$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5faa3f1c-eb43-3bf3-97a3-978e1c53e8d1.roa File: 5faa3f1c-eb43-3bf3-97a3-978e1c53e8d1.roa (raw, json) Hash identifier: 1Shp0T4/oOnU2QnBLLPAt57/tFL7LN8gjepJoYPHzL0= Subject key identifier: FB:46:72:F7:C6:A5:1C:03:57:26:A4:05:95:01:5E:F4:32:B8:0A:3B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B715CEA919DCA7412BF4A8200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5faa3f1c-eb43-3bf3-97a3-978e1c53e8d1.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 16625 IP address blocks: 23.60.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ea:91:9d:ca:74:12:bf:4a:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=cb46ba9a-72db-4ccc-a4d5-aed985e1a73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ba:e4:c9:52:7d:75:17:30:16:1b:99:23:ac: 9a:ef:98:8d:f8:4e:ed:a5:d0:36:85:5e:2a:ff:24: 76:bf:f2:cf:6d:4d:28:c4:54:6d:af:c8:06:fd:3e: bb:19:9d:9a:41:3b:49:89:b1:1a:ad:a0:f0:5b:12: 35:4c:57:55:4b:46:78:a2:84:52:87:87:61:e9:62: a7:3e:f4:6b:13:22:81:b0:aa:5b:d0:03:28:90:e4: 17:f0:23:e3:32:28:59:b0:fc:18:59:ac:26:52:c1: 8c:c4:31:3c:d9:2e:6a:a4:19:33:7f:4d:2e:d4:41: 1f:93:55:e0:23:e7:64:e4:ef:bd:d3:28:35:89:a0: 39:3e:4d:c2:61:e6:34:32:1b:59:5e:c5:02:1b:4f: 7a:47:c2:08:fd:5d:6e:36:9a:ce:af:bc:6a:28:6b: fc:fe:07:3e:1e:89:69:10:28:4c:4c:64:1a:e0:b2: 3a:50:59:3e:38:ca:2c:e0:14:9c:25:ec:92:5f:0d: 74:5a:bf:6d:37:8f:44:25:db:3a:d5:c2:b8:e0:2e: 9b:d3:48:93:2c:17:e6:49:78:d1:ac:67:02:33:fe: 18:c4:b0:5d:2c:29:d8:8f:da:16:31:10:26:71:5c: 7e:f9:3f:4f:32:e2:28:36:eb:aa:a3:41:51:0e:d9: 1a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:46:72:F7:C6:A5:1C:03:57:26:A4:05:95:01:5E:F4:32:B8:0A:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5faa3f1c-eb43-3bf3-97a3-978e1c53e8d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.60.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:ed:26:d2:ce:59:4c:a5:d2:c6:b0:8b:99:21:fb:47:e9:3f: a4:f3:67:e6:a8:af:92:68:b1:65:cd:01:f1:3f:93:e9:cb:17: 5b:6d:9d:00:d6:db:21:d9:1b:65:66:70:a2:04:2f:c7:9f:83: a5:bf:b8:2b:18:a6:80:12:86:a8:35:6f:fc:be:b5:15:21:80: 6b:56:04:8c:b4:1c:11:52:f1:1e:a0:70:a0:9b:5f:5d:61:8d: 46:b0:58:c2:13:c6:ad:f4:e8:f7:e2:e5:f1:7b:96:e8:c0:93: 3a:7f:8b:0d:0a:2a:70:54:2a:8b:17:07:33:ae:75:b1:c6:68: bc:da:b4:5a:77:72:1b:d3:c6:4b:9b:7b:e3:a6:05:e4:01:ad: 36:8b:f3:f7:06:e4:bc:f0:ff:e8:a6:a3:ff:ca:e8:d9:47:8d: 5d:56:a3:6e:ed:d9:05:11:69:0d:f3:fc:81:e4:08:b6:3c:d9: de:8c:fb:92:70:9b:e8:a3:08:01:89:5e:16:d8:55:f9:a5:fc: 27:76:99:a0:37:a4:1d:75:45:8f:c1:61:fc:e9:8f:bd:72:e9: d5:ab:79:f4:f0:a8:e6:ba:34:23:5c:29:e1:93:2a:86:d5:9d: ab:ce:21:bd:81:37:97:4b:8d:8d:33:43:82:f7:e5:6e:9e:a1: 2c:f5:ac:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXOqRncp0Er9KggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk Y2I0NmJhOWEtNzJkYi00Y2NjLWE0ZDUtYWVkOTg1ZTFhNzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibrkyVJ9dRcwFhuZI6ya75iN+E7tpdA2hV4q /yR2v/LPbU0oxFRtr8gG/T67GZ2aQTtJibEaraDwWxI1TFdVS0Z4ooRSh4dh6WKn PvRrEyKBsKpb0AMokOQX8CPjMihZsPwYWawmUsGMxDE82S5qpBkzf00u1EEfk1Xg I+dk5O+90yg1iaA5Pk3CYeY0MhtZXsUCG096R8II/V1uNprOr7xqKGv8/gc+Holp EChMTGQa4LI6UFk+OMos4BScJeySXw10Wr9tN49EJds61cK44C6b00iTLBfmSXjR rGcCM/4YxLBdLCnYj9oWMRAmcVx++T9PMuIoNuuqo0FRDtka1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtGcvfGpRwDVyakBZUBXvQyuAo7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWZhYTNmMWMtZWI0My0z YmYzLTk3YTMtOTc4ZTFjNTNlOGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFzwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjtJtLOWUyl0sawi5kh+0fpP6TzZ+aor5JosWXNAfE/k+nLF1ttnQDW 2yHZG2VmcKIEL8efg6W/uCsYpoAShqg1b/y+tRUhgGtWBIy0HBFS8R6gcKCbX11h jUawWMITxq306Pfi5fF7lujAkzp/iw0KKnBUKosXBzOudbHGaLzatFp3chvTxkub e+OmBeQBrTaL8/cG5Lzw/+imo//K6NlHjV1Wo27t2QURaQ3z/IHkCLY82d6M+5Jw m+ijCAGJXhbYVfml/Cd2maA3pB11RY/BYfzpj71y6dWrefTwqOa6NCNcKeGTKobV navOIb2BN5dLjY0zQ4L35W6eoSz1rLU= -----END CERTIFICATE-----Generated at Mon Oct 20 14:58:08 2025 by rpki-client