$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f36c3afe-417f-3e71-b37d-a2433d90da74.roa File: f36c3afe-417f-3e71-b37d-a2433d90da74.roa (raw, json) Hash identifier: kxE9aO56IxDH8MFXYDiwYxqNq6lDYLFLD9psy9XruLI= Subject key identifier: 2F:C0:48:D2:55:6E:9F:22:C1:9A:DB:21:88:1F:10:D9:8D:99:01:FB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BBFA5B0F6454EA7631F31FB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f36c3afe-417f-3e71-b37d-a2433d90da74.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16625 IP address blocks: 23.46.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:b0:f6:45:4e:a7:63:1f:31:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=efb3f6c2-98b6-4618-8d40-7d7a20c928ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:de:d8:ed:ff:1d:b8:2b:e4:65:f2:2a:46:bc: 7d:0c:89:70:39:eb:61:3e:24:ed:75:b2:b4:7f:f9: cc:63:22:64:bb:6f:cd:54:77:7f:f3:e7:03:6f:a1: 4f:8f:8e:8f:08:2c:01:78:b3:4f:4b:f1:57:d2:6b: 13:7d:1d:68:6f:a0:1d:b1:e8:0b:6c:96:2c:6f:10: 61:ec:8e:f7:b8:0e:64:c6:f9:bc:54:2f:4c:72:66: 03:2a:66:e2:9a:dc:93:d6:70:d0:58:45:85:a6:22: 56:31:7d:b9:33:b2:85:59:9b:b1:cb:2a:85:de:60: fa:f2:72:e4:a0:5b:d0:c6:a5:69:18:73:68:d5:f8: 10:d4:dd:9c:78:8c:56:3f:96:91:47:41:f3:c1:74: 21:44:f7:78:fb:10:4d:ca:65:8f:35:e3:cd:80:c1: 7f:0d:d8:b3:8a:75:86:ed:45:ee:2a:79:53:65:fa: e6:a8:34:df:ae:01:2e:fc:e8:ce:28:53:1d:0e:5f: 4b:ae:68:73:1d:45:21:1d:1e:0d:8b:8b:0e:ab:90: f7:50:01:98:96:ab:41:ea:18:4e:92:b1:2b:12:89: 7e:0f:87:ea:29:39:f0:01:aa:51:06:58:15:1a:17: 05:28:f0:9d:6d:9a:74:01:0e:dd:ae:c2:97:62:25: 7f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C0:48:D2:55:6E:9F:22:C1:9A:DB:21:88:1F:10:D9:8D:99:01:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f36c3afe-417f-3e71-b37d-a2433d90da74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.46.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:2e:b8:7e:a1:b0:07:48:60:6e:a7:37:60:af:80:75:eb:2a: 08:51:7c:76:b1:2a:f7:6f:5c:6b:f2:d7:7f:e1:4d:5f:f4:9b: 11:f7:87:f0:15:8b:55:da:f1:43:b9:81:a5:28:f3:b9:ec:db: fe:b2:11:fb:5b:20:1a:76:16:92:e4:62:76:80:25:e5:2d:26: 11:2d:3a:cf:da:d4:36:2b:93:76:10:ae:22:92:fa:43:f1:8b: 08:cd:bd:f9:86:33:ee:d9:e7:31:e7:a4:08:e3:40:16:bd:7f: 64:a2:ee:a9:54:90:66:01:a1:b9:41:f4:c7:a6:0b:9f:47:e4: db:68:7c:36:0c:de:27:5f:d8:fb:9f:e1:27:24:fd:84:06:1d: b5:ff:c2:84:db:77:72:90:71:19:76:98:77:c1:e1:68:24:9c: 59:02:b9:84:60:b3:bb:00:af:01:49:26:97:ba:3a:14:3f:20: 40:29:58:d0:06:e0:be:c0:fd:f8:a8:f0:44:49:24:e9:67:76: b5:14:4b:36:65:a1:69:29:08:ed:0f:66:75:a5:51:22:3f:97: a0:6d:6d:94:7b:04:58:8a:52:1d:da:2a:95:bb:b1:96:ec:4b: a6:e5:1a:bc:19:41:02:00:f4:9d:b8:37:94:f7:da:76:82:ef: bd:3b:e1:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pbD2RU6nYx8x+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk ZWZiM2Y2YzItOThiNi00NjE4LThkNDAtN2Q3YTIwYzkyOGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7t7Y7f8duCvkZfIqRrx9DIlwOethPiTtdbK0 f/nMYyJku2/NVHd/8+cDb6FPj46PCCwBeLNPS/FX0msTfR1ob6AdsegLbJYsbxBh 7I73uA5kxvm8VC9McmYDKmbimtyT1nDQWEWFpiJWMX25M7KFWZuxyyqF3mD68nLk oFvQxqVpGHNo1fgQ1N2ceIxWP5aRR0HzwXQhRPd4+xBNymWPNePNgMF/DdizinWG 7UXuKnlTZfrmqDTfrgEu/OjOKFMdDl9LrmhzHUUhHR4Ni4sOq5D3UAGYlqtB6hhO krErEol+D4fqKTnwAapRBlgVGhcFKPCdbZp0AQ7drsKXYiV/KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/ASNJVbp8iwZrbIYgfENmNmQH7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjM2YzNhZmUtNDE3Zi0z ZTcxLWIzN2QtYTI0MzNkOTBkYTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFy5UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIuuH6hsAdIYG6nN2CvgHXrKghRfHaxKvdvXGvy13/hTV/0mxH3h/AV i1Xa8UO5gaUo87ns2/6yEftbIBp2FpLkYnaAJeUtJhEtOs/a1DYrk3YQriKS+kPx iwjNvfmGM+7Z5zHnpAjjQBa9f2Si7qlUkGYBoblB9MemC59H5NtofDYM3idf2Puf 4Sck/YQGHbX/woTbd3KQcRl2mHfB4WgknFkCuYRgs7sArwFJJpe6OhQ/IEApWNAG 4L7A/fio8ERJJOlndrUUSzZloWkpCO0PZnWlUSI/l6BtbZR7BFiKUh3aKpW7sZbs S6blGrwZQQIA9J24N5T32naC77074RM= -----END CERTIFICATE-----Generated at Tue Nov 4 21:01:35 2025 by rpki-client