$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fa61cd3-2035-3be4-905a-2942784b566b.roa File: 1fa61cd3-2035-3be4-905a-2942784b566b.roa (raw, json) Hash identifier: STjg3zbiG+G0tYC7gPrO07zQhQpeduIAoF230SM/LV0= Subject key identifier: 30:6A:B6:22:C9:0A:92:64:AA:98:5C:C8:25:CE:E8:9C:D9:19:C8:42 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B477C93E763E362615788C100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fa61cd3-2035-3be4-905a-2942784b566b.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 20940 IP address blocks: 23.201.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:93:e7:63:e3:62:61:57:88:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=5a7cbba0-9633-40c1-b283-6326e369b90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d1:b4:6b:17:30:91:b5:04:73:80:12:73:df: ec:ba:1d:06:b2:07:ef:e6:cf:52:7d:35:8d:99:90: e1:f6:75:5f:f7:60:05:a9:aa:27:53:b2:0c:b9:44: bc:99:c7:20:9c:b7:5d:e9:1e:de:6a:12:69:6b:6a: b9:fa:d1:c4:19:47:e3:f8:a2:0c:89:cb:89:54:dc: b4:f8:1c:be:e7:87:ad:11:c1:ff:eb:0e:62:f0:56: db:c2:27:cf:2a:c1:5f:fe:73:13:0f:6b:ca:7b:b0: 97:ed:11:a0:8f:ab:e7:31:05:8a:c7:ec:8d:ca:11: 22:3a:47:a2:83:f1:18:dc:d3:61:d7:5a:92:dc:61: 29:b4:17:f8:7a:20:1f:c3:21:47:8e:7b:47:cd:96: 54:fc:6c:d6:45:8f:4c:e2:87:c4:6f:33:49:90:15: c0:9b:91:ab:eb:30:af:df:95:43:d4:6e:36:8e:de: d1:55:08:13:ba:b2:58:81:72:20:d3:7c:cc:32:8f: 51:e4:82:00:c6:88:42:9a:d3:50:53:de:d9:1c:c7: 41:80:a7:4a:86:04:98:4a:3c:67:55:24:4c:34:34: eb:25:2c:eb:8f:c8:14:8f:e7:56:52:89:ec:d2:ba: e3:d0:04:99:0c:06:ff:fc:1e:b4:e6:73:e5:b3:63: b0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6A:B6:22:C9:0A:92:64:AA:98:5C:C8:25:CE:E8:9C:D9:19:C8:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fa61cd3-2035-3be4-905a-2942784b566b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:88:12:25:02:29:ae:2c:f0:00:1c:4b:d4:20:45:2a:24:71: 47:c4:f0:cc:1f:1a:09:a6:47:d5:e9:73:3e:2e:12:43:0c:02: 22:77:50:ea:bb:76:5c:2c:a4:74:05:7c:0e:54:b4:f5:1a:2f: 95:2d:bd:81:a7:42:ef:2c:79:20:eb:e6:03:78:7b:a7:86:bb: 32:82:02:3b:14:40:9c:f9:3a:57:b5:c9:2e:67:4b:78:80:b3: d1:9a:de:d3:b7:68:7d:5c:53:bb:de:d7:65:7f:6e:fe:fd:23: 4e:b6:0c:a1:75:ea:5e:7d:fa:2f:6a:f7:39:ad:8d:9d:d8:67: 24:02:49:57:3c:0e:79:d8:fd:4a:05:b3:01:f9:a0:59:62:1c: d2:3b:16:d1:4f:07:d6:d2:a9:4d:a4:56:10:22:ce:89:89:75: 40:f0:9e:55:17:e1:bc:a7:ee:92:c5:58:7a:0a:6c:39:dc:34: 65:08:b2:92:41:23:96:7d:f4:c7:fe:17:64:5b:04:ac:84:bc: 8b:81:d9:fe:b7:ac:1e:a5:3e:dd:be:18:a9:b3:f7:7c:5c:87: ac:dc:c1:32:b2:16:2b:29:21:e6:7b:bc:b6:18:1e:c4:7c:22: b0:c4:90:c6:5f:7d:59:a7:93:f4:ff:50:68:29:bd:24:37:32: 90:97:11:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfJPnY+NiYVeIwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk NWE3Y2JiYTAtOTYzMy00MGMxLWIyODMtNjMyNmUzNjliOTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtG0axcwkbUEc4ASc9/suh0Gsgfv5s9SfTWN mZDh9nVf92AFqaonU7IMuUS8mccgnLdd6R7eahJpa2q5+tHEGUfj+KIMicuJVNy0 +By+54etEcH/6w5i8FbbwifPKsFf/nMTD2vKe7CX7RGgj6vnMQWKx+yNyhEiOkei g/EY3NNh11qS3GEptBf4eiAfwyFHjntHzZZU/GzWRY9M4ofEbzNJkBXAm5Gr6zCv 35VD1G42jt7RVQgTurJYgXIg03zMMo9R5IIAxohCmtNQU97ZHMdBgKdKhgSYSjxn VSRMNDTrJSzrj8gUj+dWUons0rrj0ASZDAb//B605nPls2OwNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBqtiLJCpJkqphcyCXO6JzZGchCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWZhNjFjZDMtMjAzNS0z YmU0LTkwNWEtMjk0Mjc4NGI1NjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8ksMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESIEiUCKa4s8AAcS9QgRSokcUfE8MwfGgmmR9Xpcz4uEkMMAiJ3UOq7 dlwspHQFfA5UtPUaL5UtvYGnQu8seSDr5gN4e6eGuzKCAjsUQJz5Ole1yS5nS3iA s9Ga3tO3aH1cU7ve12V/bv79I062DKF16l59+i9q9zmtjZ3YZyQCSVc8DnnY/UoF swH5oFliHNI7FtFPB9bSqU2kVhAizomJdUDwnlUX4byn7pLFWHoKbDncNGUIspJB I5Z99Mf+F2RbBKyEvIuB2f63rB6lPt2+GKmz93xch6zcwTKyFispIeZ7vLYYHsR8 IrDEkMZffVmnk/T/UGgpvSQ3MpCXEXM= -----END CERTIFICATE-----Generated at Mon Oct 20 05:15:52 2025 by rpki-client