$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/153f660f-d2de-30c1-91b5-ff7d57dce2c1.roa File: 153f660f-d2de-30c1-91b5-ff7d57dce2c1.roa (raw, json) Hash identifier: BW15Cpyv6Aqx3wnzXz2RkrEI77ehskjD69UzRhaG7n4= Subject key identifier: AA:61:B2:20:39:05:54:AF:4E:CB:AF:18:D9:36:7D:34:4C:FB:A2:1C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E2058453CC3ED56E547400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/153f660f-d2de-30c1-91b5-ff7d57dce2c1.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.203.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:05:84:53:cc:3e:d5:6e:54:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=ce98e46a-b8eb-4fe5-98a9-07fa13289e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:86:d4:7f:bc:d6:05:de:bd:53:b0:e6:83:99: d9:d5:7e:09:99:8e:4d:2c:53:da:eb:6f:f3:a2:f4: 33:63:e6:7e:53:71:d9:36:01:39:55:a3:d5:42:2f: eb:3e:20:50:7d:c4:65:c0:84:15:d0:82:ac:7d:09: be:a0:9a:35:82:13:55:40:98:47:89:c5:72:60:54: 5f:43:d7:97:3a:05:82:d3:96:54:57:eb:2d:d3:6a: 23:95:64:04:ef:b3:dc:fd:dc:de:f9:72:02:9d:9f: 0d:55:a1:72:39:f2:8f:84:9d:ed:1f:bf:58:a9:29: e6:e6:eb:a3:d3:90:2e:85:d7:be:84:73:d8:9f:b1: 24:e2:b2:16:b2:9f:c3:39:cc:de:ac:f7:d4:13:da: db:b7:ee:53:4e:81:57:f6:13:3d:b6:b4:50:ed:de: 33:35:1c:1d:51:da:d2:17:ba:01:1c:1f:c3:c7:ae: e5:25:8b:2c:ff:e2:ce:8c:0f:b3:af:8b:b5:4b:bf: 8f:85:7e:9a:79:1c:9c:d7:b0:cc:16:89:7a:48:80: 20:67:cb:14:60:67:65:67:35:dd:c8:2e:39:db:58: 86:6e:2d:12:22:20:50:e0:70:c4:15:31:bb:d2:84: 77:72:5e:4a:46:4e:25:52:cc:d4:6e:d3:6e:da:e7: 93:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:61:B2:20:39:05:54:AF:4E:CB:AF:18:D9:36:7D:34:4C:FB:A2:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/153f660f-d2de-30c1-91b5-ff7d57dce2c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:94:85:52:97:d6:c1:d3:3a:4a:96:a6:6a:fa:7c:30:95:df: 6d:21:43:77:1c:3c:a7:00:9e:ce:52:58:f9:94:57:51:ad:ea: 2c:3f:63:1b:f4:b6:a7:f8:d4:6b:4f:a8:76:9d:c3:ab:e7:e8: 28:ec:0c:62:14:f8:da:eb:15:b5:86:a6:77:09:c0:4d:56:3a: 2e:fd:0a:cb:f7:b7:f1:68:5d:9f:15:da:5b:45:61:07:77:98: 35:23:7a:f7:d1:01:ff:7e:2e:0c:93:74:d2:78:0c:5a:03:3f: 27:1e:7a:e1:6e:36:f4:6a:3d:5d:07:c5:9d:42:2a:0d:d6:4a: 22:dc:ec:65:c2:2a:cf:6a:6d:3a:34:b1:8d:8c:56:00:6e:15: 49:f2:ca:f4:c8:01:30:06:5f:d5:65:f2:2c:0f:f4:d0:fe:65: fe:56:8c:7c:b5:f5:aa:cb:e7:90:0c:e2:1e:a4:9e:ad:9e:45: e2:44:96:03:40:3d:73:df:31:92:d1:05:38:77:5d:fc:5b:38: 91:0e:60:4d:12:38:d5:5a:42:50:f7:c0:b6:33:88:b6:c9:b9: 2f:56:dd:d6:47:50:f0:09:a6:82:34:41:99:fa:63:2f:3d:f2: e3:7e:4c:76:9d:e9:93:d6:bc:b5:84:3a:af:f2:e0:17:d5:02: ac:1b:48:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4gWEU8w+1W5UdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk Y2U5OGU0NmEtYjhlYi00ZmU1LTk4YTktMDdmYTEzMjg5ZTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIbUf7zWBd69U7Dmg5nZ1X4JmY5NLFPa62/z ovQzY+Z+U3HZNgE5VaPVQi/rPiBQfcRlwIQV0IKsfQm+oJo1ghNVQJhHicVyYFRf Q9eXOgWC05ZUV+st02ojlWQE77Pc/dze+XICnZ8NVaFyOfKPhJ3tH79YqSnm5uuj 05Auhde+hHPYn7Ek4rIWsp/DOczerPfUE9rbt+5TToFX9hM9trRQ7d4zNRwdUdrS F7oBHB/Dx67lJYss/+LOjA+zr4u1S7+PhX6aeRyc17DMFol6SIAgZ8sUYGdlZzXd yC4521iGbi0SIiBQ4HDEFTG70oR3cl5KRk4lUszUbtNu2ueTJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKphsiA5BVSvTsuvGNk2fTRM+6IcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTUzZjY2MGYtZDJkZS0z MGMxLTkxYjUtZmY3ZDU3ZGNlMmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8uvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWUhVKX1sHTOkqWpmr6fDCV320hQ3ccPKcAns5SWPmUV1Gt6iw/Yxv0 tqf41GtPqHadw6vn6CjsDGIU+NrrFbWGpncJwE1WOi79Csv3t/FoXZ8V2ltFYQd3 mDUjevfRAf9+LgyTdNJ4DFoDPyceeuFuNvRqPV0HxZ1CKg3WSiLc7GXCKs9qbTo0 sY2MVgBuFUnyyvTIATAGX9Vl8iwP9ND+Zf5WjHy19arL55AM4h6knq2eReJElgNA PXPfMZLRBTh3XfxbOJEOYE0SONVaQlD3wLYziLbJuS9W3dZHUPAJpoI0QZn6Yy89 8uN+THad6ZPWvLWEOq/y4BfVAqwbSCk= -----END CERTIFICATE-----Generated at Mon Oct 20 04:55:54 2025 by rpki-client