$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/baf4a3b3-ade1-3488-8ecf-5f61eb8efeab.roa File: baf4a3b3-ade1-3488-8ecf-5f61eb8efeab.roa (raw, json) Hash identifier: H3myt3COgdqbeFw4Rd2925Ae4JMlPZ9ACtUUqKx8y8A= Subject key identifier: D4:A7:AA:28:CF:1B:C6:30:2C:29:C9:A4:7A:D9:F6:01:DB:32:C9:39 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1F0185B14A840F14588DFA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/baf4a3b3-ade1-3488-8ecf-5f61eb8efeab.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.48.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:85:b1:4a:84:0f:14:58:8d:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=46d17d21-7494-49d2-b5e6-aab6e1ddc9ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b0:1c:aa:1f:3b:b4:65:01:79:43:06:51:38: 52:c9:78:8b:6f:8e:fd:8e:61:4e:41:e5:66:31:63: 61:56:75:6c:d9:33:a9:f0:a6:a3:63:52:e0:79:b3: 2c:2a:78:9f:aa:1d:26:f7:4e:89:c3:40:ff:a1:ea: a2:2f:0c:d6:56:3d:4d:6a:06:95:b6:c3:39:06:b5: 66:43:99:07:54:e5:89:dd:97:9b:28:00:62:d3:a7: 78:04:43:2d:5f:db:40:51:56:8d:95:15:66:2d:1a: 3e:cb:09:8f:19:4d:80:0e:e7:ba:0d:6e:3d:1c:8b: ac:86:50:3d:8e:db:82:08:b5:72:2c:26:cd:09:b7: 97:09:59:3b:5b:8e:c5:ab:d4:31:74:3b:45:e9:98: 19:c4:8d:5d:72:8e:7e:3d:36:b9:b3:37:af:5c:20: 62:ca:48:3d:ad:e0:46:90:51:c9:35:8c:e8:92:d6: 40:ec:8e:c7:92:98:dd:d8:02:46:d5:ae:8a:de:66: 95:a8:65:93:f7:bb:47:8a:09:43:14:db:e3:e0:6c: a7:22:dd:19:78:43:42:dc:79:2a:9c:8f:db:31:9a: fa:f1:d1:37:ac:cf:25:e7:f4:77:f8:3e:91:49:ff: b8:40:c8:c3:59:58:3f:11:c9:9e:c9:4d:93:e0:16: e4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A7:AA:28:CF:1B:C6:30:2C:29:C9:A4:7A:D9:F6:01:DB:32:C9:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/baf4a3b3-ade1-3488-8ecf-5f61eb8efeab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:5c:2a:f0:ad:c2:d1:39:c4:57:37:dc:2b:79:7c:73:5d:e4: f9:4b:74:8b:bd:eb:6f:3d:2c:3c:bf:e8:49:90:e0:a4:50:ab: 79:87:6a:6e:61:3e:12:13:2e:a2:0b:93:c8:f8:67:03:20:3c: a7:7f:e9:4e:0c:e3:7d:fc:83:81:5c:a0:87:da:ab:12:cb:27: 10:8e:1f:73:1b:5b:5e:c2:4d:37:c2:cb:30:6a:dd:c6:44:ba: 85:05:b5:e5:1a:e8:0a:68:08:13:02:87:3a:22:9a:31:d3:9a: 0e:02:4a:85:50:09:18:4b:d9:c6:6a:c0:79:21:e5:3b:9e:e7: cd:78:ef:6c:4f:74:75:85:dd:29:61:ea:89:79:a3:50:6a:2b: 48:23:09:bb:5a:b8:80:4d:65:85:b6:f7:49:2f:ec:92:85:1c: 05:1d:f4:fe:24:15:65:39:83:5c:da:3f:03:12:48:40:9c:18: 06:65:2c:1e:79:22:e5:16:21:1d:f5:09:55:81:45:5a:b7:7e: b3:5c:f7:d9:88:9a:ea:1b:e2:af:99:9c:7c:5c:fe:ce:c8:f6: 09:f9:e1:20:44:21:83:ef:f3:f0:44:27:51:9d:69:db:20:ae: 28:ad:b9:3a:58:99:aa:b1:ac:5d:2a:1b:18:a7:b8:68:90:11: c2:5e:17:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAYWxSoQPFFiN+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NDZkMTdkMjEtNzQ5NC00OWQyLWI1ZTYtYWFiNmUxZGRjOWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbAcqh87tGUBeUMGUThSyXiLb479jmFOQeVm MWNhVnVs2TOp8KajY1LgebMsKnifqh0m906Jw0D/oeqiLwzWVj1NagaVtsM5BrVm Q5kHVOWJ3ZebKABi06d4BEMtX9tAUVaNlRVmLRo+ywmPGU2ADue6DW49HIushlA9 jtuCCLVyLCbNCbeXCVk7W47Fq9QxdDtF6ZgZxI1dco5+PTa5szevXCBiykg9reBG kFHJNYzoktZA7I7Hkpjd2AJG1a6K3maVqGWT97tHiglDFNvj4GynIt0ZeENC3Hkq nI/bMZr68dE3rM8l5/R3+D6RSf+4QMjDWVg/EcmeyU2T4BbknQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSnqijPG8YwLCnJpHrZ9gHbMsk5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmFmNGEzYjMtYWRlMS0z NDg4LThlY2YtNWY2MWViOGVmZWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzA8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtcKvCtwtE5xFc33Ct5fHNd5PlLdIu96289LDy/6EmQ4KRQq3mHam5h PhITLqILk8j4ZwMgPKd/6U4M4338g4FcoIfaqxLLJxCOH3MbW17CTTfCyzBq3cZE uoUFteUa6ApoCBMChzoimjHTmg4CSoVQCRhL2cZqwHkh5Tue581472xPdHWF3Slh 6ol5o1BqK0gjCbtauIBNZYW290kv7JKFHAUd9P4kFWU5g1zaPwMSSECcGAZlLB55 IuUWIR31CVWBRVq3frNc99mImuob4q+ZnHxc/s7I9gn54SBEIYPv8/BEJ1Gdadsg riituTpYmaqxrF0qGxinuGiQEcJeF6c= -----END CERTIFICATE-----Generated at Mon Oct 20 02:19:09 2025 by rpki-client