ba:de:3f:34:ef:36:b2:78:7c:17:80:fb:f5:f9:f2:ec:23:57: 8b:89:8c:84:66:1f:0f:ba:23:d1:ff:2c:4d:19:47:56:e2:fa: 0b:84:b3:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XT13YxgBcyMmaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk NGNhMDZlZDktZjhjZC00MGY3LTllNDEtOTdhYmY5NmNkOGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD5ZtoegFdYygBdwgY915gtUtXaUA5tD2xXo H13//JK3qAN9j9Ea/XFwHw0rsxQjAH9EViu412qOBl3Xhm3ppuscDLqB43phuIlA fivonI2HJ6ihDEj2dGJf2kSN2mdjCFhpqW9XNVpV52JIoC3ejdpbGpMqNofFgk9D Ipf5EhLu+535X7GA0ikg3y06T0C7AGFApzOuWG+sLTO1h0jz7rkdz3fQ7TnXD8YM biPmDW4RX6gecDrTnWiuiG/7Pttlj49mA68PFbCMBTfJWMVeY2k3FrR9MMYQ42ZH Bm/+EY/TDn0WabFXpwiQ4o1sRmo0VGY67KzfQ2kU8d5lIco4YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfn8F4YyJdysAy31NjGpgGGjzamMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjIzZGI4NDMtN2M4MS0z NzYxLWFhMDktMmFjNmMzOTNiMGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF0EAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+163cIt2i7MXnqaQnOufFtHz1sUezfOxGcUGcwyZ4InepW0eDQ5+Ac wZDhSrlXAwrjU06ZjUQCwyyETOeyHoOv9MtfOAplQMqkt8S02IYMCcDHNMzkaw1n BI/nExGe676dFUUhsXyI/LpI/aqpzU3X8DUcRPdTh8UyQpG1/DW9PPbtipd/csS0 cWc0h+POSbwzwucm+7E0NT5p4j/rzwmglNrm7jRqFH1FyQn9SwWu6+5EqTMIXde5 ++StdWwwmY4WjHuJhJPR84CZXJmb+x3CkU0RXUL3prrePzTvNrJ4fBeA+/X58uwj V4uJjIRmHw+6I9H/LE0ZR1bi+guEsxI= -----END CERTIFICATE-----Generated at Tue Nov 4 21:01:27 2025 by rpki-client