$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/391e3f2f-8264-3cb9-ae2f-062cb5400e46.roa File: 391e3f2f-8264-3cb9-ae2f-062cb5400e46.roa (raw, json) Hash identifier: 6/9xAtDzQMVZ4aDqO/k4eoJF6KcYRl3cjL+4yRKuCJE= Subject key identifier: A0:FA:44:A1:96:C9:A0:10:8C:4E:0A:F9:91:6D:8F:EE:7E:8B:D7:53 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E20DCD94C5C03EC986EE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/391e3f2f-8264-3cb9-ae2f-062cb5400e46.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.203.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:0d:cd:94:c5:c0:3e:c9:86:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=74785792-3669-4796-9e49-59d21b0ad975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:70:f0:14:18:c7:6c:6e:ed:29:cf:26:dc:e7: 31:83:cb:b6:ac:e2:64:fc:81:9f:2e:6b:1c:c5:20: 84:8c:5e:b6:e8:92:9e:42:d2:6a:57:ef:a6:83:8f: 49:3c:9b:a4:da:ee:7e:83:ce:77:4c:7c:41:86:22: 6f:ed:bc:36:ba:97:4f:ef:4b:0b:45:92:8d:84:2b: df:e3:2d:05:22:52:f4:5a:f4:4b:84:74:f4:ba:60: 19:58:d3:5f:3f:a5:09:04:ba:74:e4:4d:6a:a5:ac: bc:37:5b:79:e4:fc:44:8f:26:22:5a:4e:56:f4:18: 85:80:99:65:d0:c3:d1:85:73:28:9c:0f:92:eb:2f: df:4f:df:5d:78:56:bc:02:92:c8:55:e8:f4:98:7e: d3:50:8e:12:0c:c8:5a:ec:d2:8c:eb:ce:ee:a6:6e: f1:e8:86:e8:c6:24:b3:d7:04:fb:eb:18:79:8c:fe: 40:d2:34:e3:65:f2:69:19:44:df:1a:70:bd:74:e5: 4c:37:94:59:9c:4b:46:aa:d3:64:4d:ea:18:f1:2f: 5f:9a:5c:c6:cb:29:d6:56:11:4f:f4:bf:58:a1:03: a7:d8:f7:c0:d6:07:8c:3a:19:52:13:88:81:ca:1f: 30:71:6d:14:00:bd:f2:65:de:98:58:7f:82:df:8e: b2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FA:44:A1:96:C9:A0:10:8C:4E:0A:F9:91:6D:8F:EE:7E:8B:D7:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/391e3f2f-8264-3cb9-ae2f-062cb5400e46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:8d:82:ae:ac:ed:a9:2a:47:bb:3a:7e:ee:84:30:f6:fb:22: ab:a7:9a:26:98:1f:6d:82:5f:be:f1:b2:85:33:d2:bb:52:10: a5:0e:7c:4a:f2:c6:36:79:37:c5:88:80:5e:ff:44:88:b5:44: e1:4c:34:b0:9a:36:d5:80:9d:55:b9:2e:b8:6e:a2:27:50:77: 7b:f4:59:fe:08:18:23:92:83:a6:0c:6a:57:43:26:88:3c:04: 63:dd:41:8f:6e:1f:3f:99:7f:f1:26:a0:43:a5:e8:7c:7a:ca: c7:99:c3:96:f2:31:2b:46:18:d9:67:ee:1d:f2:8d:68:1b:ff: 38:28:9a:63:a9:a8:4a:db:a2:d9:21:cd:a9:b5:d3:df:1b:71: 68:78:dd:34:f9:20:97:2f:9b:30:f2:bc:29:86:9a:65:27:f1: 1e:82:f7:9f:52:6d:51:32:b7:ba:12:ed:97:5e:89:de:32:4d: 83:6f:32:97:d5:97:3c:ec:5b:e5:b4:1d:f3:8d:a8:c3:7a:65: 07:e6:ae:ca:03:7e:67:a4:47:d4:70:ad:9c:2d:5a:29:4b:32: 85:a9:a2:0b:f5:e3:68:a3:d7:0a:a7:f0:d6:4b:ce:9b:bd:ad: 97:d2:e2:c7:58:b5:42:40:4b:7c:c6:08:1c:e7:4a:dd:7d:ad: f3:ad:69:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4g3NlMXAPsmG7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NzQ3ODU3OTItMzY2OS00Nzk2LTllNDktNTlkMjFiMGFkOTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnDwFBjHbG7tKc8m3Ocxg8u2rOJk/IGfLmsc xSCEjF626JKeQtJqV++mg49JPJuk2u5+g853THxBhiJv7bw2updP70sLRZKNhCvf 4y0FIlL0WvRLhHT0umAZWNNfP6UJBLp05E1qpay8N1t55PxEjyYiWk5W9BiFgJll 0MPRhXMonA+S6y/fT99deFa8ApLIVej0mH7TUI4SDMha7NKM687upm7x6IboxiSz 1wT76xh5jP5A0jTjZfJpGUTfGnC9dOVMN5RZnEtGqtNkTeoY8S9fmlzGyynWVhFP 9L9YoQOn2PfA1geMOhlSE4iByh8wcW0UAL3yZd6YWH+C346yCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKD6RKGWyaAQjE4K+ZFtj+5+i9dTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzkxZTNmMmYtODI2NC0z Y2I5LWFlMmYtMDYyY2I1NDAwZTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8s9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGNgq6s7akqR7s6fu6EMPb7IqunmiaYH22CX77xsoUz0rtSEKUOfEry xjZ5N8WIgF7/RIi1ROFMNLCaNtWAnVW5LrhuoidQd3v0Wf4IGCOSg6YMaldDJog8 BGPdQY9uHz+Zf/EmoEOl6Hx6yseZw5byMStGGNln7h3yjWgb/zgommOpqErbotkh zam1098bcWh43TT5IJcvmzDyvCmGmmUn8R6C959SbVEyt7oS7Zdeid4yTYNvMpfV lzzsW+W0HfONqMN6ZQfmrsoDfmekR9RwrZwtWilLMoWpogv142ij1wqn8NZLzpu9 rZfS4sdYtUJAS3zGCBznSt19rfOtadI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:36:48 2025 by rpki-client