$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e90b418-f67c-3d83-8140-c4051c8986bb.roa File: 3e90b418-f67c-3d83-8140-c4051c8986bb.roa (raw, json) Hash identifier: EFJTE3ROS1kEgyipyIsntqyL4gT8meFGc9BYuqa8wn4= Subject key identifier: E7:90:DA:05:87:63:5A:81:59:1F:B9:92:53:DF:FD:85:DD:01:6C:01 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583C9CB1EDC3B632E706D350 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e90b418-f67c-3d83-8140-c4051c8986bb.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.204.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:9c:b1:ed:c3:b6:32:e7:06:d3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=38077347-7758-435f-9af6-fba210cd5969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:10:2d:8b:ec:60:01:00:17:53:c1:a6:7d:b8: 3b:85:73:9e:09:63:e0:a3:94:2d:3e:dc:25:96:24: d0:e7:36:1b:6e:87:1e:20:46:62:29:b9:98:d0:d8: 91:65:6b:66:79:74:6b:7f:21:39:1a:e8:e0:ac:9a: 6a:a0:b8:a4:71:40:89:ca:f3:e1:8d:c7:c2:66:23: 14:0b:a0:81:4c:a2:50:05:af:c5:6f:bd:63:af:7a: 67:57:1b:63:03:fa:d1:a5:6b:10:3f:fa:c1:61:be: 18:17:74:c0:9b:51:42:23:c1:52:81:58:f9:78:0e: 31:d6:df:18:a2:e2:55:fe:cd:86:9b:46:43:1e:4b: dc:95:3c:9b:a3:a3:1f:01:0a:6c:05:f8:95:d7:37: 7f:0d:90:67:c4:61:fa:3c:08:6f:85:fe:bd:77:89: c8:85:7d:a3:07:e0:4e:d0:21:32:ed:e5:01:78:24: 7e:26:0d:42:a0:59:39:52:99:77:c2:82:ae:e3:c6: bb:bf:51:4d:e3:70:27:9a:35:13:1f:a8:f9:45:a1: b5:47:a0:10:fa:79:6a:52:e1:17:4e:87:db:9a:ca: 81:66:b7:f9:2e:6c:04:34:ee:72:67:26:a2:94:d1: 78:4c:6b:7e:09:36:4d:af:b3:2f:12:c6:46:62:67: 06:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:90:DA:05:87:63:5A:81:59:1F:B9:92:53:DF:FD:85:DD:01:6C:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e90b418-f67c-3d83-8140-c4051c8986bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:9e:c0:32:28:79:1b:d6:f7:2b:31:86:56:30:1c:df:6b:f8: 8d:61:d4:12:f6:41:a4:34:c6:93:eb:12:3a:43:10:71:ae:d6: af:09:68:be:6a:07:a7:b3:19:90:a0:41:0f:a0:79:bc:8c:82: df:a3:e4:f8:bd:67:cc:e7:37:25:27:b5:bc:10:8b:0b:e9:64: 79:5d:82:94:e6:19:49:66:f6:77:15:df:34:3c:72:04:ef:e1: 39:1f:47:1a:41:4b:af:77:87:8f:a8:46:23:5a:b0:f2:31:0a: 63:e2:c2:35:93:ed:a9:45:b3:b6:39:01:70:84:a5:89:96:85: 95:d6:52:97:df:a8:16:e8:c3:da:f3:9a:2b:b3:b4:d3:68:1e: 0c:13:03:9d:b8:66:41:62:ff:25:53:3d:4d:2a:62:3f:5d:71: d5:0a:47:89:35:94:14:30:83:f3:c9:db:d4:c7:b8:b6:ac:62: 60:b2:8c:e2:3f:82:05:54:14:ae:c5:47:89:92:43:b7:3a:29: 3d:29:e9:7e:e1:9b:70:4e:e3:f8:6d:eb:9b:c6:fc:ea:04:ea: 9c:ad:35:04:4a:aa:4e:8b:34:f6:c3:82:86:6d:b4:f3:ba:da: c4:f1:be:2f:0c:ac:bb:be:ce:1b:5c:ec:79:bc:dc:bb:67:b7: cd:fe:f7:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJyx7cO2MucG01AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MzgwNzczNDctNzc1OC00MzVmLTlhZjYtZmJhMjEwY2Q1OTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRAti+xgAQAXU8Gmfbg7hXOeCWPgo5QtPtwl liTQ5zYbboceIEZiKbmY0NiRZWtmeXRrfyE5GujgrJpqoLikcUCJyvPhjcfCZiMU C6CBTKJQBa/Fb71jr3pnVxtjA/rRpWsQP/rBYb4YF3TAm1FCI8FSgVj5eA4x1t8Y ouJV/s2Gm0ZDHkvclTybo6MfAQpsBfiV1zd/DZBnxGH6PAhvhf69d4nIhX2jB+BO 0CEy7eUBeCR+Jg1CoFk5Upl3woKu48a7v1FN43AnmjUTH6j5RaG1R6AQ+nlqUuEX TofbmsqBZrf5LmwENO5yZyailNF4TGt+CTZNr7MvEsZGYmcGAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeQ2gWHY1qBWR+5klPf/YXdAWwBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2U5MGI0MTgtZjY3Yy0z ZDgzLTgxNDAtYzQwNTFjODk4NmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8xMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGewDIoeRvW9ysxhlYwHN9r+I1h1BL2QaQ0xpPrEjpDEHGu1q8JaL5q B6ezGZCgQQ+gebyMgt+j5Pi9Z8znNyUntbwQiwvpZHldgpTmGUlm9ncV3zQ8cgTv 4TkfRxpBS693h4+oRiNasPIxCmPiwjWT7alFs7Y5AXCEpYmWhZXWUpffqBbow9rz miuztNNoHgwTA524ZkFi/yVTPU0qYj9dcdUKR4k1lBQwg/PJ29THuLasYmCyjOI/ ggVUFK7FR4mSQ7c6KT0p6X7hm3BO4/ht65vG/OoE6pytNQRKqk6LNPbDgoZttPO6 2sTxvi8MrLu+zhtc7Hm83Ltnt83+9wc= -----END CERTIFICATE-----Generated at Mon Oct 20 12:28:56 2025 by rpki-client