$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32cdbca4-5b9c-38aa-b890-8e62d4d357b7.roa File: 32cdbca4-5b9c-38aa-b890-8e62d4d357b7.roa (raw, json) Hash identifier: a5rP/owvB++tF9dT9JIRkpJeAZKISwm8fWjpCpVy3Dg= Subject key identifier: 1D:B0:AA:EC:49:2B:34:C2:D5:3A:75:1F:5A:48:66:B5:14:20:B4:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2CF6F91DF62B1703736B5180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32cdbca4-5b9c-38aa-b890-8e62d4d357b7.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 35994 IP address blocks: 23.58.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:f9:1d:f6:2b:17:03:73:6b:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=51d575be-2276-4556-967b-3429fa93434b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:74:8b:52:2e:bf:5f:7f:4f:7d:d7:16:ff:32: b1:55:f1:ba:f7:0c:20:93:6d:95:69:03:67:9d:8f: 85:0e:15:ef:52:8f:e3:70:44:ec:07:97:8b:e2:a6: 3d:12:ed:ee:08:b0:14:68:c9:12:3b:60:71:90:2a: 77:ea:31:fd:d0:e9:a8:26:4c:12:b8:33:28:79:4e: 91:44:79:3f:8a:2e:1b:5a:5a:55:0f:39:23:f0:4e: 0c:05:db:45:b3:ec:ff:01:31:6a:41:83:72:dc:98: c6:53:d8:8f:67:0f:5e:9b:b2:49:44:ba:27:c0:fd: b0:ed:f7:ec:8c:ec:1d:7f:77:13:98:a6:f1:a9:38: 76:5c:ec:cd:4b:dd:eb:9d:0c:86:ad:90:e2:17:b9: 5a:9b:b3:4a:47:79:94:a2:09:d2:eb:9d:05:5d:28: 2b:62:59:ec:f6:c9:20:1e:11:32:ff:04:14:ea:a3: d9:dc:ca:9a:3e:4d:72:c8:1f:83:3c:0f:2a:96:99: 39:df:2a:8d:90:1e:68:c0:96:85:37:19:b8:75:f7: 65:ad:7f:cb:ac:df:bf:18:0b:0a:ab:b3:ab:43:4c: 68:ad:82:fd:c8:2d:c7:1e:7e:1c:8c:41:77:e1:3a: dc:86:83:1b:49:27:84:c2:40:be:00:1f:68:fc:1f: 9e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B0:AA:EC:49:2B:34:C2:D5:3A:75:1F:5A:48:66:B5:14:20:B4:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32cdbca4-5b9c-38aa-b890-8e62d4d357b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:3f:00:30:31:e2:ba:06:da:b6:98:f1:d1:9f:18:a8:99:f0: 07:59:28:16:dd:4a:7e:f3:d8:63:0c:4b:c7:d0:a7:7e:a6:2a: 7f:58:28:7c:93:0a:c7:4f:76:f4:56:d2:50:22:85:1a:be:b1: e1:74:81:5b:0f:79:75:e9:b5:2d:55:26:70:09:9d:a6:c2:43: 87:4a:03:12:b3:3b:b1:7f:b8:5a:42:4c:c0:6e:ca:35:4b:9a: a8:16:b4:76:db:6a:9c:d1:ca:ec:9d:e4:99:fe:42:0b:e0:9a: 84:7b:fd:5b:0a:07:a8:b8:13:b3:c4:8c:27:65:b9:d5:40:0f: 34:26:68:01:f6:e2:b2:ed:10:28:4e:5d:28:69:c0:fd:78:bb: 2f:18:e9:44:e4:1d:c9:4b:ef:7e:2b:a1:5a:17:37:15:2c:e1: 27:2d:87:09:2b:e9:ee:cc:f0:ab:73:ff:82:1e:dc:ed:53:33: 5c:de:f0:f6:39:70:11:42:8c:ec:59:4a:0d:cd:20:d1:42:7b: 7c:65:43:ba:06:df:f3:0c:1e:6a:4a:84:72:a5:74:65:ec:33: 2e:08:bd:b7:20:0c:6d:4e:cb:2d:f7:e2:74:b4:72:58:77:e3: 40:81:d8:0b:e6:b1:d3:49:fd:9f:2a:21:a3:e8:75:84:c5:dc: 94:e3:e9:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9vkd9isXA3NrUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk NTFkNTc1YmUtMjI3Ni00NTU2LTk2N2ItMzQyOWZhOTM0MzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HSLUi6/X39PfdcW/zKxVfG69wwgk22VaQNn nY+FDhXvUo/jcETsB5eL4qY9Eu3uCLAUaMkSO2BxkCp36jH90OmoJkwSuDMoeU6R RHk/ii4bWlpVDzkj8E4MBdtFs+z/ATFqQYNy3JjGU9iPZw9em7JJRLonwP2w7ffs jOwdf3cTmKbxqTh2XOzNS93rnQyGrZDiF7lam7NKR3mUognS650FXSgrYlns9skg HhEy/wQU6qPZ3MqaPk1yyB+DPA8qlpk53yqNkB5owJaFNxm4dfdlrX/LrN+/GAsK q7OrQ0xorYL9yC3HHn4cjEF34TrchoMbSSeEwkC+AB9o/B+eIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2wquxJKzTC1Tp1H1pIZrUUILQRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzJjZGJjYTQtNWI5Yy0z OGFhLWI4OTAtOGU2MmQ0ZDM1N2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzrcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEg/ADAx4roG2raY8dGfGKiZ8AdZKBbdSn7z2GMMS8fQp36mKn9YKHyT CsdPdvRW0lAihRq+seF0gVsPeXXptS1VJnAJnabCQ4dKAxKzO7F/uFpCTMBuyjVL mqgWtHbbapzRyuyd5Jn+QgvgmoR7/VsKB6i4E7PEjCdludVADzQmaAH24rLtEChO XShpwP14uy8Y6UTkHclL734roVoXNxUs4Scthwkr6e7M8Ktz/4Ie3O1TM1ze8PY5 cBFCjOxZSg3NINFCe3xlQ7oG3/MMHmpKhHKldGXsMy4IvbcgDG1Oyy334nS0clh3 40CB2AvmsdNJ/Z8qIaPodYTF3JTj6eM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:35:07 2025 by rpki-client