$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d19ef18-0e30-3d00-88e2-3ca909f0961b.roa File: 3d19ef18-0e30-3d00-88e2-3ca909f0961b.roa (raw, json) Hash identifier: 6c8M6mCv6dewumDKSpbllsPRKe/5UgJhcjJBWeO27Ao= Subject key identifier: 8F:51:B2:EC:C3:1C:B7:D0:A5:FC:56:AF:0A:26:EE:B5:09:E0:CF:D3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B434C8928B2B2D6D2C524FF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d19ef18-0e30-3d00-88e2-3ca909f0961b.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 35994 IP address blocks: 23.195.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:89:28:b2:b2:d6:d2:c5:24:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=cd69fa4e-1e2f-45bc-b550-ef50ca8439bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:22:2d:1f:b7:58:aa:5b:c4:f4:1c:83:0a:83: 94:be:65:e1:bd:3f:ef:1b:c6:fb:4b:84:10:57:66: c8:85:99:60:f7:7c:8a:10:4a:da:3f:c6:46:b0:ae: 77:37:bf:94:a9:34:73:f5:fc:15:68:24:a3:56:a8: d6:8c:ea:9e:d3:16:d1:44:a6:7d:e4:15:12:67:0f: 13:ea:3f:61:27:4d:40:d8:7c:97:55:2e:ca:f5:84: ac:7e:89:c0:a4:09:88:80:5e:9f:9e:7a:03:9e:43: 2e:6e:69:a6:a1:74:4c:1a:f5:79:93:e4:e9:a4:0d: c0:86:a9:47:7b:ad:04:9b:2a:4d:6d:c7:91:a6:df: 4b:cf:ab:bd:b1:bf:04:8b:b0:60:28:6a:3d:bd:2a: 23:7e:16:7f:68:90:38:e1:aa:cf:49:5f:4c:80:90: 54:bd:d2:fb:6f:83:da:00:9d:1b:9a:8a:0e:7f:d9: 0b:59:7f:fb:8e:bf:48:10:e4:46:17:6f:93:f9:96: 1a:ed:a3:6c:4a:1d:2d:7e:78:a4:cc:7b:5b:29:af: f0:fa:53:70:4d:36:81:71:5a:e7:04:07:31:41:21: 2b:4e:d3:55:9d:a3:3f:1f:82:fa:9d:ce:86:be:10: c4:bd:6d:3a:b6:20:2e:41:b8:ef:d1:c3:a4:30:05: fc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:51:B2:EC:C3:1C:B7:D0:A5:FC:56:AF:0A:26:EE:B5:09:E0:CF:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d19ef18-0e30-3d00-88e2-3ca909f0961b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:58:16:eb:39:80:f9:8e:bd:ea:84:37:ba:16:64:e2:25:75: e4:72:47:8c:ee:5b:fe:7c:36:4e:d3:19:7d:f2:d3:10:44:f4: c0:68:28:26:a2:de:7e:83:9d:d1:9b:bd:01:73:80:34:13:d7: e4:a6:84:2d:07:05:80:a3:5c:c9:00:6c:9a:27:12:b3:51:2b: 27:31:4d:d6:d1:96:39:1a:7b:6a:d2:89:f5:bc:07:f2:41:b7: 54:a3:42:9c:85:c8:09:53:2e:e8:72:a5:45:e2:cd:67:f3:8e: 12:fa:89:da:53:8c:56:15:d4:f0:e7:3a:1b:e7:d3:6c:6d:e6: d7:7e:56:d1:a4:2d:d7:df:e2:5a:32:cf:65:78:45:60:e4:d9: 6a:8c:9d:0c:40:3d:70:6d:fe:d9:09:02:6d:90:6b:a9:2d:39: 13:64:17:be:a1:c4:89:fe:03:91:55:05:70:a1:bb:57:1a:d4: fa:cb:d2:6b:d3:d7:09:68:4e:52:89:17:35:22:8e:2d:29:aa: 9e:38:48:aa:88:10:e1:8e:24:b7:12:dd:a6:e2:91:fd:5e:12: 33:2c:13:32:ca:ad:c4:86:b2:c4:e7:96:c2:13:d9:dd:92:f2: ad:79:e1:24:8e:af:4a:4a:07:4c:45:9a:b3:a5:70:d4:22:12: 13:f2:0f:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTIkosrLW0sUk/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk Y2Q2OWZhNGUtMWUyZi00NWJjLWI1NTAtZWY1MGNhODQzOWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiItH7dYqlvE9ByDCoOUvmXhvT/vG8b7S4QQ V2bIhZlg93yKEEraP8ZGsK53N7+UqTRz9fwVaCSjVqjWjOqe0xbRRKZ95BUSZw8T 6j9hJ01A2HyXVS7K9YSsfonApAmIgF6fnnoDnkMubmmmoXRMGvV5k+TppA3AhqlH e60EmypNbceRpt9Lz6u9sb8Ei7BgKGo9vSojfhZ/aJA44arPSV9MgJBUvdL7b4Pa AJ0bmooOf9kLWX/7jr9IEORGF2+T+ZYa7aNsSh0tfnikzHtbKa/w+lNwTTaBcVrn BAcxQSErTtNVnaM/H4L6nc6GvhDEvW06tiAuQbjv0cOkMAX85wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9RsuzDHLfQpfxWrwom7rUJ4M/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2QxOWVmMTgtMGUzMC0z ZDAwLTg4ZTItM2NhOTA5ZjA5NjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8MvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVYFus5gPmOveqEN7oWZOIldeRyR4zuW/58Nk7TGX3y0xBE9MBoKCai 3n6DndGbvQFzgDQT1+SmhC0HBYCjXMkAbJonErNRKycxTdbRljkae2rSifW8B/JB t1SjQpyFyAlTLuhypUXizWfzjhL6idpTjFYV1PDnOhvn02xt5td+VtGkLdff4loy z2V4RWDk2WqMnQxAPXBt/tkJAm2Qa6ktORNkF76hxIn+A5FVBXChu1ca1PrL0mvT 1wloTlKJFzUiji0pqp44SKqIEOGOJLcS3abikf1eEjMsEzLKrcSGssTnlsIT2d2S 8q154SSOr0pKB0xFmrOlcNQiEhPyDwg= -----END CERTIFICATE-----Generated at Mon Oct 20 07:22:26 2025 by rpki-client