$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8ec81666-b29e-37f5-93fa-ec08312dd538.roa File: 8ec81666-b29e-37f5-93fa-ec08312dd538.roa (raw, json) Hash identifier: mbdB3xVxpUQTnWoLf6eu/h1qTQ86hVX+ag2TDbG2kn4= Subject key identifier: 4A:43:9A:DB:44:F9:C3:20:CC:32:AA:B9:9A:D8:AB:6C:56:CE:2A:15 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584BB88D0D230D61DB6A477D1640 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8ec81666-b29e-37f5-93fa-ec08312dd538.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 21866 IP address blocks: 23.239.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:0d:23:0d:61:db:6a:47:7d:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=d80acfff-8db7-4e76-81e9-e4c6d5932b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3b:71:9c:f8:ca:af:3c:2a:c5:63:06:7e:fd: 4d:6b:3a:87:5e:a3:0f:22:5b:a0:10:b5:ea:55:6f: be:b8:5b:d3:88:04:43:2e:79:6b:b9:32:f1:f4:35: 4e:f8:da:16:cf:83:6d:a3:75:b3:77:96:ce:3a:4a: 64:19:32:6e:0b:c1:df:c9:c3:08:19:62:2f:16:02: 86:b0:3a:a2:82:fe:7e:84:af:4d:b6:89:ab:6a:ad: dc:86:43:d7:8a:9c:ba:5c:f3:cf:9b:35:ff:88:07: b0:ba:d7:7a:ce:28:4a:8f:a7:fc:51:c3:ce:28:3f: 05:d0:dc:33:f9:92:f9:31:d4:f8:7d:96:ed:08:3c: 0f:9a:b3:6a:3a:24:0f:35:14:48:b8:4b:8e:9d:37: 43:6e:f3:fc:8c:63:b9:f0:37:72:b2:8a:22:2d:0e: 39:82:b7:f2:2e:fa:0e:05:43:b5:77:25:2d:00:01: 9a:a6:03:46:e9:99:72:6b:00:4e:cd:0a:4f:c0:35: 14:3b:54:a2:1b:a9:3f:e9:2c:74:2b:3c:7c:93:7e: 60:3f:ea:a8:cc:56:f9:e8:39:95:af:7b:03:15:20: b6:f3:74:b3:34:15:36:7f:2b:e6:f5:a3:a0:94:e1: 4b:9a:ce:0a:32:14:cc:09:42:96:5b:ce:51:d6:35: 52:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:43:9A:DB:44:F9:C3:20:CC:32:AA:B9:9A:D8:AB:6C:56:CE:2A:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8ec81666-b29e-37f5-93fa-ec08312dd538.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:1e:9c:25:2b:0a:83:3b:9f:2e:9a:d4:6f:52:49:5a:d2:9c: a4:21:e7:4d:6b:a6:2d:47:c5:4b:b8:41:25:ca:ab:ac:1f:fc: c2:4e:62:38:09:9b:0e:46:40:07:f9:ac:25:88:48:51:4c:4a: 0c:d0:ee:82:99:57:35:a1:8d:38:51:ae:ce:17:c3:b4:be:c7: ea:d5:f6:6b:db:e0:b5:39:04:4f:99:10:97:5d:96:d1:6a:7c: da:7c:82:0f:fc:b4:90:e5:73:04:80:4b:b6:67:16:3a:9c:c3: dd:3b:9f:0d:82:7a:b2:d3:4e:b1:ea:a8:48:ae:3f:cb:6f:73: 46:bb:6c:29:a8:7b:7b:42:1f:91:53:8a:29:39:df:70:26:54: 38:b1:bc:1e:41:a6:e3:3a:8b:f5:30:6a:5a:be:77:11:df:d4: 34:c3:9f:c0:66:94:fb:b7:c5:80:97:8c:04:e3:16:7a:6a:bf: 29:4a:49:6c:5c:03:01:3e:bc:d4:30:d5:06:11:ca:0b:5c:1c: 5c:15:b5:04:d9:c7:2d:92:81:68:7b:4d:d4:28:7e:27:b6:d9: 33:a9:fa:de:6e:9c:39:9c:c6:df:3f:07:55:fa:e3:66:29:45: 8c:39:ea:c0:cd:a5:cf:ae:bc:8a:1f:aa:79:43:5f:a1:4a:57: 5b:1e:a4:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jQ0jDWHbakd9FkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZDgwYWNmZmYtOGRiNy00ZTc2LTgxZTktZTRjNmQ1OTMyYjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDtxnPjKrzwqxWMGfv1NazqHXqMPIlugELXq VW++uFvTiARDLnlruTLx9DVO+NoWz4Nto3Wzd5bOOkpkGTJuC8HfycMIGWIvFgKG sDqigv5+hK9Ntomraq3chkPXipy6XPPPmzX/iAewutd6zihKj6f8UcPOKD8F0Nwz +ZL5MdT4fZbtCDwPmrNqOiQPNRRIuEuOnTdDbvP8jGO58DdysooiLQ45grfyLvoO BUO1dyUtAAGapgNG6ZlyawBOzQpPwDUUO1SiG6k/6Sx0Kzx8k35gP+qozFb56DmV r3sDFSC283SzNBU2fyvm9aOglOFLms4KMhTMCUKWW85R1jVSyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpDmttE+cMgzDKquZrYq2xWzioVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvOGVjODE2NjYtYjI5ZS0z N2Y1LTkzZmEtZWMwODMxMmRkNTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMenCUrCoM7ny6a1G9SSVrSnKQh501rpi1HxUu4QSXKq6wf/MJOYjgJ mw5GQAf5rCWISFFMSgzQ7oKZVzWhjThRrs4Xw7S+x+rV9mvb4LU5BE+ZEJddltFq fNp8gg/8tJDlcwSAS7ZnFjqcw907nw2CerLTTrHqqEiuP8tvc0a7bCmoe3tCH5FT iik533AmVDixvB5BpuM6i/Uwalq+dxHf1DTDn8BmlPu3xYCXjATjFnpqvylKSWxc AwE+vNQw1QYRygtcHFwVtQTZxy2SgWh7TdQofie22TOp+t5unDmcxt8/B1X642Yp RYw56sDNpc+uvIofqnlDX6FKV1sepOY= -----END CERTIFICATE-----Generated at Wed Nov 5 17:51:22 2025 by rpki-client