$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2effff6-0bd9-349b-9da4-258545b3732d.roa File: f2effff6-0bd9-349b-9da4-258545b3732d.roa (raw, json) Hash identifier: jdbBtfVz/NQGT501UEblcuhCp6LIjNSLO/1kYB86CnE= Subject key identifier: E4:68:E9:B8:23:DE:76:5D:C6:02:14:FD:37:0F:74:1E:A4:63:30:BF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BBFA5B3368594AD0BBF6E7D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2effff6-0bd9-349b-9da4-258545b3732d.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 20940 IP address blocks: 23.72.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:b3:36:85:94:ad:0b:bf:6e:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=21b71611-0899-4317-98d3-b0c2bdfa7bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:81:2e:23:67:b8:52:16:1d:a2:93:3e:09:ae: 2f:6e:30:4c:fd:ce:9b:f0:b5:a2:ab:15:27:3c:ad: d7:12:85:c5:9e:06:8e:e2:50:77:98:86:3b:f5:c4: 96:b5:6a:da:8b:8f:b6:e7:0e:3c:e1:42:95:98:4f: c2:b3:8c:cb:1c:21:79:bf:13:09:7e:a1:51:79:bb: b6:de:63:10:05:a6:00:92:01:44:17:da:e9:14:93: 2b:e3:1e:6b:45:f6:13:a3:d6:69:44:d3:fc:85:bb: 39:a5:17:0f:74:ef:bb:71:f4:0d:cf:a2:c9:06:8b: fc:51:a0:83:08:d4:48:ac:1f:2c:86:d6:cc:a8:fd: 10:ce:cd:26:46:19:f8:76:2e:d2:da:de:11:c8:66: 9c:3a:80:91:39:07:6b:cd:f8:4f:bd:04:e1:5d:25: e1:af:35:0c:24:1a:00:3b:1c:33:d5:90:f4:5b:55: 4a:b2:fe:a5:b2:97:a3:dd:e2:47:4d:79:52:99:83: 8d:d6:74:88:7a:1c:19:3d:7e:ef:03:92:47:b4:2e: af:97:c8:85:cc:c2:cd:a6:7a:b9:82:4f:6f:3b:40: 9a:b3:8a:34:39:ae:1f:6a:32:bf:57:1c:9f:27:f6: 79:6e:fe:d2:ae:b7:24:8e:04:3b:c5:ae:db:61:a7: 73:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:68:E9:B8:23:DE:76:5D:C6:02:14:FD:37:0F:74:1E:A4:63:30:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2effff6-0bd9-349b-9da4-258545b3732d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.72.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:32:cf:cb:d4:27:f5:9f:77:f4:76:2e:5d:19:eb:81:00:75: 3f:f4:2d:e6:c2:6b:37:bd:f1:26:68:88:5f:4f:58:95:5c:66: 8e:f6:b1:82:33:6a:f2:11:fb:1d:32:c5:b4:99:2d:9a:fc:7b: 9f:56:f4:17:66:7d:0e:32:ea:a7:21:6c:09:41:44:2d:d1:c6: 42:e2:03:5f:3b:8b:cf:3b:fa:ed:99:48:68:c6:8f:d9:32:51: 3a:3d:2a:9a:21:9d:16:a8:25:b8:ee:80:b4:d2:d6:f9:24:9d: 69:ab:f2:2c:0b:d0:ff:75:52:cf:de:b8:d1:ec:88:22:3d:77: 6e:1b:3b:15:e6:56:a3:15:b5:b3:c5:96:71:8b:28:09:93:89: c5:f2:c6:0f:be:99:4e:3b:74:bf:85:36:5e:58:7d:ab:b0:a8: 4c:4d:f8:f1:da:0b:35:d6:f7:88:66:ae:7d:3f:e5:21:af:1a: 2f:45:bf:00:b1:d5:c5:52:b6:df:e4:b8:26:3b:04:d7:d3:22: d0:51:68:a7:87:d9:ce:4f:d2:f9:a5:60:4d:e6:a9:e6:d5:80: 59:ba:e1:b1:43:e3:93:e3:43:c3:f8:8b:2d:92:96:85:50:ea: 6a:2e:07:4d:dd:6f:4d:9d:de:8f:e3:e1:d2:07:b0:96:4e:80: 20:83:b2:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pbM2hZStC79ufYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MjFiNzE2MTEtMDg5OS00MzE3LTk4ZDMtYjBjMmJkZmE3YmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14EuI2e4UhYdopM+Ca4vbjBM/c6b8LWiqxUn PK3XEoXFngaO4lB3mIY79cSWtWrai4+25w484UKVmE/Cs4zLHCF5vxMJfqFRebu2 3mMQBaYAkgFEF9rpFJMr4x5rRfYTo9ZpRNP8hbs5pRcPdO+7cfQNz6LJBov8UaCD CNRIrB8shtbMqP0Qzs0mRhn4di7S2t4RyGacOoCROQdrzfhPvQThXSXhrzUMJBoA Oxwz1ZD0W1VKsv6lspej3eJHTXlSmYON1nSIehwZPX7vA5JHtC6vl8iFzMLNpnq5 gk9vO0Cas4o0Oa4fajK/VxyfJ/Z5bv7SrrckjgQ7xa7bYadz+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORo6bgj3nZdxgIU/TcPdB6kYzC/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjJlZmZmZjYtMGJkOS0z NDliLTlkYTQtMjU4NTQ1YjM3MzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0hbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYyz8vUJ/Wfd/R2Ll0Z64EAdT/0LebCaze98SZoiF9PWJVcZo72sYIz avIR+x0yxbSZLZr8e59W9BdmfQ4y6qchbAlBRC3RxkLiA187i887+u2ZSGjGj9ky UTo9KpohnRaoJbjugLTS1vkknWmr8iwL0P91Us/euNHsiCI9d24bOxXmVqMVtbPF lnGLKAmTicXyxg++mU47dL+FNl5YfauwqExN+PHaCzXW94hmrn0/5SGvGi9FvwCx 1cVStt/kuCY7BNfTItBRaKeH2c5P0vmlYE3mqebVgFm64bFD45PjQ8P4iy2SloVQ 6mouB03db02d3o/j4dIHsJZOgCCDsjE= -----END CERTIFICATE-----Generated at Tue Nov 4 22:17:14 2025 by rpki-client