$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cbaff83-e0bb-31eb-8aaa-d3018dde1d4d.roa File: 2cbaff83-e0bb-31eb-8aaa-d3018dde1d4d.roa (raw, json) Hash identifier: zLpHV9O83OgEoQ5AQgv5NrI0Wz8aJudBKxuVtQ+21GM= Subject key identifier: 09:BC:2D:BD:EB:48:DA:38:94:FE:1F:E6:39:22:3B:E7:5E:5B:BD:E1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1A6D2E55B33C54F1F3EE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cbaff83-e0bb-31eb-8aaa-d3018dde1d4d.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.37.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:a6:d2:e5:5b:33:c5:4f:1f:3e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=95c7af7c-6376-4101-adcb-037a9fb7a65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ce:5a:09:90:11:d8:ef:f4:21:24:0c:95:de: af:37:d7:4d:c2:8a:44:ac:2b:bc:96:ae:31:23:47: 0c:db:f3:f4:e2:a4:72:1c:b8:18:2a:db:e2:cd:37: 13:4a:de:82:f9:97:60:f7:8b:d0:0f:39:96:f8:9e: f0:37:77:e2:56:00:31:67:10:f9:58:9a:70:8e:a4: 2e:a2:3b:80:f9:b1:b1:99:cb:83:56:29:c0:69:d1: 98:9a:19:14:22:c2:93:79:20:85:fb:95:28:b1:5d: 10:91:c7:21:46:53:a3:dc:94:53:a5:76:bf:de:35: 37:ec:d7:d0:cb:8a:df:3a:94:f5:1c:d8:e2:3a:3f: 19:4d:28:84:17:49:ec:67:23:ce:30:f1:50:4b:02: de:12:59:d2:c7:da:97:f0:9c:29:08:f1:3b:d8:9c: 38:e3:35:fd:aa:38:7d:62:2f:90:3b:fd:16:02:2e: b7:9a:94:fd:36:dd:1b:ec:83:46:ba:b0:83:e2:c7: fe:fd:11:a1:e0:90:ea:45:c4:06:ee:19:0a:55:33: 2a:fe:29:11:bc:ee:50:b5:65:b4:d8:9b:87:3c:d7: b4:55:71:98:28:60:41:95:1b:98:4b:13:ff:1b:40: 06:65:57:93:01:01:d8:8e:98:b1:b5:43:5b:c1:0b: 16:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BC:2D:BD:EB:48:DA:38:94:FE:1F:E6:39:22:3B:E7:5E:5B:BD:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cbaff83-e0bb-31eb-8aaa-d3018dde1d4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.37.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:ff:9c:ca:0e:42:3e:ce:16:6e:5b:d0:b4:97:2d:f3:0d:88: fe:61:42:d7:32:20:05:ec:24:1e:71:9e:b2:d5:f3:0c:ee:95: dc:61:56:36:14:75:bc:06:ed:58:48:82:13:8d:aa:13:ec:fa: c2:2f:b3:2c:ed:c1:28:da:f6:a4:8e:36:7a:00:ff:00:ac:25: 7b:2f:dd:eb:cd:98:b5:21:bb:4e:2f:8b:17:26:cb:d6:38:c3: ed:d3:1e:c8:13:d5:22:65:a5:7b:23:49:40:36:de:3d:8c:e8: 61:3c:8e:9d:9e:fe:b5:fa:18:41:61:7a:6f:4d:3f:bb:a1:b1: f6:31:0e:64:84:cb:6f:85:15:bb:76:f7:6b:59:9e:d7:fb:40: fb:46:c3:da:36:87:ca:eb:ac:1f:48:c3:cb:b2:76:2a:b1:de: d7:c9:8d:b4:10:ef:19:b7:fa:a2:bb:46:5d:72:42:7c:56:4e: 55:99:f4:68:35:e2:1a:eb:c8:ec:97:bc:b1:9c:91:83:6a:d4: cb:5d:2c:b8:df:e6:bb:5f:dc:3b:3f:13:65:bb:e2:a1:50:b2: 3b:34:ba:ca:d0:5d:1b:cd:f5:c2:bb:1d:21:2c:65:05:27:98: 43:9f:04:c1:32:44:da:e7:05:58:a0:e6:48:59:45:e4:2d:83: 24:c2:f1:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0abS5VszxU8fPuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk OTVjN2FmN2MtNjM3Ni00MTAxLWFkY2ItMDM3YTlmYjdhNjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM5aCZAR2O/0ISQMld6vN9dNwopErCu8lq4x I0cM2/P04qRyHLgYKtvizTcTSt6C+Zdg94vQDzmW+J7wN3fiVgAxZxD5WJpwjqQu ojuA+bGxmcuDVinAadGYmhkUIsKTeSCF+5UosV0QkcchRlOj3JRTpXa/3jU37NfQ y4rfOpT1HNjiOj8ZTSiEF0nsZyPOMPFQSwLeElnSx9qX8JwpCPE72Jw44zX9qjh9 Yi+QO/0WAi63mpT9Nt0b7INGurCD4sf+/RGh4JDqRcQG7hkKVTMq/ikRvO5QtWW0 2JuHPNe0VXGYKGBBlRuYSxP/G0AGZVeTAQHYjpixtUNbwQsWbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAm8Lb3rSNo4lP4f5jkiO+deW73hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmNiYWZmODMtZTBiYi0z MWViLThhYWEtZDMwMThkZGUxZDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJP/nMoOQj7OFm5b0LSXLfMNiP5hQtcyIAXsJB5xnrLV8wzuldxhVjYU dbwG7VhIghONqhPs+sIvsyztwSja9qSONnoA/wCsJXsv3evNmLUhu04vixcmy9Y4 w+3THsgT1SJlpXsjSUA23j2M6GE8jp2e/rX6GEFhem9NP7uhsfYxDmSEy2+FFbt2 92tZntf7QPtGw9o2h8rrrB9Iw8uydiqx3tfJjbQQ7xm3+qK7Rl1yQnxWTlWZ9Gg1 4hrryOyXvLGckYNq1MtdLLjf5rtf3Ds/E2W74qFQsjs0usrQXRvN9cK7HSEsZQUn mEOfBMEyRNrnBVig5khZReQtgyTC8ck= -----END CERTIFICATE-----Generated at Mon Oct 20 02:22:05 2025 by rpki-client