$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/653bd028-0607-38ae-a733-d6a6d1c52cd2.roa File: 653bd028-0607-38ae-a733-d6a6d1c52cd2.roa (raw, json) Hash identifier: 4xs030Y/cKXhXbjUA8o7agwnm0pAOroonGFfmsUZrs4= Subject key identifier: 02:F6:A4:48:68:53:A2:AB:02:36:06:BD:6C:62:30:34:F2:4F:6C:60 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E20EC54AF7297FF7714320 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/653bd028-0607-38ae-a733-d6a6d1c52cd2.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.203.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:0e:c5:4a:f7:29:7f:f7:71:43:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=379f1642-f094-4e8d-84a5-becda0a03fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5b:de:ee:77:a5:dd:ad:55:a2:5c:2e:e3:6e: 80:c3:a0:90:df:4b:7d:89:b1:51:ff:fc:e0:95:95: 29:c0:f2:3c:ea:cb:a3:b3:a7:ed:b0:81:24:cc:ef: 85:8b:f6:b5:e9:ea:cc:75:76:a0:4e:4f:de:db:4c: 88:be:86:2f:38:13:c8:f6:b7:ac:8e:8e:54:f4:13: 66:fa:3d:00:cd:d7:a8:a5:10:45:ef:c1:9d:08:67: 9d:11:16:7d:80:34:6d:06:95:cb:2b:a3:00:3c:a5: 7e:8b:b5:99:be:c5:cf:50:90:f7:9d:87:99:0a:dc: 24:a3:4f:85:4d:09:43:95:d3:5e:0f:cc:a4:2a:ab: 92:c9:19:4e:a4:4f:93:a5:ef:c4:75:da:1f:9a:7a: 69:52:68:7d:5b:69:37:d4:65:2f:89:cd:be:e5:f5: ac:d0:36:ae:3f:e4:1a:2f:23:8a:6c:7b:70:fd:01: 15:57:44:54:9f:9f:b0:47:ac:9a:a3:fc:5c:71:c6: f3:f4:9a:75:d1:d5:f3:ed:04:63:08:cf:cb:e8:be: 39:5e:86:21:93:ad:4a:e7:68:82:75:e0:3a:77:59: d6:d9:09:50:4f:7a:20:a9:18:1b:24:fd:8a:98:77: c8:f9:23:24:bb:bc:80:45:fe:0d:c1:3c:8b:9f:c9: e4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F6:A4:48:68:53:A2:AB:02:36:06:BD:6C:62:30:34:F2:4F:6C:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/653bd028-0607-38ae-a733-d6a6d1c52cd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:4b:d3:b2:62:35:cb:b0:82:c0:bf:f0:36:11:79:00:2f:a4: 3e:3e:5b:91:16:e4:ac:e2:25:3c:2b:9f:ad:b1:77:71:0a:26: a4:af:59:d9:90:ed:1d:97:8a:96:5f:f7:dd:c7:54:ee:16:9a: c5:ab:33:ff:88:89:7c:36:4f:f8:a4:6c:9f:ed:68:19:d2:dc: 11:09:a5:1f:61:97:ba:1c:bc:ec:f3:06:b7:56:cf:37:49:5c: 5f:de:a1:9f:c6:87:b3:0c:02:d3:c5:46:4d:92:7c:1b:c4:37: 96:ac:4c:fd:53:1e:47:dd:09:d2:5e:27:c4:04:c2:6a:86:a8: 56:2b:23:7c:df:ec:7d:41:65:6f:28:3a:e4:23:7b:03:ad:f4: 35:f1:fa:b6:ac:76:a8:2d:53:68:75:af:75:e2:d8:83:19:5d: 8f:bf:c0:2f:96:bb:76:c3:c8:15:d8:5d:ca:72:8a:3c:43:68: 49:94:fa:aa:42:61:8c:2e:71:1f:89:68:aa:d8:e8:5b:00:4c: 5e:15:ae:ce:97:10:08:ad:49:bc:9d:7a:df:d8:4e:48:ef:fa: 1d:ae:6d:76:ce:f5:9e:ad:67:de:93:23:c2:5e:22:79:be:5e: 66:3c:2f:2c:f0:97:51:02:07:b8:8a:9e:f2:74:35:25:63:68: 6a:9f:83:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4g7FSvcpf/dxQyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk Mzc5ZjE2NDItZjA5NC00ZThkLTg0YTUtYmVjZGEwYTAzZmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilve7nel3a1Volwu426Aw6CQ30t9ibFR//zg lZUpwPI86sujs6ftsIEkzO+Fi/a16erMdXagTk/e20yIvoYvOBPI9resjo5U9BNm +j0AzdeopRBF78GdCGedERZ9gDRtBpXLK6MAPKV+i7WZvsXPUJD3nYeZCtwko0+F TQlDldNeD8ykKquSyRlOpE+Tpe/EddofmnppUmh9W2k31GUvic2+5fWs0DauP+Qa LyOKbHtw/QEVV0RUn5+wR6yao/xcccbz9Jp10dXz7QRjCM/L6L45XoYhk61K52iC deA6d1nW2QlQT3ogqRgbJP2KmHfI+SMku7yARf4NwTyLn8nkwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAL2pEhoU6KrAjYGvWxiMDTyT2xgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjUzYmQwMjgtMDYwNy0z OGFlLWE3MzMtZDZhNmQxYzUyY2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8unMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5L07JiNcuwgsC/8DYReQAvpD4+W5EW5KziJTwrn62xd3EKJqSvWdmQ 7R2XipZf993HVO4WmsWrM/+IiXw2T/ikbJ/taBnS3BEJpR9hl7ocvOzzBrdWzzdJ XF/eoZ/Gh7MMAtPFRk2SfBvEN5asTP1THkfdCdJeJ8QEwmqGqFYrI3zf7H1BZW8o OuQjewOt9DXx+rasdqgtU2h1r3Xi2IMZXY+/wC+Wu3bDyBXYXcpyijxDaEmU+qpC YYwucR+JaKrY6FsATF4Vrs6XEAitSbydet/YTkjv+h2ubXbO9Z6tZ96TI8JeInm+ XmY8Lyzwl1ECB7iKnvJ0NSVjaGqfg88= -----END CERTIFICATE-----Generated at Mon Oct 20 02:38:09 2025 by rpki-client