$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28118647-a84f-36db-a07c-d76250603578.roa File: 28118647-a84f-36db-a07c-d76250603578.roa (raw, json) Hash identifier: I821B3s7othh+n0eIOgp8Bv5jvRnP+E4iMYYqwC5qj0= Subject key identifier: 97:31:4D:10:23:C8:70:D8:94:C0:78:B7:C5:1A:92:FD:8A:19:7E:CD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B59A1CFB0F3EF3FB46C7B8DC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28118647-a84f-36db-a07c-d76250603578.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.208.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:cf:b0:f3:ef:3f:b4:6c:7b:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=9edf818d-3786-4393-821c-ce197396ad86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5a:2d:82:05:80:6e:67:1d:75:3c:f4:94:1c: e1:c4:b0:3a:65:f8:d2:11:67:fa:84:e1:1a:30:50: 4c:0e:fc:c2:a8:cc:25:95:87:b0:50:2e:c9:88:d2: e1:cb:06:f6:6a:dd:8b:01:b8:28:e0:e6:73:4a:54: a8:9f:db:8a:21:25:96:40:37:a0:1f:ce:c2:41:6e: c3:64:1d:57:a9:43:b3:eb:11:39:54:1d:99:e8:85: 24:a6:e2:5f:16:78:5e:cb:0c:59:ed:43:ba:be:4e: b9:c5:ed:c0:14:17:b5:6d:04:fd:19:4e:b3:aa:8e: 0d:f5:e8:e6:50:bd:b6:8e:9e:2e:29:d6:71:99:27: c4:52:24:b7:bd:20:1f:33:8c:7e:a1:e6:cc:7b:5f: a4:12:26:cb:13:dd:1a:92:77:22:fb:c3:3d:88:3a: 16:68:3d:4e:0b:c1:91:ee:05:4d:f1:d6:b0:50:92: 32:8e:a1:c0:55:b5:98:e7:d4:cc:74:80:df:a6:19: 44:68:ef:42:98:7c:d9:69:71:5a:2d:1a:26:be:10: ee:b1:34:6a:4f:71:e5:d4:a6:03:44:6b:86:70:75: d1:98:74:44:12:20:f9:e2:76:c5:94:81:9f:aa:fc: 92:1f:f6:7f:1b:6f:87:b5:68:55:cf:0f:e3:0b:1b: 82:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:31:4D:10:23:C8:70:D8:94:C0:78:B7:C5:1A:92:FD:8A:19:7E:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28118647-a84f-36db-a07c-d76250603578.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:47:7f:fc:a1:52:1f:ef:c0:e0:1c:32:35:49:dd:5d:cf:62: d7:34:34:ae:f6:a3:e1:4a:43:33:15:b2:fb:2e:1c:35:f9:92: 63:19:b9:f3:7d:df:33:43:58:66:7d:fb:bc:e6:34:71:e1:d5: 89:25:18:8f:e7:93:13:41:eb:6b:77:25:35:4f:78:39:43:b5: df:05:88:b9:45:50:ee:86:bf:df:ea:2d:03:41:45:04:bf:d7: f5:9d:ce:68:6e:f6:f0:04:5a:34:a8:f7:45:0c:5d:5b:82:4e: 06:0a:da:a5:3c:e2:f3:25:a0:f6:69:41:c6:ba:cd:d0:e8:f5: a2:db:52:f9:df:77:44:fe:1e:23:d5:62:23:23:50:95:28:eb: a4:bf:37:e6:4c:f0:19:f9:5e:4d:40:a6:f1:b0:c1:38:ae:fa: 31:c4:c4:00:07:4c:4c:1e:bb:fd:9b:a6:63:35:ee:5d:8b:5e: ab:65:03:1c:a1:34:da:6b:96:c7:9d:ba:aa:82:c5:48:36:f0: 54:1e:fb:e9:f4:81:ea:bd:5d:5f:64:80:51:2e:ba:51:4f:87: e3:40:25:50:2a:e1:6f:49:d9:e5:f2:db:5f:5f:d5:08:d1:dc: 68:98:82:a1:28:e8:66:14:fd:4c:3e:08:06:63:c8:b3:24:d3: 47:f4:e5:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtZoc+w8+8/tGx7jcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk OWVkZjgxOGQtMzc4Ni00MzkzLTgyMWMtY2UxOTczOTZhZDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1otggWAbmcddTz0lBzhxLA6ZfjSEWf6hOEa MFBMDvzCqMwllYewUC7JiNLhywb2at2LAbgo4OZzSlSon9uKISWWQDegH87CQW7D ZB1XqUOz6xE5VB2Z6IUkpuJfFnheywxZ7UO6vk65xe3AFBe1bQT9GU6zqo4N9ejm UL22jp4uKdZxmSfEUiS3vSAfM4x+oebMe1+kEibLE90aknci+8M9iDoWaD1OC8GR 7gVN8dawUJIyjqHAVbWY59TMdIDfphlEaO9CmHzZaXFaLRomvhDusTRqT3Hl1KYD RGuGcHXRmHREEiD54nbFlIGfqvySH/Z/G2+HtWhVzw/jCxuCMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcxTRAjyHDYlMB4t8Uakv2KGX7NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjgxMTg2NDctYTg0Zi0z NmRiLWEwN2MtZDc2MjUwNjAzNTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9CWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlHf/yhUh/vwOAcMjVJ3V3PYtc0NK72o+FKQzMVsvsuHDX5kmMZufN9 3zNDWGZ9+7zmNHHh1YklGI/nkxNB62t3JTVPeDlDtd8FiLlFUO6Gv9/qLQNBRQS/ 1/Wdzmhu9vAEWjSo90UMXVuCTgYK2qU84vMloPZpQca6zdDo9aLbUvnfd0T+HiPV YiMjUJUo66S/N+ZM8Bn5Xk1ApvGwwTiu+jHExAAHTEweu/2bpmM17l2LXqtlAxyh NNprlseduqqCxUg28FQe++n0geq9XV9kgFEuulFPh+NAJVAq4W9J2eXy219f1QjR 3GiYgqEo6GYU/Uw+CAZjyLMk00f05cA= -----END CERTIFICATE-----Generated at Mon Oct 20 07:27:11 2025 by rpki-client