$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/436f5959-9fd9-3733-9c65-ba6e17e35dd0.roa File: 436f5959-9fd9-3733-9c65-ba6e17e35dd0.roa (raw, json) Hash identifier: hpJL2BfDSzrNwMrIT10kiiDbEnsgpQOmr6vrFKpdysc= Subject key identifier: 42:98:0C:2E:97:66:CB:4D:CB:EB:4B:10:C8:D1:E9:01:62:DE:43:36 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584BB88D0D394986C1EEDD4EDE00 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/436f5959-9fd9-3733-9c65-ba6e17e35dd0.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 16815 IP address blocks: 23.239.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:0d:39:49:86:c1:ee:dd:4e:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=6366d1c5-18ab-4c22-8c4a-44fcc660d1ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:80:ef:52:d7:2e:cc:de:6c:87:38:a6:7f:9a: 49:79:f3:d3:58:93:3d:cb:18:99:08:19:c7:33:37: 97:31:67:e2:0d:49:e4:03:58:03:0b:a5:5f:18:19: d6:1a:06:a9:5c:b2:3a:f9:b5:cf:95:84:22:ab:9f: c3:f2:a2:f1:50:3b:30:34:7d:de:04:c2:d7:52:7d: 44:5f:da:11:ae:93:44:f3:cd:53:7c:59:f9:85:27: 55:65:81:73:b4:17:71:be:7b:28:22:e0:94:7d:74: 53:60:79:a0:bc:98:d6:0b:8b:d6:ad:9f:4e:b3:e8: a4:7d:4a:77:17:a0:dc:3e:f4:41:d0:6d:09:f6:af: 76:25:07:60:70:48:55:9f:67:59:26:ac:cd:82:dc: fe:7a:09:37:3f:89:46:50:02:c6:e2:ff:bf:9a:de: 6a:60:53:0c:12:c7:b0:af:41:ae:49:c9:39:71:9c: 9e:e8:9a:0a:01:c7:5c:0a:97:74:6f:59:0b:6f:a0: da:59:19:85:bc:95:66:d0:09:c5:7d:9e:e7:9f:11: 8a:45:62:8f:7a:43:2d:e9:b2:9f:41:fc:be:fb:b8: 51:05:35:de:41:ef:e7:12:69:2d:e4:82:7f:1f:b4: d3:74:d7:e9:79:fa:e1:5d:ce:19:f5:c9:69:93:98: 02:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:98:0C:2E:97:66:CB:4D:CB:EB:4B:10:C8:D1:E9:01:62:DE:43:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/436f5959-9fd9-3733-9c65-ba6e17e35dd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:7d:c2:ca:c6:b0:3e:c0:1e:17:a5:e3:fc:f4:9e:38:ea:65: b7:37:f6:21:8f:2c:55:52:aa:e1:6e:91:f8:42:e0:67:4a:cd: 6e:ab:32:e1:37:16:ef:80:40:09:d4:b5:3e:07:1f:bf:e3:17: 3c:64:fa:a6:22:b9:b9:cf:8e:2f:e8:16:7b:69:8f:88:24:d6: 54:33:9b:40:22:99:76:e5:28:2d:25:e6:bd:fb:b7:bb:81:60: 3b:f5:f8:33:e1:51:50:86:cc:e0:52:b8:1b:b6:5f:86:93:3e: 4b:14:ac:9a:71:93:57:ac:31:e0:21:0d:07:bc:fc:7b:ff:90: 15:be:96:ab:9f:49:eb:2d:38:80:33:11:a1:d4:26:d8:28:f5: a5:ea:23:f4:17:07:37:71:54:a7:d5:b3:cb:3a:dd:0d:e5:5a: ab:83:c3:ad:b2:8c:13:24:c4:ae:fc:f1:2d:25:06:b9:d7:22: 6d:aa:d7:4e:eb:78:37:0b:8d:6d:34:43:4f:94:1f:97:d8:12: d0:75:d7:83:7d:7a:a7:9d:76:72:1b:2c:4c:16:f2:3d:24:a3: 78:fd:b1:12:04:b9:e3:51:d1:16:df:e7:fd:54:c3:06:ef:fa: 21:72:37:5e:ba:0e:34:c4:18:cc:2d:c4:ce:b0:be:13:ec:de: f2:3a:20:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jQ05SYbB7t1O3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NjM2NmQxYzUtMThhYi00YzIyLThjNGEtNDRmY2M2NjBkMWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIDvUtcuzN5shzimf5pJefPTWJM9yxiZCBnH MzeXMWfiDUnkA1gDC6VfGBnWGgapXLI6+bXPlYQiq5/D8qLxUDswNH3eBMLXUn1E X9oRrpNE881TfFn5hSdVZYFztBdxvnsoIuCUfXRTYHmgvJjWC4vWrZ9Os+ikfUp3 F6DcPvRB0G0J9q92JQdgcEhVn2dZJqzNgtz+egk3P4lGUALG4v+/mt5qYFMMEsew r0GuSck5cZye6JoKAcdcCpd0b1kLb6DaWRmFvJVm0AnFfZ7nnxGKRWKPekMt6bKf Qfy++7hRBTXeQe/nEmkt5IJ/H7TTdNfpefrhXc4Z9clpk5gCeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKYDC6XZstNy+tLEMjR6QFi3kM2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNDM2ZjU5NTktOWZkOS0z NzMzLTljNjUtYmE2ZTE3ZTM1ZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF+/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM59wsrGsD7AHhel4/z0njjqZbc39iGPLFVSquFukfhC4GdKzW6rMuE3 Fu+AQAnUtT4HH7/jFzxk+qYiubnPji/oFntpj4gk1lQzm0AimXblKC0l5r37t7uB YDv1+DPhUVCGzOBSuBu2X4aTPksUrJpxk1esMeAhDQe8/Hv/kBW+lqufSestOIAz EaHUJtgo9aXqI/QXBzdxVKfVs8s63Q3lWquDw62yjBMkxK788S0lBrnXIm2q107r eDcLjW00Q0+UH5fYEtB114N9eqeddnIbLEwW8j0ko3j9sRIEueNR0Rbf5/1Uwwbv +iFyN166DjTEGMwtxM6wvhPs3vI6IHo= -----END CERTIFICATE-----Generated at Wed Nov 5 11:15:24 2025 by rpki-client