$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93167463-6098-3851-a144-14e7068e6313.roa File: 93167463-6098-3851-a144-14e7068e6313.roa (raw, json) Hash identifier: QMewJbbZjb/5Ll9NbVxTlAstJEl9Xj8ef5lmkOOFLyk= Subject key identifier: 59:8A:29:CA:BA:7D:C3:F3:CE:7C:33:06:3A:33:D5:35:DB:5C:80:D8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B970CFF93F1B91EC4FDFFEA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93167463-6098-3851-a144-14e7068e6313.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 16625 IP address blocks: 23.4.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:ff:93:f1:b9:1e:c4:fd:ff:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=f06cbee7-46a9-4ea0-becb-1d9bd11288d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d4:43:e7:41:1c:a8:6f:54:70:dc:68:34:81: 17:85:17:77:63:59:03:f0:f7:b4:7f:ef:ed:e2:60: 25:1d:81:de:60:be:a0:0e:80:44:77:c8:cf:aa:d7: c8:00:d1:6b:23:95:e2:aa:19:b0:aa:4c:aa:19:06: 9b:f5:f1:5d:4a:53:1d:00:1d:06:14:da:a3:c9:08: 68:b3:88:d7:7f:d2:f6:57:9c:da:0e:12:55:08:10: 8c:29:60:94:a4:7e:37:fe:b3:16:3f:1f:d1:75:f5: 46:a4:24:b8:d7:be:f1:53:ef:e2:98:63:b9:74:fe: 04:19:0f:4b:e6:63:c8:16:f5:4e:5e:b7:cd:f3:5a: 0d:c5:1d:86:58:a8:65:c3:fe:dd:56:89:65:d5:f9: 1f:c1:ae:4d:80:71:ad:94:76:a2:ef:e7:ef:0f:74: 4e:44:20:7c:9f:35:0d:ec:57:6e:1b:7c:6f:d3:03: 7a:b6:f1:b9:2b:98:59:f4:5e:61:e0:d0:f1:c1:06: ca:1a:6c:30:b9:74:cd:0c:51:5e:6b:bf:93:7e:ee: 9d:eb:b8:5a:4a:cd:20:4c:92:73:dd:f8:90:b4:3e: 9e:a9:51:e1:01:e6:e3:63:66:4c:fe:30:8e:15:a1: 1d:e7:a0:22:38:91:7b:83:57:ac:e5:c6:42:87:61: dc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8A:29:CA:BA:7D:C3:F3:CE:7C:33:06:3A:33:D5:35:DB:5C:80:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93167463-6098-3851-a144-14e7068e6313.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.4.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:f7:3e:37:e6:0e:66:25:db:41:2b:9f:da:b7:15:4f:a0:a2: 5c:ae:c9:9b:f6:9c:28:58:e3:54:54:04:b1:40:99:8a:b6:fe: ae:ba:86:4b:be:07:32:d5:76:e8:bf:d4:cd:0c:3b:9a:8a:11: bd:d1:7f:db:c2:71:d7:75:72:6b:17:76:92:9a:69:61:b5:13: ed:8b:48:54:a1:f7:fd:78:27:19:d2:d3:5f:d8:62:9c:b6:f9: 5e:1f:b9:24:16:b9:f1:46:6a:cc:2a:5f:a6:e2:db:59:33:fd: fd:e3:d3:5e:b7:de:9e:99:61:5d:5e:e8:94:e0:f6:7a:a1:31: ae:b9:d2:c1:93:99:68:17:38:98:91:eb:cc:46:c1:2f:ee:03: b6:46:aa:3a:21:b2:4b:95:d3:83:c4:ce:e3:c1:a6:36:44:6a: fe:91:d5:39:9a:9e:5c:b8:d0:13:5b:d6:27:b7:03:4a:9d:a4: e0:3f:fa:71:4b:ab:26:60:ce:0a:9e:ec:d5:aa:91:d3:86:67: da:08:3e:67:19:10:d5:4d:9c:32:c3:0b:cb:a1:7a:1a:51:52: f0:ca:90:0c:04:ba:10:6b:f9:b9:11:af:06:af:e9:f7:93:5f: e3:aa:e2:0d:86:10:22:0b:35:98:24:24:25:fc:d1:63:0b:42: a1:83:74:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDP+T8bkexP3/6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZjA2Y2JlZTctNDZhOS00ZWEwLWJlY2ItMWQ5YmQxMTI4OGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndRD50EcqG9UcNxoNIEXhRd3Y1kD8Pe0f+/t 4mAlHYHeYL6gDoBEd8jPqtfIANFrI5XiqhmwqkyqGQab9fFdSlMdAB0GFNqjyQho s4jXf9L2V5zaDhJVCBCMKWCUpH43/rMWPx/RdfVGpCS4177xU+/imGO5dP4EGQ9L 5mPIFvVOXrfN81oNxR2GWKhlw/7dVoll1fkfwa5NgHGtlHai7+fvD3RORCB8nzUN 7FduG3xv0wN6tvG5K5hZ9F5h4NDxwQbKGmwwuXTNDFFea7+Tfu6d67haSs0gTJJz 3fiQtD6eqVHhAebjY2ZM/jCOFaEd56AiOJF7g1es5cZCh2Hc1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmKKcq6fcPzznwzBjoz1TXbXIDYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTMxNjc0NjMtNjA5OC0z ODUxLWExNDQtMTRlNzA2OGU2MzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwRQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADb3PjfmDmYl20Ern9q3FU+golyuyZv2nChY41RUBLFAmYq2/q66hku+ BzLVdui/1M0MO5qKEb3Rf9vCcdd1cmsXdpKaaWG1E+2LSFSh9/14JxnS01/YYpy2 +V4fuSQWufFGaswqX6bi21kz/f3j01633p6ZYV1e6JTg9nqhMa650sGTmWgXOJiR 68xGwS/uA7ZGqjohskuV04PEzuPBpjZEav6R1Tmanly40BNb1ie3A0qdpOA/+nFL qyZgzgqe7NWqkdOGZ9oIPmcZENVNnDLDC8uhehpRUvDKkAwEuhBr+bkRrwav6feT X+Oq4g2GECILNZgkJCX80WMLQqGDdIs= -----END CERTIFICATE-----Generated at Wed Oct 22 02:50:39 2025 by rpki-client