$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/561c21d7-add9-38f2-8e38-076d0a70c219.roa File: 561c21d7-add9-38f2-8e38-076d0a70c219.roa (raw, json) Hash identifier: CuUG1iwVgE2klCk6SdIQbbeAKwOSQfPG+/hqXn747C8= Subject key identifier: 9F:2A:AB:BA:D4:6A:05:4A:DD:0F:74:3B:2A:26:23:B5:AB:DB:EE:49 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2E5C57E8213D50768EBC88C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/561c21d7-add9-38f2-8e38-076d0a70c219.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.63.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:57:e8:21:3d:50:76:8e:bc:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=d302c481-f0b1-422c-8a85-75032d42800d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0c:81:d0:49:60:84:36:5e:1a:38:3d:0e:ca: f3:1a:fa:6e:9c:f4:0e:43:f0:59:d9:4c:3c:e0:43: 1f:bb:08:a7:64:40:03:5a:75:60:b9:9a:7d:e8:dc: fc:71:c6:ef:42:a0:9f:18:f8:e0:d0:83:61:b8:f0: aa:15:f3:ca:94:f3:5d:e1:5b:19:f9:94:7b:c6:b6: 63:2e:df:78:a5:43:4c:55:7d:f9:26:07:c8:0f:26: 6b:d6:9e:46:35:7f:fd:08:b4:25:5e:ea:73:eb:b0: 6a:eb:92:da:15:08:7b:49:56:78:ff:22:cc:ee:2c: 49:3b:6f:21:e4:33:6b:69:3d:12:e2:b1:c4:2f:ce: b6:2b:17:e2:98:07:10:d4:82:fc:bf:15:90:67:2b: 21:e7:a9:d9:31:2b:03:ed:31:93:26:7e:bf:82:1d: 6a:03:ca:39:38:b0:3d:6b:01:e2:26:ec:73:17:af: 75:bb:c9:12:77:54:b4:46:f0:d3:12:ac:b5:7e:77: 53:40:76:36:16:90:89:a8:67:9e:d6:9e:06:dc:5c: d3:33:92:84:3b:0d:e9:b9:16:a9:e3:34:b1:96:64: 33:ed:d2:6e:76:32:df:3e:02:50:e4:a9:96:cb:82: 2e:86:35:86:9b:2b:f5:e3:a3:57:84:c4:a3:59:7c: ae:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2A:AB:BA:D4:6A:05:4A:DD:0F:74:3B:2A:26:23:B5:AB:DB:EE:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/561c21d7-add9-38f2-8e38-076d0a70c219.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.63.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:0c:e7:34:60:57:73:28:9a:bd:3e:18:4f:1b:ee:e5:ad:b4: d8:f3:7b:7d:8b:00:14:f5:8f:00:6e:c5:74:7d:df:79:b5:a4: e9:fd:eb:07:8a:7a:f8:c2:54:2c:93:31:77:ab:bd:54:d9:1f: c5:3e:e6:16:ec:1c:e5:01:76:fd:b5:be:5b:66:7f:0f:3f:c9: 8e:fd:1c:75:f1:bc:13:64:08:53:13:bb:ef:94:bc:d1:87:2a: 08:29:65:3e:33:96:76:50:00:c5:8f:2f:ff:db:02:f1:74:d8: a2:4b:f0:7a:e2:cd:43:56:70:35:1e:5b:e5:0c:73:b0:7a:dc: 5d:96:a5:cb:6a:2f:11:60:ea:43:a6:15:87:bf:bd:eb:f9:42: 51:a1:ff:0d:95:c9:0e:8f:9c:b2:d7:39:1c:c2:1f:9b:2e:30: ff:cf:c3:c8:83:71:8f:6e:60:23:0c:f5:d8:a3:74:e4:0a:3a: d4:9b:3b:81:80:49:4c:57:25:ee:17:81:95:0a:4e:b1:10:e7: aa:70:c5:d3:9d:a2:36:a0:99:58:7e:86:dd:ee:b7:2a:60:7a: ab:57:e3:59:b1:62:d7:85:ef:5f:f1:9c:8e:be:45:9c:89:e5: c3:1a:08:1f:15:c3:f9:de:ae:32:8b:f9:a0:f4:14:cb:5a:55: a5:4c:97:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXFfoIT1Qdo68iMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk ZDMwMmM0ODEtZjBiMS00MjJjLThhODUtNzUwMzJkNDI4MDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAyB0ElghDZeGjg9DsrzGvpunPQOQ/BZ2Uw8 4EMfuwinZEADWnVguZp96Nz8ccbvQqCfGPjg0INhuPCqFfPKlPNd4VsZ+ZR7xrZj Lt94pUNMVX35JgfIDyZr1p5GNX/9CLQlXupz67Bq65LaFQh7SVZ4/yLM7ixJO28h 5DNraT0S4rHEL862KxfimAcQ1IL8vxWQZysh56nZMSsD7TGTJn6/gh1qA8o5OLA9 awHiJuxzF691u8kSd1S0RvDTEqy1fndTQHY2FpCJqGee1p4G3FzTM5KEOw3puRap 4zSxlmQz7dJudjLfPgJQ5KmWy4IuhjWGmyv146NXhMSjWXyuvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8qq7rUagVK3Q90OyomI7Wr2+5JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTYxYzIxZDctYWRkOS0z OGYyLThlMzgtMDc2ZDBhNzBjMjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFz/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0M5zRgV3Momr0+GE8b7uWttNjze32LABT1jwBuxXR933m1pOn96weK evjCVCyTMXervVTZH8U+5hbsHOUBdv21vltmfw8/yY79HHXxvBNkCFMTu++UvNGH KggpZT4zlnZQAMWPL//bAvF02KJL8HrizUNWcDUeW+UMc7B63F2WpctqLxFg6kOm FYe/vev5QlGh/w2VyQ6PnLLXORzCH5suMP/Pw8iDcY9uYCMM9dijdOQKOtSbO4GA SUxXJe4XgZUKTrEQ56pwxdOdojagmVh+ht3utypgeqtX41mxYteF71/xnI6+RZyJ 5cMaCB8Vw/nerjKL+aD0FMtaVaVMl2A= -----END CERTIFICATE-----Generated at Mon Oct 20 10:07:36 2025 by rpki-client