$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e1b9ef4-4ce0-35c0-b479-f5f85150e4b4.roa File: 2e1b9ef4-4ce0-35c0-b479-f5f85150e4b4.roa (raw, json) Hash identifier: RA8DVj9nd0WVHAWgZO05WVWhSOaGS5LbLQx22cyOV/c= Subject key identifier: 38:0C:67:35:62:00:F0:47:01:2F:FA:BF:EA:84:7B:81:EC:1B:4E:B0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2FC1AB7D8FF31E5D4E5CDA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e1b9ef4-4ce0-35c0-b479-f5f85150e4b4.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.192.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:ab:7d:8f:f3:1e:5d:4e:5c:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=c8b826b8-2cce-4320-ba6d-24fc7da7c3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:47:f8:d8:7a:64:08:04:d2:f3:6f:58:f9:e8: b5:60:7d:0d:a1:ab:cc:f9:32:6c:83:97:f3:bb:87: 15:ca:89:30:77:5e:43:d0:c6:5b:0e:88:ac:a6:9e: 5a:af:0d:8e:21:8d:ba:da:38:fe:6b:ec:b4:7c:b0: 5f:e0:af:2a:40:7b:15:d7:e5:28:42:b7:f6:6e:c4: 33:b1:55:cf:44:3a:7a:2a:2a:77:6a:18:98:54:ff: 8f:c4:4f:8d:dd:5e:fe:f8:1a:a8:95:78:bd:55:6f: 43:7a:56:7c:93:d2:c1:3c:a6:ba:01:63:ab:f0:32: 15:c1:2d:12:9c:cd:be:8e:2f:ef:04:a3:1d:64:72: 40:ac:b4:d8:57:b2:98:ad:36:a9:0a:27:55:6b:61: 97:b6:a1:f6:bb:c1:01:ab:df:36:f5:a4:de:ec:81: 85:f8:e2:f7:eb:32:e1:ed:db:61:36:a6:e8:ec:b4: 2d:b5:25:69:8d:ec:08:7e:8c:05:b6:5d:fd:9f:74: bb:c3:59:f9:61:a1:15:31:9d:c7:11:fe:65:4c:ae: ed:f6:41:5f:05:80:25:6b:91:64:cf:ca:d5:b6:82: 87:e6:10:51:ad:5a:1a:cb:9f:8c:dd:ea:a2:d0:10: 8c:57:36:af:0a:9d:74:aa:e4:55:76:c3:11:45:3d: 30:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0C:67:35:62:00:F0:47:01:2F:FA:BF:EA:84:7B:81:EC:1B:4E:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e1b9ef4-4ce0-35c0-b479-f5f85150e4b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.192.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:36:9b:b7:c5:ee:26:49:5d:7e:33:18:21:68:df:1c:79:65: 93:77:d9:d5:d9:3f:bc:bb:36:80:01:eb:de:97:d7:d3:1f:df: 4c:07:3c:0c:16:1f:ab:42:74:12:2b:ef:60:06:6a:1b:e1:3c: ef:52:e0:2e:75:b8:5c:21:04:a7:bd:5c:38:b6:b6:38:a9:ef: 65:29:fd:e8:8b:79:25:11:b8:25:c5:a4:64:d0:4c:9b:cf:b4: bf:7b:22:13:ef:ff:d9:24:ac:4a:95:72:ec:67:66:84:87:3a: 0b:9a:7e:6b:e5:4c:62:fd:ec:42:c1:6e:66:63:7f:c5:90:47: ea:bf:f6:9e:32:36:02:e3:b1:14:83:76:6d:9a:ef:cd:c6:99: 9c:55:6e:32:9b:f3:a3:0f:4c:f8:c4:b2:bc:80:4e:8f:60:c5: 13:cd:c0:5e:54:c5:39:dd:a8:d3:90:ba:dd:64:2f:72:8f:13: ee:25:a5:ea:92:e3:88:77:93:19:79:f8:18:85:6d:55:b2:54: e5:97:17:66:09:d3:92:93:c9:eb:00:a1:11:94:16:d1:66:b6: f0:de:13:0c:c6:bd:b6:fc:6d:7b:da:7b:4d:3f:20:31:cb:d9: 02:0f:a5:99:46:68:dc:dc:0a:f7:04:ed:be:15:22:08:52:f7: be:6c:90:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwat9j/MeXU5c2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk YzhiODI2YjgtMmNjZS00MzIwLWJhNmQtMjRmYzdkYTdjM2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEf42HpkCATS829Y+ei1YH0NoavM+TJsg5fz u4cVyokwd15D0MZbDoispp5arw2OIY262jj+a+y0fLBf4K8qQHsV1+UoQrf2bsQz sVXPRDp6Kip3ahiYVP+PxE+N3V7++BqolXi9VW9DelZ8k9LBPKa6AWOr8DIVwS0S nM2+ji/vBKMdZHJArLTYV7KYrTapCidVa2GXtqH2u8EBq9829aTe7IGF+OL36zLh 7dthNqbo7LQttSVpjewIfowFtl39n3S7w1n5YaEVMZ3HEf5lTK7t9kFfBYAla5Fk z8rVtoKH5hBRrVoay5+M3eqi0BCMVzavCp10quRVdsMRRT0wswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgMZzViAPBHAS/6v+qEe4HsG06wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmUxYjllZjQtNGNlMC0z NWMwLWI0NzktZjVmODUxNTBlNGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8B4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD82m7fF7iZJXX4zGCFo3xx5ZZN32dXZP7y7NoAB696X19Mf30wHPAwW H6tCdBIr72AGahvhPO9S4C51uFwhBKe9XDi2tjip72Up/eiLeSURuCXFpGTQTJvP tL97IhPv/9kkrEqVcuxnZoSHOguafmvlTGL97ELBbmZjf8WQR+q/9p4yNgLjsRSD dm2a783GmZxVbjKb86MPTPjEsryATo9gxRPNwF5UxTndqNOQut1kL3KPE+4lpeqS 44h3kxl5+BiFbVWyVOWXF2YJ05KTyesAoRGUFtFmtvDeEwzGvbb8bXvae00/IDHL 2QIPpZlGaNzcCvcE7b4VIghS975skFQ= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:23 2025 by rpki-client