$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4fbd85a2-bcf3-3ef3-b9e1-6c167d221ebb.roa File: 4fbd85a2-bcf3-3ef3-b9e1-6c167d221ebb.roa (raw, json) Hash identifier: 9zxjjejWy52UQ5hAFGZcCbw1ubZSKXqKOoOCeSR3S58= Subject key identifier: 65:4C:95:2E:43:30:00:C0:35:91:91:39:05:38:28:00:48:C5:51:2A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B59A1D2EE5F09DDE3786F1540 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4fbd85a2-bcf3-3ef3-b9e1-6c167d221ebb.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.208.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:d2:ee:5f:09:dd:e3:78:6f:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=72876d20-6485-4275-810b-f0f19144723a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:24:c9:f3:c0:3d:ac:a9:65:7d:50:2c:3e:fd: f9:e0:9e:87:63:54:d6:67:a0:9c:18:19:ba:b5:7a: ba:b4:0a:b2:89:a0:12:71:60:ea:83:c7:27:a1:a0: 07:e3:53:eb:05:9a:08:49:8b:4b:00:ff:f6:d0:d1: e0:76:0d:9e:e4:85:40:1c:71:44:bc:46:32:a6:69: c9:c1:13:26:d0:ec:cf:69:5b:87:67:51:9b:59:c2: 42:29:4d:9b:e0:71:38:cc:80:d4:36:5f:55:12:64: 21:87:a3:d2:b5:5f:e4:2f:db:7f:e5:ac:28:09:d8: 03:f1:f4:e3:4b:c0:8b:2f:b6:e5:2f:3e:4e:0d:0e: 3c:20:50:e0:1a:db:c2:a0:97:a5:9f:c0:78:be:49: f8:06:2d:4b:a9:99:4c:62:19:22:a1:c8:5e:28:b7: 13:52:89:20:98:18:14:85:6a:eb:b1:42:af:2a:c0: c9:17:d5:55:4e:9c:b3:42:ed:6b:0e:94:d8:be:c7: 34:bc:3b:28:2c:46:c4:ce:6f:0c:b7:37:d9:15:c0: 12:36:d0:68:07:29:60:02:1e:f1:db:20:2d:62:9f: 7b:e1:ca:ac:a7:c3:52:27:8d:bc:e2:d9:99:3f:a0: 34:f5:11:7c:d1:a5:88:76:87:a0:4b:92:c3:06:be: 2e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4C:95:2E:43:30:00:C0:35:91:91:39:05:38:28:00:48:C5:51:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4fbd85a2-bcf3-3ef3-b9e1-6c167d221ebb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:db:6c:10:bb:1a:14:df:31:c9:25:4f:10:1a:8e:19:2a:f7: 11:8c:b1:04:47:c3:14:be:6f:6b:d0:f0:71:ab:05:f5:e9:34: 76:97:5f:8f:b2:8b:5d:5f:5e:70:e2:27:55:4c:9e:45:a3:c4: e9:84:05:41:4b:89:e9:5e:0c:ae:27:d3:61:fc:18:16:94:74: 8f:1b:e7:fa:47:a9:6d:36:ba:29:a8:3e:9f:b5:c1:97:66:23: 0e:a0:c3:46:c5:f4:6c:19:0c:8c:04:38:c4:16:7e:41:97:91: bf:21:c5:3e:be:b2:27:53:f1:ba:95:94:f1:e5:1e:05:f2:b1: 0a:33:6b:df:fb:f8:67:3d:ce:95:1c:bc:ec:6c:92:91:80:91: a5:cf:30:77:0c:cd:3f:43:78:fe:68:b7:1b:1d:4f:5e:dc:87: aa:fd:16:3d:be:8c:3e:92:52:8f:fa:b7:92:3d:e3:f2:0f:2d: 27:88:f3:bb:df:7d:c6:bf:c4:2e:96:0e:85:84:5b:41:6b:74: 2d:54:1e:47:eb:8b:3f:2f:2e:14:6e:c6:dc:28:9c:c0:ca:89: f6:d8:95:62:b9:13:72:03:93:72:f2:ea:b6:8b:74:91:40:e7: 8e:7a:4d:5c:5c:26:78:1c:b9:0d:34:43:eb:de:59:b3:80:01: 09:dc:2f:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtZodLuXwnd43hvFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk NzI4NzZkMjAtNjQ4NS00Mjc1LTgxMGItZjBmMTkxNDQ3MjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSTJ88A9rKllfVAsPv354J6HY1TWZ6CcGBm6 tXq6tAqyiaAScWDqg8cnoaAH41PrBZoISYtLAP/20NHgdg2e5IVAHHFEvEYypmnJ wRMm0OzPaVuHZ1GbWcJCKU2b4HE4zIDUNl9VEmQhh6PStV/kL9t/5awoCdgD8fTj S8CLL7blLz5ODQ48IFDgGtvCoJeln8B4vkn4Bi1LqZlMYhkiocheKLcTUokgmBgU hWrrsUKvKsDJF9VVTpyzQu1rDpTYvsc0vDsoLEbEzm8MtzfZFcASNtBoBylgAh7x 2yAtYp974cqsp8NSJ4284tmZP6A09RF80aWIdoegS5LDBr4uawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVMlS5DMADANZGROQU4KABIxVEqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGZiZDg1YTItYmNmMy0z ZWYzLWI5ZTEtNmMxNjdkMjIxZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9CnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3bbBC7GhTfMcklTxAajhkq9xGMsQRHwxS+b2vQ8HGrBfXpNHaXX4+y i11fXnDiJ1VMnkWjxOmEBUFLieleDK4n02H8GBaUdI8b5/pHqW02uimoPp+1wZdm Iw6gw0bF9GwZDIwEOMQWfkGXkb8hxT6+sidT8bqVlPHlHgXysQoza9/7+Gc9zpUc vOxskpGAkaXPMHcMzT9DeP5otxsdT17ch6r9Fj2+jD6SUo/6t5I94/IPLSeI87vf fca/xC6WDoWEW0FrdC1UHkfriz8vLhRuxtwonMDKifbYlWK5E3IDk3Ly6raLdJFA 5456TVxcJngcuQ00Q+veWbOAAQncL4I= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:40 2025 by rpki-client