$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e2db4ae-d36c-3312-9998-8c555e4043f3.roa File: 1e2db4ae-d36c-3312-9998-8c555e4043f3.roa (raw, json) Hash identifier: DhLhY1F7mIJqtGgHCRJ715fJLZzeXGKwIgocDwa6Gng= Subject key identifier: 29:91:97:43:CF:28:B9:81:8A:0A:8A:3E:41:0E:BA:36:52:39:C0:BC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B328C46AC977A5AA72954BFC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e2db4ae-d36c-3312-9998-8c555e4043f3.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 7713 IP address blocks: 23.203.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:46:ac:97:7a:5a:a7:29:54:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=23dbe3df-2440-46af-8cca-8d3695cbb765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f5:6c:c8:b0:e0:83:99:91:8b:e9:51:c6:54: ca:9d:ba:3a:a2:ca:a8:c7:1d:cb:7e:72:8f:fd:d8: c2:81:f8:32:dc:52:7c:32:33:7a:23:c7:4d:8f:4f: b4:7e:15:b1:39:88:cf:0a:4d:92:10:76:0b:5d:34: 3c:ae:19:cf:3d:47:2a:f0:3a:d9:b7:8a:1c:ad:95: 50:59:10:51:57:74:ff:69:78:23:ed:e0:90:02:a9: 6d:ab:96:ce:95:e3:90:3e:90:69:60:4e:bc:eb:c2: 37:05:c6:60:17:11:e0:8d:3f:f9:3c:b8:f8:7d:bf: 11:5c:d9:25:1f:93:77:1e:b3:a8:3d:98:5c:23:e0: bb:23:28:7d:59:53:ff:5d:e3:60:59:b3:20:bb:fd: f6:63:cd:c0:b3:80:1b:f5:44:5b:13:3a:55:80:93: ea:3b:fc:87:00:4e:67:00:0d:78:23:fc:f4:c1:fa: 4b:06:d8:2c:bf:95:42:94:0b:6d:c8:23:46:46:1d: d4:47:3f:6e:6a:0b:71:28:f6:70:38:b0:e0:6c:66: df:94:81:ac:cf:3a:cd:1e:91:f0:9a:80:92:5b:2c: 30:ef:55:b4:59:95:38:88:f6:44:b2:9b:bb:85:d0: af:25:8b:2a:15:8b:c0:d4:ec:32:4f:2e:a7:36:ab: 52:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:91:97:43:CF:28:B9:81:8A:0A:8A:3E:41:0E:BA:36:52:39:C0:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e2db4ae-d36c-3312-9998-8c555e4043f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:c3:f4:a0:10:57:0b:b1:e9:57:a6:ae:d7:e6:6b:b4:47:09: f6:36:88:44:15:f1:b8:a2:3d:2b:ba:5f:47:46:ef:36:29:81: e1:f3:68:06:ba:0c:1c:8b:bf:46:1a:aa:e1:66:5c:f2:80:17: 30:45:89:7f:34:c0:16:d0:93:92:81:25:6c:92:23:33:ec:5e: 96:90:8d:f1:6e:5d:69:1c:bd:52:20:83:5f:3b:0e:d3:1b:eb: cc:53:4f:27:fa:f3:16:9d:f1:91:d0:79:35:5f:d7:90:5a:22: f2:2f:5d:3e:a6:f8:6f:34:5e:fd:31:4f:96:55:69:72:14:8d: 32:3e:80:52:9e:02:e1:68:ad:69:25:ff:2d:fe:90:f8:03:37: 35:ca:cf:73:7b:39:55:0d:3f:7f:79:93:50:f6:63:b2:89:e7: 91:ae:3c:4d:65:99:20:55:8d:63:e6:75:61:78:a8:7f:82:81: 77:08:00:d5:a4:69:27:cb:f6:69:cc:5e:e9:c3:70:b9:2e:86: 66:8d:af:b8:ff:dd:6b:94:ed:7c:23:11:ed:41:09:62:49:f2: 34:d6:ae:41:8e:3e:69:c4:f0:9b:9b:7a:54:bb:ca:28:24:06: f5:dc:7a:fb:47:28:43:f4:20:cd:1a:0b:69:58:79:1c:e9:16: 13:64:2a:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjEasl3papylUv8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk MjNkYmUzZGYtMjQ0MC00NmFmLThjY2EtOGQzNjk1Y2JiNzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/VsyLDgg5mRi+lRxlTKnbo6osqoxx3LfnKP /djCgfgy3FJ8MjN6I8dNj0+0fhWxOYjPCk2SEHYLXTQ8rhnPPUcq8DrZt4ocrZVQ WRBRV3T/aXgj7eCQAqltq5bOleOQPpBpYE6868I3BcZgFxHgjT/5PLj4fb8RXNkl H5N3HrOoPZhcI+C7Iyh9WVP/XeNgWbMgu/32Y83As4Ab9URbEzpVgJPqO/yHAE5n AA14I/z0wfpLBtgsv5VClAttyCNGRh3URz9uagtxKPZwOLDgbGbflIGszzrNHpHw moCSWyww71W0WZU4iPZEspu7hdCvJYsqFYvA1OwyTy6nNqtSdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmRl0PPKLmBigqKPkEOujZSOcC8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWUyZGI0YWUtZDM2Yy0z MzEyLTk5OTgtOGM1NTVlNDA0M2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8ulMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDD9KAQVwux6Vemrtfma7RHCfY2iEQV8biiPSu6X0dG7zYpgeHzaAa6 DByLv0YaquFmXPKAFzBFiX80wBbQk5KBJWySIzPsXpaQjfFuXWkcvVIgg187DtMb 68xTTyf68xad8ZHQeTVf15BaIvIvXT6m+G80Xv0xT5ZVaXIUjTI+gFKeAuForWkl /y3+kPgDNzXKz3N7OVUNP395k1D2Y7KJ55GuPE1lmSBVjWPmdWF4qH+CgXcIANWk aSfL9mnMXunDcLkuhmaNr7j/3WuU7XwjEe1BCWJJ8jTWrkGOPmnE8JubelS7yigk BvXcevtHKEP0IM0aC2lYeRzpFhNkKt4= -----END CERTIFICATE-----Generated at Tue Oct 21 03:54:25 2025 by rpki-client