$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4fceb7cb-42ce-3f1f-b6b2-32eea3cde2cd.roa File: 4fceb7cb-42ce-3f1f-b6b2-32eea3cde2cd.roa (raw, json) Hash identifier: vmhZQBhVs+uDhnFhPL7fla70UHwKtSBnypRAwf793Ic= Subject key identifier: C3:EF:68:84:0C:5E:6A:D7:9F:C1:DD:15:A5:2A:BE:39:8C:90:6A:85 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B620222F73C3C3BE91001A800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4fceb7cb-42ce-3f1f-b6b2-32eea3cde2cd.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 20940 IP address blocks: 23.215.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:22:f7:3c:3c:3b:e9:10:01:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=fb0f209e-a18d-4675-a915-4ceabc73c751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c3:4a:78:8b:18:b5:39:70:17:a6:8f:fa:04: 79:01:ea:27:74:4c:99:fd:f7:8f:43:eb:2e:91:16: 79:9c:79:5b:92:ad:27:a2:30:3b:aa:7b:73:12:be: da:db:bb:38:27:ad:c7:3d:f6:b9:c2:85:3d:71:5f: 9e:33:df:b4:65:72:d1:30:8c:e1:3c:16:ef:6e:f9: 0c:08:bd:76:27:af:4c:62:fb:5d:7b:42:94:dc:22: 46:86:5a:95:a7:20:4f:e5:1c:2a:e2:c1:91:7c:c9: 82:fb:86:ff:7f:47:03:14:ad:b9:cb:f5:1e:dd:f1: 09:a3:1e:02:1d:4c:f1:23:c0:9a:60:e5:90:4a:ba: da:bb:a6:a3:71:6e:cf:3c:87:22:63:a3:8b:70:a1: 6f:d7:88:f5:e9:55:5f:2d:d7:8a:bf:84:aa:cb:b5: 0f:72:04:93:10:11:e6:1b:3f:fb:22:12:d9:84:18: e7:77:a9:1c:df:6b:11:21:03:3e:58:f4:c7:d9:89: 82:da:12:f4:bd:59:67:0a:dd:d5:e6:b7:c8:d2:27: 7d:2c:ec:02:d5:58:ea:35:34:35:04:ae:a9:ec:4a: 9e:54:2e:d3:09:73:4c:53:a0:07:a1:f6:46:f6:5f: 1a:96:9d:57:c4:0a:5d:71:ac:74:52:66:74:80:0c: d8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EF:68:84:0C:5E:6A:D7:9F:C1:DD:15:A5:2A:BE:39:8C:90:6A:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4fceb7cb-42ce-3f1f-b6b2-32eea3cde2cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:19:f4:6c:ce:ca:a4:1a:ed:e4:46:a2:50:0e:1e:1f:17:ee: 48:fd:6d:11:9b:77:34:6e:ad:cb:6c:7d:3a:b0:cc:f4:c5:d4: 6e:7d:7f:0e:38:a1:e9:d3:5e:98:40:f8:97:1d:b6:db:a8:a1: 30:6e:17:50:aa:2a:dc:d9:13:c2:56:65:ba:9e:e5:c1:8c:a6: 86:16:5b:db:e1:69:51:4c:37:bb:d7:84:aa:62:df:a4:63:20: 24:4b:4e:7d:5d:c9:e6:92:66:4d:6f:df:61:98:41:48:0f:13: a7:32:b6:42:1c:c7:1d:53:a1:37:a7:b8:02:8c:3c:9b:7e:33: a4:c4:9e:c8:44:68:e6:59:ac:9f:3f:b0:5b:f7:a5:6a:7f:cd: 55:38:bb:a4:62:e4:79:53:ad:4c:ae:d6:0f:84:b7:81:8a:0a: b1:c5:0c:64:80:b4:a4:0a:90:77:86:f7:16:71:45:bb:31:7b: e8:8e:c0:c8:e9:40:d7:a5:47:83:78:c0:57:7d:d1:cc:4e:5f: df:be:fc:8f:d2:82:3d:c5:f5:67:86:40:0f:82:b4:ec:8d:d9: 75:3c:5b:67:4b:f9:07:d4:8f:8b:ac:62:32:11:d2:ce:d8:66: e9:2a:7e:f4:f6:5b:7e:60:e9:9d:99:60:dd:9d:72:8e:44:54: 5a:55:f5:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAiL3PDw76RABqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZmIwZjIwOWUtYTE4ZC00Njc1LWE5MTUtNGNlYWJjNzNjNzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8NKeIsYtTlwF6aP+gR5AeondEyZ/fePQ+su kRZ5nHlbkq0nojA7qntzEr7a27s4J63HPfa5woU9cV+eM9+0ZXLRMIzhPBbvbvkM CL12J69MYvtde0KU3CJGhlqVpyBP5Rwq4sGRfMmC+4b/f0cDFK25y/Ue3fEJox4C HUzxI8CaYOWQSrrau6ajcW7PPIciY6OLcKFv14j16VVfLdeKv4Sqy7UPcgSTEBHm Gz/7IhLZhBjnd6kc32sRIQM+WPTH2YmC2hL0vVlnCt3V5rfI0id9LOwC1VjqNTQ1 BK6p7EqeVC7TCXNMU6AHofZG9l8alp1XxApdcax0UmZ0gAzY7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPvaIQMXmrXn8HdFaUqvjmMkGqFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGZjZWI3Y2ItNDJjZS0z ZjFmLWI2YjItMzJlZWEzY2RlMmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9cDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcZ9GzOyqQa7eRGolAOHh8X7kj9bRGbdzRurctsfTqwzPTF1G59fw44 oenTXphA+JcdttuooTBuF1CqKtzZE8JWZbqe5cGMpoYWW9vhaVFMN7vXhKpi36Rj ICRLTn1dyeaSZk1v32GYQUgPE6cytkIcxx1ToTenuAKMPJt+M6TEnshEaOZZrJ8/ sFv3pWp/zVU4u6Ri5HlTrUyu1g+Et4GKCrHFDGSAtKQKkHeG9xZxRbsxe+iOwMjp QNelR4N4wFd90cxOX9++/I/Sgj3F9WeGQA+CtOyN2XU8W2dL+QfUj4usYjIR0s7Y ZukqfvT2W35g6Z2ZYN2dco5EVFpV9RU= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:37 2025 by rpki-client