$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f47c4505-8c43-385b-943b-712b48bd1cc9.roa File: f47c4505-8c43-385b-943b-712b48bd1cc9.roa (raw, json) Hash identifier: 91B28vwoqMke6ItjN2StZbdXXuH5uOitaSuGSqblegU= Subject key identifier: B1:3C:48:AF:66:A4:D6:21:95:25:9E:80:2D:BA:94:79:E9:4E:E0:16 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584BB88D0D5099558BD5BFD52200 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f47c4505-8c43-385b-943b-712b48bd1cc9.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 6643 IP address blocks: 23.239.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:0d:50:99:55:8b:d5:bf:d5:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=e9347d7b-2d64-45fa-909d-8de23ee9ad10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4c:92:76:bf:3c:68:3d:c1:96:79:23:93:61: 7d:a1:0d:dc:f8:d5:7b:38:b7:2c:db:e1:f4:73:53: a6:49:76:38:63:f0:bf:23:c3:f9:f7:70:62:5c:1e: 25:99:54:7e:d3:6b:0f:ab:48:cd:87:d7:ec:e3:66: b9:af:c0:c1:24:a0:5f:ca:ac:26:a9:6b:ea:85:fc: 8f:26:77:9c:c2:06:a1:fe:7a:2e:43:f3:5d:21:e3: 5b:5c:6a:75:60:24:74:d3:1f:1e:d8:7b:30:f9:f4: ce:98:43:17:45:c8:89:11:16:a2:89:ed:f4:0a:08: 31:2b:27:ae:29:e4:92:55:ac:3c:ad:49:9e:40:04: 64:39:08:2c:62:10:88:b1:95:ef:8f:7b:9d:dc:cf: 05:9a:ba:e0:1f:ab:cf:5b:8d:88:e7:f5:cb:fe:58: 47:7d:c7:d9:14:a6:f3:10:82:de:cd:95:c3:aa:e3: 38:7a:ca:97:e1:ca:79:a1:6c:13:4c:43:03:be:e3: e6:76:01:39:1c:6e:98:29:b3:33:dc:cc:09:40:1d: 42:f0:44:12:52:fb:98:e7:d8:87:48:8e:6d:b0:bf: 10:19:52:65:65:7a:43:a3:56:54:87:3b:ee:95:be: ad:7f:42:22:4d:5e:e1:38:9d:31:9d:c3:d0:6e:81: a7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3C:48:AF:66:A4:D6:21:95:25:9E:80:2D:BA:94:79:E9:4E:E0:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f47c4505-8c43-385b-943b-712b48bd1cc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:3b:08:28:51:96:12:44:45:dc:54:31:24:1a:57:9a:41:e5: 88:36:97:5e:97:3b:ee:43:44:64:da:5f:f7:88:8e:19:0b:2b: b0:45:5d:13:af:9d:72:c9:39:f3:63:14:f2:ec:9a:75:84:5f: 5d:b2:8a:56:61:de:ca:7b:8e:1e:1b:25:dc:48:59:05:b3:bc: 2f:be:82:a6:ae:3d:6b:30:7d:1a:85:2f:db:01:38:32:23:5e: 41:8d:3d:3b:04:37:d9:a0:c0:b6:a9:5c:45:df:3a:f6:03:87: e3:4f:49:19:f3:a8:28:1e:c3:c2:74:1e:ff:c7:75:4d:a7:c2: db:ae:5a:ec:ff:16:52:bc:af:53:36:28:30:29:3d:15:7d:4a: b1:cf:34:3d:e1:2d:2d:b7:30:2d:36:8e:d3:f0:47:2c:d7:df: 6f:8b:68:6c:94:6c:d1:36:3f:c0:82:42:71:2c:f1:8d:da:f1: a4:b6:4d:98:a7:47:bd:66:3c:47:b1:29:f8:59:2a:30:33:c2: 51:25:57:f6:10:b0:f9:ba:fb:84:2e:4a:99:be:3c:94:6c:d3: 93:00:12:3d:9b:50:05:0a:25:e9:30:ea:a8:f6:4b:8d:e8:77: dd:e2:d6:98:e8:01:7d:5e:62:fa:72:d5:d5:6d:f8:41:28:78: af:69:f4:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jQ1QmVWL1b/VIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZTkzNDdkN2ItMmQ2NC00NWZhLTkwOWQtOGRlMjNlZTlhZDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUySdr88aD3Blnkjk2F9oQ3c+NV7OLcs2+H0 c1OmSXY4Y/C/I8P593BiXB4lmVR+02sPq0jNh9fs42a5r8DBJKBfyqwmqWvqhfyP Jnecwgah/nouQ/NdIeNbXGp1YCR00x8e2Hsw+fTOmEMXRciJERaiie30CggxKyeu KeSSVaw8rUmeQARkOQgsYhCIsZXvj3ud3M8FmrrgH6vPW42I5/XL/lhHfcfZFKbz EILezZXDquM4esqX4cp5oWwTTEMDvuPmdgE5HG6YKbMz3MwJQB1C8EQSUvuY59iH SI5tsL8QGVJlZXpDo1ZUhzvulb6tf0IiTV7hOJ0xncPQboGnDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLE8SK9mpNYhlSWegC26lHnpTuAWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZjQ3YzQ1MDUtOGM0My0z ODViLTk0M2ItNzEyYjQ4YmQxY2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF+/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ07CChRlhJERdxUMSQaV5pB5Yg2l16XO+5DRGTaX/eIjhkLK7BFXROv nXLJOfNjFPLsmnWEX12yilZh3sp7jh4bJdxIWQWzvC++gqauPWswfRqFL9sBODIj XkGNPTsEN9mgwLapXEXfOvYDh+NPSRnzqCgew8J0Hv/HdU2nwtuuWuz/FlK8r1M2 KDApPRV9SrHPND3hLS23MC02jtPwRyzX32+LaGyUbNE2P8CCQnEs8Y3a8aS2TZin R71mPEexKfhZKjAzwlElV/YQsPm6+4QuSpm+PJRs05MAEj2bUAUKJekw6qj2S43o d93i1pjoAX1eYvpy1dVt+EEoeK9p9D0= -----END CERTIFICATE-----Generated at Wed Nov 5 11:16:05 2025 by rpki-client