$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0f6c9aa4-6e5a-3441-b22a-975cabc9fed1.roa File: 0f6c9aa4-6e5a-3441-b22a-975cabc9fed1.roa (raw, json) Hash identifier: RsPbmxnzb38KGrwW695UVB2UiTS5Feo+IRPa0g159D4= Subject key identifier: 07:EE:B8:A1:91:0E:01:C6:EE:AD:A8:E5:F6:33:88:B0:33:7D:53:24 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584AECC127BD87680832C8300040 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0f6c9aa4-6e5a-3441-b22a-975cabc9fed1.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 23.239.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:27:bd:87:68:08:32:c8:30:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=73fa1d22-c4e8-46c0-9d45-feb28342553f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:da:7b:05:80:09:16:5c:16:37:a4:db:9e:27: ae:55:f5:87:57:4d:bc:4c:23:9c:1f:b7:66:9f:64: f3:14:10:39:cf:9b:c3:d4:cc:bb:9f:84:c8:89:69: 16:2a:5a:f2:41:c2:47:da:39:63:bb:c5:1f:75:33: 5f:28:49:e6:90:14:e7:ef:af:b9:55:9d:21:96:dc: 60:fa:27:ec:79:8c:a8:fc:f0:e6:18:9c:ff:b7:fe: df:89:52:b8:cb:c0:a8:92:fa:f3:dd:8e:ec:fa:36: b8:8e:12:d3:bb:0b:c9:78:f0:71:98:f6:f9:56:ab: ab:83:02:44:d3:73:65:3e:ec:79:54:e8:bd:7a:ef: b6:cc:c8:bb:49:74:7a:b2:cc:3e:28:63:9c:4d:bc: 7e:19:91:99:d9:fc:3c:82:04:50:1a:60:12:04:8e: 24:57:4a:1f:6f:0d:26:d6:b6:d8:7c:d8:94:8a:73: 8e:10:ff:f7:01:d3:8a:bc:79:5c:65:cb:6f:20:15: b1:8b:3b:7b:30:9f:85:da:cb:81:10:4f:01:43:da: 25:9e:74:13:3f:66:b0:23:64:04:e8:4a:29:ac:88: 1b:f6:3a:85:40:bb:87:fe:ce:1f:41:28:7c:b9:93: 19:e0:da:ab:1a:f5:27:44:d2:8b:b3:af:ed:87:12: 27:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:EE:B8:A1:91:0E:01:C6:EE:AD:A8:E5:F6:33:88:B0:33:7D:53:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0f6c9aa4-6e5a-3441-b22a-975cabc9fed1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:1a:da:88:9f:f6:50:c6:ea:5b:68:50:4a:a5:f8:ae:64:4c: a5:41:ff:d4:e8:ac:f7:4e:18:12:5e:8a:93:16:e0:b8:0b:26: 16:53:f3:68:e9:e8:ac:a2:d9:d4:a7:1d:05:eb:71:67:0c:78: 6c:77:2c:2f:c4:e9:51:8d:f5:61:f2:ba:6b:ca:77:9a:03:af: fa:98:63:77:b0:a1:1c:f2:b6:6c:9c:57:02:ef:d0:10:c5:58: 4b:ee:dc:f1:ef:c3:42:4f:52:04:9a:fe:10:52:e9:b0:b7:f2: 05:61:56:0f:47:d2:58:bc:28:3d:b1:d5:c4:a6:de:f6:9a:5b: d0:b8:96:19:9a:52:22:56:3b:47:6a:a9:2a:31:72:1b:ec:25: cf:be:64:6b:02:87:1a:96:08:b3:76:ea:20:93:c8:f3:94:ff: f5:21:4c:96:08:ac:b6:42:fb:4d:56:8a:03:5f:70:cc:c2:2d: a5:d6:51:70:20:72:1b:04:31:01:06:30:06:a4:5e:5e:ac:cc: b0:34:45:c2:7a:0e:39:2a:a4:34:d7:94:6b:b2:45:21:11:e2: e8:4b:56:d8:f1:02:e0:82:9f:1b:15:80:8a:c9:86:36:cb:7c: a6:21:53:7d:41:d2:a8:d4:e7:da:c0:a7:4e:17:a2:3e:2f:92: c7:9a:47:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswSe9h2gIMsgwAEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NzNmYTFkMjItYzRlOC00NmMwLTlkNDUtZmViMjgzNDI1NTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltp7BYAJFlwWN6TbnieuVfWHV028TCOcH7dm n2TzFBA5z5vD1My7n4TIiWkWKlryQcJH2jlju8UfdTNfKEnmkBTn76+5VZ0hltxg +ifseYyo/PDmGJz/t/7fiVK4y8Cokvrz3Y7s+ja4jhLTuwvJePBxmPb5VqurgwJE 03NlPux5VOi9eu+2zMi7SXR6ssw+KGOcTbx+GZGZ2fw8ggRQGmASBI4kV0ofbw0m 1rbYfNiUinOOEP/3AdOKvHlcZctvIBWxizt7MJ+F2suBEE8BQ9olnnQTP2awI2QE 6EoprIgb9jqFQLuH/s4fQSh8uZMZ4NqrGvUnRNKLs6/thxInyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfuuKGRDgHG7q2o5fYziLAzfVMkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMGY2YzlhYTQtNmU1YS0z NDQxLWIyMmEtOTc1Y2FiYzlmZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADca2oif9lDG6ltoUEql+K5kTKVB/9TorPdOGBJeipMW4LgLJhZT82jp 6Kyi2dSnHQXrcWcMeGx3LC/E6VGN9WHyumvKd5oDr/qYY3ewoRzytmycVwLv0BDF WEvu3PHvw0JPUgSa/hBS6bC38gVhVg9H0li8KD2x1cSm3vaaW9C4lhmaUiJWO0dq qSoxchvsJc++ZGsChxqWCLN26iCTyPOU//UhTJYIrLZC+01WigNfcMzCLaXWUXAg chsEMQEGMAakXl6szLA0RcJ6DjkqpDTXlGuyRSER4uhLVtjxAuCCnxsVgIrJhjbL fKYhU31B0qjU59rAp04Xoj4vkseaRyI= -----END CERTIFICATE-----Generated at Wed Nov 5 14:55:24 2025 by rpki-client