$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/582574f5-617f-367b-a3f3-d54b79705511.roa File: 582574f5-617f-367b-a3f3-d54b79705511.roa (raw, json) Hash identifier: tFTgZcGivRQGFi4yCvsCRo2YxdmqjKidrLfxvrhSVXk= Subject key identifier: 0B:87:65:CF:39:2D:5A:D7:B1:34:36:37:13:F8:6D:9A:EB:B3:B9:C4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583C92968381BCCC8FC6E000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/582574f5-617f-367b-a3f3-d54b79705511.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.205.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:92:96:83:81:bc:cc:8f:c6:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=653b77a4-39c3-4b84-a162-8c165704b2f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:40:84:bd:c9:c5:c1:c6:e7:98:16:4e:c7:1f: 7a:a9:5f:24:55:7f:85:5c:56:c6:89:67:10:e6:3a: c5:02:49:03:f4:84:6b:36:64:0a:25:4f:d4:6e:c6: b0:d0:2c:aa:66:50:e1:7e:b0:4e:74:80:f6:3d:60: 0a:7d:05:87:c7:4b:7b:ee:6e:86:00:7b:27:0b:49: e8:ee:ed:be:89:5c:a7:61:c8:74:2b:7a:a8:98:2a: b6:a4:4b:59:81:c5:e3:ee:61:45:14:84:a6:75:82: 1e:29:f9:11:f1:1a:32:16:3c:a3:ed:28:4f:da:b1: a5:f3:fa:05:5c:d0:38:e8:e6:e6:07:c9:63:03:b3: 4a:be:a2:32:39:94:9a:b1:9a:de:71:69:41:50:69: 1a:45:34:29:44:0a:2d:fa:f3:10:18:ed:1b:37:b0: 39:bf:5b:9f:da:f9:17:07:3f:52:3b:c3:8b:b5:62: 2d:2b:73:af:35:ef:fa:cd:c2:8e:fb:2e:f8:16:56: 2d:39:71:88:69:45:66:fa:22:17:59:69:dc:7a:8f: 42:bf:66:97:f9:0c:24:4d:ba:81:92:38:61:ac:30: a1:98:72:11:08:dd:69:4e:92:41:1f:cc:59:12:2e: 65:6a:88:06:0c:3f:6a:5d:fb:1e:1b:b5:f4:23:88: 4a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:87:65:CF:39:2D:5A:D7:B1:34:36:37:13:F8:6D:9A:EB:B3:B9:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/582574f5-617f-367b-a3f3-d54b79705511.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:69:a8:bc:3d:1d:6f:57:94:5f:94:c1:51:ca:3b:3d:e0:bc: 67:fd:54:b1:83:10:64:44:b6:c0:05:2f:39:7d:d2:9e:16:aa: fb:bb:3a:54:52:7f:65:f2:8c:5b:5e:f0:13:aa:0f:d5:26:1b: 81:fd:32:06:f0:45:f0:db:42:31:f8:f3:2c:d2:33:16:a4:5d: 8d:77:6b:9b:22:37:1c:b1:d1:5a:3f:6e:eb:97:18:b0:cd:45: d5:1c:ef:bf:50:44:5f:db:49:23:f8:25:6e:7c:d8:ce:86:88: c1:6f:87:2a:51:a8:b2:2c:7d:83:55:40:e0:09:f4:d1:06:f9: 10:f8:33:8d:dc:7d:19:fb:c0:6a:44:a0:91:ea:ad:8a:9d:82: 29:b8:0f:cc:66:f3:dd:1e:3d:c3:26:1c:bc:e5:93:1d:56:d2: a6:eb:1f:d9:ee:d3:50:a4:bd:a4:8f:e1:28:ad:56:28:60:08: c5:64:6c:30:9c:24:6e:b6:a4:87:3e:bb:5d:8e:ff:44:26:33: 9c:42:a9:46:90:0d:48:b8:1c:c0:f2:4d:a7:d9:c5:12:90:2b: 90:fa:8e:1e:39:45:f6:0e:bd:f8:68:ee:d7:16:f8:41:87:62: 7c:d4:38:33:a4:5e:d1:aa:ad:89:81:18:4c:06:c8:27:6b:bc: fc:eb:26:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJKWg4G8zI/G4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NjUzYjc3YTQtMzljMy00Yjg0LWExNjItOGMxNjU3MDRiMmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00CEvcnFwcbnmBZOxx96qV8kVX+FXFbGiWcQ 5jrFAkkD9IRrNmQKJU/Ubsaw0CyqZlDhfrBOdID2PWAKfQWHx0t77m6GAHsnC0no 7u2+iVynYch0K3qomCq2pEtZgcXj7mFFFISmdYIeKfkR8RoyFjyj7ShP2rGl8/oF XNA46ObmB8ljA7NKvqIyOZSasZrecWlBUGkaRTQpRAot+vMQGO0bN7A5v1uf2vkX Bz9SO8OLtWItK3OvNe/6zcKO+y74FlYtOXGIaUVm+iIXWWnceo9Cv2aX+QwkTbqB kjhhrDChmHIRCN1pTpJBH8xZEi5laogGDD9qXfseG7X0I4hK8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuHZc85LVrXsTQ2NxP4bZrrs7nEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTgyNTc0ZjUtNjE3Zi0z NjdiLWEzZjMtZDU0Yjc5NzA1NTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF80gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9pqLw9HW9XlF+UwVHKOz3gvGf9VLGDEGREtsAFLzl90p4Wqvu7OlRS f2XyjFte8BOqD9UmG4H9MgbwRfDbQjH48yzSMxakXY13a5siNxyx0Vo/buuXGLDN RdUc779QRF/bSSP4JW582M6GiMFvhypRqLIsfYNVQOAJ9NEG+RD4M43cfRn7wGpE oJHqrYqdgim4D8xm890ePcMmHLzlkx1W0qbrH9nu01CkvaSP4SitVihgCMVkbDCc JG62pIc+u12O/0QmM5xCqUaQDUi4HMDyTafZxRKQK5D6jh45RfYOvfho7tcW+EGH YnzUODOkXtGqrYmBGEwGyCdrvPzrJnY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:18:28 2025 by rpki-client