$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68d1382c-2880-3333-854c-fffec404a6d8.roa File: 68d1382c-2880-3333-854c-fffec404a6d8.roa (raw, json) Hash identifier: pqSdJivOJEpKupnGb1Xfh0fEGBgLfeRlxP+NOFamMP4= Subject key identifier: 42:6D:7B:F3:2D:95:13:FD:CA:2F:21:9B:B2:71:D7:A3:EA:53:48:F8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E205B97604431DFB438940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68d1382c-2880-3333-854c-fffec404a6d8.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.203.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:05:b9:76:04:43:1d:fb:43:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=f87470b4-c6de-4b98-bd57-286254167196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e1:5a:bd:7a:ca:3d:66:bc:f1:61:4b:ca:f8: a7:f1:6a:d0:41:49:a0:72:a8:ab:d5:b6:e3:1d:f4: 73:a4:94:02:71:f5:22:56:30:41:39:d8:6e:49:97: e7:5d:25:86:4d:59:d6:b9:78:69:47:dc:8c:a2:20: 14:52:88:bb:99:19:83:6c:b6:10:02:2c:52:cc:84: 2d:ff:ba:36:10:f0:a5:52:02:50:dc:20:38:64:f7: de:49:89:0a:cb:f7:ed:70:e4:a3:80:85:72:86:f5: 2e:d4:68:fe:83:25:26:49:33:0e:bf:02:d4:ae:0e: 1b:d8:4b:8c:7d:a3:15:10:89:d1:91:b9:93:f1:f5: 40:7e:99:46:21:b4:01:ba:55:a7:d4:a7:e2:03:b1: f7:57:bf:fc:1c:a0:ae:58:31:6c:76:b6:17:84:88: 53:da:a7:bd:ba:6f:66:d0:8a:c4:e0:44:a8:8f:37: 67:bd:02:52:26:c1:3d:ff:cc:32:35:a8:8d:e4:5e: 63:44:94:2a:0c:cb:c8:fc:dd:d5:ae:3e:2e:33:87: 74:91:7e:f7:73:2c:74:ee:ef:43:c9:71:57:b2:1c: f6:84:53:51:aa:cb:e2:86:e0:a3:c6:b5:cd:ce:c0: 14:f8:b4:52:19:7c:f7:a2:01:be:06:9c:f6:02:59: ba:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6D:7B:F3:2D:95:13:FD:CA:2F:21:9B:B2:71:D7:A3:EA:53:48:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68d1382c-2880-3333-854c-fffec404a6d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:f4:16:62:87:68:20:ed:ba:cd:31:ed:5f:28:9d:bb:4a:e5: 28:d4:45:ac:b3:88:e6:8b:6d:8b:f2:0f:64:a4:f5:5f:17:70: 92:64:01:74:b4:ce:d1:3c:1b:0a:f7:b6:d0:2c:0e:4e:90:f9: 4b:3e:94:27:96:72:f9:d1:ee:dc:6c:b2:36:eb:1f:36:da:e8: d0:ee:7e:f3:4d:d5:32:c3:b5:d4:90:ad:1d:7c:6d:ef:0c:ce: 31:08:ac:6f:c8:e5:9a:8c:b6:e0:63:e6:b4:c0:89:e8:06:cb: 1d:7b:ec:e0:a4:1f:ef:87:dd:4f:e5:f8:8c:17:b1:25:ba:81: 0a:35:3b:d9:79:01:c0:db:3e:3a:9a:a7:ca:16:09:56:f8:fe: 89:76:3b:22:bc:ba:f6:0f:f2:74:fc:83:75:65:f0:98:15:38: 31:46:20:78:35:0b:15:43:cb:3f:ad:3e:bf:25:0a:6d:8c:3b: 5b:1b:7f:8b:95:f2:38:80:cf:bb:03:b5:5c:05:d6:2b:20:cf: bc:a1:50:16:c3:59:94:a1:2f:84:02:a0:b2:39:46:68:60:8c: 9d:a1:a4:2d:bd:af:28:c4:1d:98:37:d8:8b:da:7b:6a:6d:bd: 35:93:10:cd:8f:7e:30:ca:19:15:b5:97:0c:bd:56:1b:0a:c3: 5e:1a:01:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4gW5dgRDHftDiUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk Zjg3NDcwYjQtYzZkZS00Yjk4LWJkNTctMjg2MjU0MTY3MTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eFavXrKPWa88WFLyvin8WrQQUmgcqir1bbj HfRzpJQCcfUiVjBBOdhuSZfnXSWGTVnWuXhpR9yMoiAUUoi7mRmDbLYQAixSzIQt /7o2EPClUgJQ3CA4ZPfeSYkKy/ftcOSjgIVyhvUu1Gj+gyUmSTMOvwLUrg4b2EuM faMVEInRkbmT8fVAfplGIbQBulWn1KfiA7H3V7/8HKCuWDFsdrYXhIhT2qe9um9m 0IrE4ESojzdnvQJSJsE9/8wyNaiN5F5jRJQqDMvI/N3Vrj4uM4d0kX73cyx07u9D yXFXshz2hFNRqsvihuCjxrXNzsAU+LRSGXz3ogG+Bpz2Alm6QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJte/MtlRP9yi8hm7Jx16PqU0j4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjhkMTM4MmMtMjg4MC0z MzMzLTg1NGMtZmZmZWM0MDRhNmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8v0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADL0FmKHaCDtus0x7V8onbtK5SjURayziOaLbYvyD2Sk9V8XcJJkAXS0 ztE8Gwr3ttAsDk6Q+Us+lCeWcvnR7txssjbrHzba6NDufvNN1TLDtdSQrR18be8M zjEIrG/I5ZqMtuBj5rTAiegGyx177OCkH++H3U/l+IwXsSW6gQo1O9l5AcDbPjqa p8oWCVb4/ol2OyK8uvYP8nT8g3Vl8JgVODFGIHg1CxVDyz+tPr8lCm2MO1sbf4uV 8jiAz7sDtVwF1isgz7yhUBbDWZShL4QCoLI5RmhgjJ2hpC29ryjEHZg32Ivae2pt vTWTEM2PfjDKGRW1lwy9VhsKw14aAag= -----END CERTIFICATE-----Generated at Mon Oct 20 02:19:26 2025 by rpki-client