$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/16593c72-edb9-3b06-91eb-ddb6d91ce85d.roa File: 16593c72-edb9-3b06-91eb-ddb6d91ce85d.roa (raw, json) Hash identifier: glk9obRZroxV5Hsy+9appespWHi7vOHg6B0DZ6H8RbM= Subject key identifier: 08:D3:BF:62:06:7E:D1:1E:73:5C:A9:63:90:14:C4:68:B9:1F:EA:69 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584BCD9AFE0A87FA3D5AE05B8D80 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/16593c72-edb9-3b06-91eb-ddb6d91ce85d.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 31898 IP address blocks: 23.239.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 11 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9a:fe:0a:87:fa:3d:5a:e0:5b:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=24ca1f57-13b7-4733-b49b-a33fb93bd4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:be:62:57:c0:0f:97:18:57:dc:20:6f:47:13: 45:52:66:f8:f1:7a:88:72:d1:48:c0:4e:d7:9d:1e: bb:63:44:a8:e1:70:e0:d8:2d:75:76:79:be:1e:3e: 3a:e7:42:23:84:ff:75:45:f4:0a:7e:9d:35:f2:64: db:cb:95:d6:86:92:e1:8d:a5:e3:2a:a7:d6:2a:77: 02:f2:fe:25:69:6c:81:8b:08:96:6d:d7:c2:d8:04: c5:7f:0e:59:aa:4f:98:f6:1e:c9:fa:90:6f:77:c6: 8b:32:fa:c9:c1:36:d9:a9:71:f1:3e:4b:dc:30:e5: d5:5c:99:f5:3c:c4:c7:b0:95:45:6b:b8:5f:3d:d0: b3:11:4c:00:43:ce:97:dd:df:89:ce:8d:fd:d8:83: ad:7f:ab:0e:a2:a7:8a:84:fa:56:b5:cc:6b:a8:aa: d3:70:78:1f:85:8b:d5:0d:e0:11:58:c0:9b:0d:62: 7f:8d:f5:e7:41:a3:65:94:75:19:f5:e3:44:31:fc: ae:bd:fc:b2:be:7a:e5:a6:79:1d:a4:d7:dd:e0:7c: 3d:8d:b5:69:04:36:3b:6e:2b:22:fc:eb:eb:31:ac: 2a:3a:01:e1:ce:53:60:c7:7b:25:62:5b:20:22:9e: d2:89:f6:69:9e:76:35:13:5b:d4:ad:4f:7f:88:7b: 8c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D3:BF:62:06:7E:D1:1E:73:5C:A9:63:90:14:C4:68:B9:1F:EA:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/16593c72-edb9-3b06-91eb-ddb6d91ce85d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:1b:3c:4b:df:cb:24:3d:4c:3d:8a:16:19:d3:f1:ea:53:6c: 7c:69:71:84:d6:6f:95:2d:50:7c:80:cc:60:24:0a:fb:f1:6e: 2a:05:a5:89:fb:8b:b6:55:26:4b:c2:94:ce:99:c9:e8:96:c4: fc:b7:ea:4e:99:b0:b0:16:f6:e1:bf:4d:30:88:cd:d0:1f:67: 85:17:be:56:9b:19:70:20:35:fb:8d:b1:3f:e1:26:c7:e4:93: 26:5d:7b:29:8d:de:80:71:67:5b:bf:f3:9a:0d:e1:c6:d4:55: a9:27:a7:70:f9:5e:e2:bf:69:6d:03:4a:db:29:c8:d6:7d:0b: 60:70:11:b1:73:f9:b9:ca:79:13:87:c8:05:84:7a:ae:33:34: 30:cc:9d:76:2c:1a:fd:3b:47:7c:9c:c7:f5:6a:44:56:48:0d: 4b:d4:d7:29:a0:20:07:f9:12:0a:b5:82:58:ce:02:03:17:98: 76:7f:a9:28:f3:93:50:9a:3b:90:1d:e8:92:9c:a0:bf:18:4e: 3e:d4:9e:dd:f1:78:ed:f0:24:b4:ea:bf:32:9c:99:59:83:ce: 7d:a6:02:c0:d2:2b:d7:c9:cd:e0:a9:7a:9c:5e:47:54:ef:d0: 81:b1:78:b8:70:67:42:53:76:92:d4:b5:81:ed:07:5d:52:b8: 23:75:5b:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmv4Kh/o9WuBbjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk MjRjYTFmNTctMTNiNy00NzMzLWI0OWItYTMzZmI5M2JkNGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb5iV8APlxhX3CBvRxNFUmb48XqIctFIwE7X nR67Y0So4XDg2C11dnm+Hj4650IjhP91RfQKfp018mTby5XWhpLhjaXjKqfWKncC 8v4laWyBiwiWbdfC2ATFfw5Zqk+Y9h7J+pBvd8aLMvrJwTbZqXHxPkvcMOXVXJn1 PMTHsJVFa7hfPdCzEUwAQ86X3d+Jzo392IOtf6sOoqeKhPpWtcxrqKrTcHgfhYvV DeARWMCbDWJ/jfXnQaNllHUZ9eNEMfyuvfyyvnrlpnkdpNfd4Hw9jbVpBDY7bisi /OvrMawqOgHhzlNgx3slYlsgIp7SifZpnnY1E1vUrU9/iHuMRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjTv2IGftEec1ypY5AUxGi5H+ppMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMTY1OTNjNzItZWRiOS0z YjA2LTkxZWItZGRiNmQ5MWNlODVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+/sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMkbPEvfyyQ9TD2KFhnT8epTbHxpcYTWb5UtUHyAzGAkCvvxbioFpYn7 i7ZVJkvClM6ZyeiWxPy36k6ZsLAW9uG/TTCIzdAfZ4UXvlabGXAgNfuNsT/hJsfk kyZdeymN3oBxZ1u/85oN4cbUVaknp3D5XuK/aW0DStspyNZ9C2BwEbFz+bnKeROH yAWEeq4zNDDMnXYsGv07R3ycx/VqRFZIDUvU1ymgIAf5Egq1gljOAgMXmHZ/qSjz k1CaO5Ad6JKcoL8YTj7Unt3xeO3wJLTqvzKcmVmDzn2mAsDSK9fJzeCpepxeR1Tv 0IGxeLhwZ0JTdpLUtYHtB11SuCN1W9w= -----END CERTIFICATE-----Generated at Mon Nov 10 11:17:17 2025 by rpki-client