$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69e90291-17b7-3ca6-9dae-4a362a185d7f.roa File: 69e90291-17b7-3ca6-9dae-4a362a185d7f.roa (raw, json) Hash identifier: Ex8WVFBGdUb+mkd59rlwyTdllOSyro4Oe83AyNmzz6w= Subject key identifier: 40:85:D0:EF:9F:2F:4B:32:33:A1:C6:84:63:5A:E2:85:B8:97:9F:7C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E20E6E90CD7E03F6779780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69e90291-17b7-3ca6-9dae-4a362a185d7f.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.203.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:0e:6e:90:cd:7e:03:f6:77:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=ecaf80c5-c6b7-45fb-b6c1-fd70b19fba29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:de:87:93:21:69:73:00:3a:20:14:a9:bc:e0: a7:b0:42:0a:dc:47:1c:79:70:37:6f:5d:93:72:e5: 4a:86:36:1a:af:b6:c1:5c:41:37:a6:80:96:da:53: 78:dc:16:c6:e9:35:52:24:20:00:c7:1f:26:8c:a7: e6:45:33:50:5b:ee:77:7c:26:62:be:8e:6a:33:1b: d2:05:ba:10:92:23:aa:79:99:b4:8b:ca:f2:64:a3: 6d:7b:cb:8f:70:50:3c:3d:68:61:f4:ee:fd:05:f6: 5b:8d:34:76:a2:2e:3a:8e:1e:43:d9:15:ef:89:1c: 42:e5:40:d4:36:83:43:9a:61:1d:30:a9:2d:39:84: 48:04:d1:4e:84:89:24:0d:0d:a9:2b:57:65:58:4f: 28:90:46:f1:05:d2:d5:76:69:2a:c9:67:03:da:8d: 38:44:2d:2e:c8:77:83:bf:09:e0:f5:00:62:cf:1f: bf:a9:14:1f:13:ff:27:4f:5d:a1:ab:2a:ae:bc:32: 52:48:13:33:77:3a:a6:57:af:43:ba:23:0a:db:89: 71:45:fb:be:51:d1:20:be:a5:e3:98:56:9e:5a:87: ed:d4:ba:27:65:eb:92:ab:fe:44:c6:59:2e:33:da: 76:7c:a0:9d:a2:95:1d:e9:dc:b3:f0:ff:1a:fc:52: 78:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:85:D0:EF:9F:2F:4B:32:33:A1:C6:84:63:5A:E2:85:B8:97:9F:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69e90291-17b7-3ca6-9dae-4a362a185d7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:57:80:01:0a:b5:5f:4a:60:5e:43:8d:bd:00:70:11:f1:9d: 88:ce:9f:a5:92:dc:3d:b8:9b:7c:19:9c:7b:d7:f0:cc:c3:bb: 31:9a:54:d6:c9:a1:36:d6:1c:f0:a3:d1:3a:32:ca:93:c5:b2: 96:61:b2:6c:7b:68:17:84:27:44:27:fb:7f:0c:4c:d4:59:7d: 2f:d1:90:96:3e:cd:a8:63:77:4d:c3:6e:d6:dd:c1:cc:0d:72: 10:f3:be:8e:05:bc:0f:9a:f4:29:d1:61:42:41:1f:b3:f6:86: d2:d7:8b:11:bb:92:6d:84:5b:5d:36:da:23:09:f6:33:6d:fd: 92:57:80:e3:eb:03:00:21:86:b3:4b:4b:2f:07:76:a4:52:3f: bf:e1:7d:fe:21:9e:7d:1e:e6:7d:4b:9d:a6:41:8e:2d:66:57: 2e:74:50:3a:f2:58:54:85:ad:53:02:46:35:28:da:d9:e7:c9: b5:05:7b:08:e7:82:3a:a2:21:dd:01:7c:74:fd:e1:bc:aa:bd: 87:ba:63:65:4c:aa:22:08:92:4a:c3:9d:69:41:e0:ab:2e:8d: 70:b2:b3:d0:8a:23:90:97:ef:20:60:ea:c4:7e:71:fc:60:a7: 1c:74:75:e3:cf:ba:00:14:31:15:9a:33:e9:c4:f5:69:a4:22: a0:ed:d2:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4g5ukM1+A/Z3l4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZWNhZjgwYzUtYzZiNy00NWZiLWI2YzEtZmQ3MGIxOWZiYTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd6HkyFpcwA6IBSpvOCnsEIK3EcceXA3b12T cuVKhjYar7bBXEE3poCW2lN43BbG6TVSJCAAxx8mjKfmRTNQW+53fCZivo5qMxvS BboQkiOqeZm0i8ryZKNte8uPcFA8PWhh9O79BfZbjTR2oi46jh5D2RXviRxC5UDU NoNDmmEdMKktOYRIBNFOhIkkDQ2pK1dlWE8okEbxBdLVdmkqyWcD2o04RC0uyHeD vwng9QBizx+/qRQfE/8nT12hqyquvDJSSBMzdzqmV69DuiMK24lxRfu+UdEgvqXj mFaeWoft1LonZeuSq/5ExlkuM9p2fKCdopUd6dyz8P8a/FJ46QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECF0O+fL0syM6HGhGNa4oW4l598MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjllOTAyOTEtMTdiNy0z Y2E2LTlkYWUtNGEzNjJhMTg1ZDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8uHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxXgAEKtV9KYF5Djb0AcBHxnYjOn6WS3D24m3wZnHvX8MzDuzGaVNbJ oTbWHPCj0ToyypPFspZhsmx7aBeEJ0Qn+38MTNRZfS/RkJY+zahjd03DbtbdwcwN chDzvo4FvA+a9CnRYUJBH7P2htLXixG7km2EW1022iMJ9jNt/ZJXgOPrAwAhhrNL Sy8HdqRSP7/hff4hnn0e5n1LnaZBji1mVy50UDryWFSFrVMCRjUo2tnnybUFewjn gjqiId0BfHT94byqvYe6Y2VMqiIIkkrDnWlB4KsujXCys9CKI5CX7yBg6sR+cfxg pxx0dePPugAUMRWaM+nE9WmkIqDt0pg= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:05 2025 by rpki-client