$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2fd097ee-bbd0-3d05-aed1-9bb79970e4aa.roa File: 2fd097ee-bbd0-3d05-aed1-9bb79970e4aa.roa (raw, json) Hash identifier: wohQ/qtfl9oQf3Q2zMJs5XMwhP/HjJlrilwcUJ2plbw= Subject key identifier: A5:45:CF:71:62:EB:BC:C8:DC:9B:69:40:B5:C0:8A:33:63:B2:E7:33 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2E5C4FAF2D4F612A11091500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2fd097ee-bbd0-3d05-aed1-9bb79970e4aa.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.62.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:4f:af:2d:4f:61:2a:11:09:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=8afb011c-a5d5-4f75-bfc9-d3d142d81897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ab:49:3a:fb:55:71:6e:74:a0:f7:12:75:4b: db:c4:45:68:f8:5d:e7:e5:e4:d5:19:d4:96:a7:c4: fe:65:64:ab:34:bf:c5:c2:3e:bf:ee:70:32:c4:4d: cc:2b:38:b8:1e:5e:97:13:21:df:a6:f1:a7:74:1e: 45:41:25:52:45:f4:66:4e:55:62:f5:7d:2c:ec:28: e1:f5:3a:7a:f4:2e:10:e4:3c:fa:57:ad:93:ad:37: 15:3c:e0:ed:87:34:6a:62:e9:91:00:88:a4:b9:4f: 24:f6:33:9d:c7:ff:be:6f:c2:e8:da:06:e0:5b:51: 9f:42:be:f6:22:5e:a0:79:8f:85:a3:ff:4e:8b:5c: c3:58:19:68:c9:7e:62:d5:c2:5b:77:08:54:28:01: 9a:cc:2c:bc:37:7a:85:b7:87:d5:5e:5d:dc:1c:09: 3f:db:c3:76:96:0e:3d:59:5d:c2:d5:13:3d:35:db: 51:17:99:cc:7a:93:c8:8b:e9:38:03:72:09:78:34: f2:59:8c:c0:8e:5d:be:53:d5:b8:68:e3:56:21:69: 6d:45:02:44:0f:27:04:43:32:a9:5d:e9:50:e7:c3: c5:01:56:39:29:86:6b:8f:43:58:7a:68:63:5d:b0: 06:00:4e:8a:50:72:27:1a:9c:c2:f4:cb:fb:dd:b4: 12:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:45:CF:71:62:EB:BC:C8:DC:9B:69:40:B5:C0:8A:33:63:B2:E7:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2fd097ee-bbd0-3d05-aed1-9bb79970e4aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.62.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:b5:2e:15:f7:cf:a7:94:91:e7:df:4d:45:9b:a5:ac:70:e2: 62:16:c2:14:cb:76:5c:d1:6c:9f:71:f4:9d:de:02:44:d7:06: e8:61:e3:7e:95:3b:86:5f:0a:1c:45:ca:c9:64:17:ed:b0:6a: 32:1a:67:a2:20:e1:f0:c6:a5:75:2a:1e:3c:e3:e9:f8:d1:dd: 18:9a:52:bd:f9:a7:b2:b4:be:c7:af:4c:30:d2:78:f6:21:ec: 9e:8a:0a:ad:26:8e:f4:f6:07:f4:cd:c5:2f:65:d2:48:2d:26: 61:d9:57:48:6b:64:d6:91:77:b1:78:ba:84:24:1a:d3:ff:64: d0:ab:b3:27:18:05:d5:90:0f:c5:ab:0c:63:59:fb:14:dc:a3: 64:85:1b:1e:0f:f9:07:91:7c:71:b4:17:5a:2e:77:bc:1d:ce: a4:9d:94:ee:d8:53:2f:94:77:47:49:2e:f7:b0:b2:54:5a:60: 81:88:61:2e:6c:69:9f:63:52:42:d9:a7:ad:16:33:8e:23:2f: 8e:8c:f5:00:08:94:19:bd:e8:52:4f:4e:4c:d1:c8:3c:82:a4: 81:57:03:e9:22:5a:65:de:b4:7b:99:eb:31:41:66:14:14:b2: 6f:54:01:f9:a5:17:4f:91:d6:0c:bf:50:ff:00:48:0e:76:9f: 76:e1:a2:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXE+vLU9hKhEJFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk OGFmYjAxMWMtYTVkNS00Zjc1LWJmYzktZDNkMTQyZDgxODk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6tJOvtVcW50oPcSdUvbxEVo+F3n5eTVGdSW p8T+ZWSrNL/Fwj6/7nAyxE3MKzi4Hl6XEyHfpvGndB5FQSVSRfRmTlVi9X0s7Cjh 9Tp69C4Q5Dz6V62TrTcVPODthzRqYumRAIikuU8k9jOdx/++b8Lo2gbgW1GfQr72 Il6geY+Fo/9Oi1zDWBloyX5i1cJbdwhUKAGazCy8N3qFt4fVXl3cHAk/28N2lg49 WV3C1RM9NdtRF5nMepPIi+k4A3IJeDTyWYzAjl2+U9W4aONWIWltRQJEDycEQzKp XelQ58PFAVY5KYZrj0NYemhjXbAGAE6KUHInGpzC9Mv73bQSKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVFz3Fi67zI3JtpQLXAijNjsuczMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmZkMDk3ZWUtYmJkMC0z ZDA1LWFlZDEtOWJiNzk5NzBlNGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFz7nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJe1LhX3z6eUkeffTUWbpaxw4mIWwhTLdlzRbJ9x9J3eAkTXBuhh436V O4ZfChxFyslkF+2wajIaZ6Ig4fDGpXUqHjzj6fjR3RiaUr35p7K0vsevTDDSePYh 7J6KCq0mjvT2B/TNxS9l0kgtJmHZV0hrZNaRd7F4uoQkGtP/ZNCrsycYBdWQD8Wr DGNZ+xTco2SFGx4P+QeRfHG0F1oud7wdzqSdlO7YUy+Ud0dJLvewslRaYIGIYS5s aZ9jUkLZp60WM44jL46M9QAIlBm96FJPTkzRyDyCpIFXA+kiWmXetHuZ6zFBZhQU sm9UAfmlF0+R1gy/UP8ASA52n3bhosk= -----END CERTIFICATE-----Generated at Mon Oct 20 10:08:43 2025 by rpki-client