$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/9b457f5e-c29c-3e0c-95e2-54c237208382.roa File: 9b457f5e-c29c-3e0c-95e2-54c237208382.roa (raw, json) Hash identifier: t7XjzQfqyo2QR0awTQTfRNHtnTCZAKb3zkhBcR5+El4= Subject key identifier: 32:7F:47:B1:95:4D:9F:08:02:B7:0C:35:93:CD:95:1E:98:59:96:6D Certificate issuer: /CN=8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810 Certificate serial: 010D0C9F4328584B9442233CF65E17A5EAC348E0 Authority key identifier: FF:C4:B2:E8:4F:33:E8:04:B2:61:B3:8D:82:01:03:6B:BE:73:CE:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/9b457f5e-c29c-3e0c-95e2-54c237208382.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 394256 IP address blocks: 23.83.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:23:3c:f6:5e:17:a5:ea:c3:48:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=f78843c4-ca54-4fe2-b4a6-f8513b17eb36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7b:74:b9:d0:6d:c2:aa:76:6e:06:80:5c:23: 31:e7:9c:dc:19:b2:7f:37:68:63:73:94:da:09:02: 16:88:25:cf:a6:93:e9:6a:d1:58:07:33:c1:2a:19: d6:e7:83:35:3f:7e:d6:99:d1:27:99:99:4e:0e:47: f0:89:ab:d6:4e:c3:e8:3a:b9:71:cb:f4:f8:d5:bd: cd:0f:fb:98:4f:68:a1:7e:c1:e3:96:7c:65:a4:7e: 6d:d6:26:54:76:d6:d6:c9:ae:e1:62:b4:05:4a:53: 44:43:e6:a1:09:89:23:23:5c:35:64:68:4b:bd:a2: 7d:5d:63:dd:c5:6c:f6:7f:16:d6:89:c4:a0:d8:93: d5:b8:5f:2a:d6:67:02:12:a1:6e:79:44:8e:80:b1: 24:65:cb:34:58:c6:58:41:81:79:9e:8c:41:6e:97: 1c:9d:8c:4f:4c:16:34:05:78:92:3f:c5:bf:d5:e1: 22:ab:7f:2a:7d:3e:7d:58:91:66:0b:90:39:4d:eb: 04:d1:71:30:a5:09:fe:ce:b9:9e:6b:d0:ea:9c:c8: d6:45:91:da:ef:25:2a:35:28:c8:3b:f1:95:66:87: 39:24:66:8f:65:ab:fb:6d:9d:ff:18:c0:11:2d:c4: 1e:f6:05:0a:4b:26:dc:1e:15:9b:39:77:12:8f:f8: 28:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7F:47:B1:95:4D:9F:08:02:B7:0C:35:93:CD:95:1E:98:59:96:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/9b457f5e-c29c-3e0c-95e2-54c237208382.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.crl X509v3 Authority Key Identifier: keyid:FF:C4:B2:E8:4F:33:E8:04:B2:61:B3:8D:82:01:03:6B:BE:73:CE:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.cer sbgp-ipAddrBlock: critical IPv4: 23.83.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:4a:7d:52:ed:99:17:d7:31:b0:e2:23:a0:26:78:f5:be:9d: ae:84:5e:ed:cb:ef:5c:49:dd:3a:b8:7c:c2:cf:17:3e:f2:f7: 84:60:9a:51:e7:09:ee:33:12:b0:40:ff:63:8e:0f:c8:07:4c: b8:d1:15:b3:ba:51:24:f4:40:31:3d:01:78:db:83:79:75:18: f7:c7:b1:5d:3a:e9:f3:4d:c6:18:93:80:16:d2:aa:f3:5f:23: 4c:8c:42:9c:66:38:e2:c6:40:7d:4b:69:28:e8:74:4d:11:c3: 11:46:fd:a1:f0:f4:00:b5:48:19:00:f0:a3:9e:8a:73:f8:9f: 75:5e:ce:ce:2a:b5:10:0c:31:e5:12:68:d0:cc:cc:e6:a1:8d: 14:01:9a:49:01:f5:12:39:cb:08:37:87:1b:ef:13:5e:d7:3c: c8:29:6d:1d:37:90:eb:c8:b2:5b:dc:1a:ba:d2:2e:d1:da:90: 73:f4:01:0b:73:98:79:b9:b8:8d:77:2e:b1:e5:ff:65:e0:b8: f9:cb:9b:e6:5a:aa:3c:4f:19:e0:58:70:5e:b0:c8:46:07:f2: 33:05:16:b3:70:bd:57:2f:6b:57:2a:4a:6c:ea:8d:fd:8c:cb: 97:15:7b:b6:70:53:c5:ff:69:16:4f:ee:a8:06:33:68:95:e7: ac:aa:eb:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQiM89l4XperDSOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJjMGYyZGItZWNiYy00Y2M3LTg4YWYtYWMxZThhNzdi ODEwMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk Zjc4ODQzYzQtY2E1NC00ZmUyLWI0YTYtZjg1MTNiMTdlYjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnt0udBtwqp2bgaAXCMx55zcGbJ/N2hjc5Ta CQIWiCXPppPpatFYBzPBKhnW54M1P37WmdEnmZlODkfwiavWTsPoOrlxy/T41b3N D/uYT2ihfsHjlnxlpH5t1iZUdtbWya7hYrQFSlNEQ+ahCYkjI1w1ZGhLvaJ9XWPd xWz2fxbWicSg2JPVuF8q1mcCEqFueUSOgLEkZcs0WMZYQYF5noxBbpccnYxPTBY0 BXiSP8W/1eEiq38qfT59WJFmC5A5TesE0XEwpQn+zrmea9DqnMjWRZHa7yUqNSjI O/GVZoc5JGaPZav7bZ3/GMARLcQe9gUKSybcHhWbOXcSj/go1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJ/R7GVTZ8IArcMNZPNlR6YWZZtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84YmMw ZjJkYi1lY2JjLTRjYzctODhhZi1hYzFlOGE3N2I4MTAvOWI0NTdmNWUtYzI5Yy0z ZTBjLTk1ZTItNTRjMjM3MjA4MzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGJjMGYyZGItZWNiYy00Y2M3LTg4 YWYtYWMxZThhNzdiODEwLzhiYzBmMmRiLWVjYmMtNGNjNy04OGFmLWFjMWU4YTc3 YjgxMC5jcmwwHwYDVR0jBBgwFoAU/8Sy6E8z6ASyYbONggEDa75zzlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84YmMwZjJkYi1lY2JjLTRjYzctODhhZi1hYzFl OGE3N2I4MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF1PQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZKfVLtmRfXMbDiI6AmePW+na6EXu3L71xJ3Tq4fMLPFz7y94RgmlHn Ce4zErBA/2OOD8gHTLjRFbO6UST0QDE9AXjbg3l1GPfHsV066fNNxhiTgBbSqvNf I0yMQpxmOOLGQH1LaSjodE0RwxFG/aHw9AC1SBkA8KOeinP4n3Vezs4qtRAMMeUS aNDMzOahjRQBmkkB9RI5ywg3hxvvE17XPMgpbR03kOvIslvcGrrSLtHakHP0AQtz mHm5uI13LrHl/2XguPnLm+ZaqjxPGeBYcF6wyEYH8jMFFrNwvVcva1cqSmzqjf2M y5cVe7ZwU8X/aRZP7qgGM2iV56yq628= -----END CERTIFICATE-----Generated at Mon Oct 20 10:22:46 2025 by rpki-client