$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6d3f011b-aa65-307f-bdf0-4f1180045322.roa File: 6d3f011b-aa65-307f-bdf0-4f1180045322.roa (raw, json) Hash identifier: gCXw067MWe4+FjBLEl5XvaXfiMwgfHq+o/Q0AdvyYS4= Subject key identifier: 88:71:58:09:CA:7A:15:7C:3C:42:10:AB:BA:5A:B6:C7:DB:8D:D5:21 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E20E28A8EAFF7A94581E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6d3f011b-aa65-307f-bdf0-4f1180045322.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.203.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:0e:28:a8:ea:ff:7a:94:58:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=8eb7d20f-61a7-41a2-a4fd-a0ec54f8a1d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a7:64:6e:28:d7:2b:32:fe:56:0c:df:a6:de: b2:ff:44:d4:18:56:24:24:1f:9a:69:7c:0a:c9:43: 3e:c5:18:9c:4c:ea:2a:28:08:b1:b9:32:5b:8c:fc: c4:d7:46:5b:2a:e6:98:03:f4:2a:2c:9c:96:f8:25: 9a:ce:4b:30:8d:3b:07:a1:1d:85:32:a1:67:e7:56: ce:b1:7b:8f:6a:47:93:ad:e8:43:65:2f:41:c8:96: 18:23:fd:ac:76:04:66:c2:06:9e:d9:87:fa:f2:cf: 4f:b2:e6:71:6e:bd:9f:c5:ad:98:46:35:dc:9f:bb: 7f:fb:64:9c:f1:11:53:51:4b:80:d5:45:6f:cb:e1: f3:43:b7:47:c3:42:ad:fd:eb:3a:0a:b0:02:68:f1: 8f:9e:49:95:a5:a7:87:f2:da:d8:0e:9c:82:53:90: 3b:b2:d9:1c:d2:12:03:f4:88:e4:f8:18:57:72:21: 62:8f:35:d6:fe:5b:fd:1f:2f:3f:bb:61:b3:1d:c3: 7c:be:4d:12:95:c2:74:a5:02:9e:55:d2:03:de:f7: 9b:9d:df:4b:e6:0e:8c:88:d3:cd:2f:ef:63:7f:11: 07:87:d6:d2:0c:5b:a4:c0:47:13:cc:32:ae:63:f9: fa:03:87:72:4c:8f:62:a0:d6:42:cd:8b:f7:26:24: 01:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:71:58:09:CA:7A:15:7C:3C:42:10:AB:BA:5A:B6:C7:DB:8D:D5:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6d3f011b-aa65-307f-bdf0-4f1180045322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:48:83:5c:75:2e:a0:8f:b4:f6:d8:f1:9c:ba:c8:12:3e:a1: 2e:9e:75:7f:bd:57:34:9e:dd:51:ae:6c:53:b4:e6:64:c4:09: 87:c8:1e:a8:5b:85:42:c2:5a:b2:5b:58:6c:7d:b7:ec:8f:eb: 00:04:b6:a3:ad:4f:2e:da:d3:4a:1e:bb:20:6f:cb:2f:5e:2e: c1:a3:18:f8:96:65:6a:a1:2c:b1:72:17:46:f4:4f:e4:ba:21: b6:4e:68:c5:8b:2a:8f:34:1f:25:de:6b:d8:7b:b7:e0:64:62: ec:e7:6a:ee:f7:b3:e9:86:a3:6f:f8:ea:6a:ac:40:49:df:75: 88:d0:41:89:4d:25:76:20:85:75:c8:6b:3d:e2:44:50:3f:af: ee:6d:7a:b4:f4:98:0d:7e:2a:c7:1c:d1:c2:80:5e:06:47:85: 5f:d4:2b:ac:ca:f6:2c:6f:d5:a9:34:72:19:5b:c5:99:60:49: fd:07:ae:1f:87:49:d1:b7:01:62:62:97:98:06:f4:f7:ca:af: e0:4d:c5:b7:0f:59:ca:4b:60:a7:ea:d3:c2:ca:78:7c:46:8d: 0e:a8:63:bd:c2:cd:10:d8:ca:f7:c6:43:69:4f:fb:e9:cb:84: f7:b6:af:2f:97:6e:1d:8e:d1:8d:bf:2f:33:b3:55:65:4f:32: 57:36:9b:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4g4oqOr/epRYHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk OGViN2QyMGYtNjFhNy00MWEyLWE0ZmQtYTBlYzU0ZjhhMWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkadkbijXKzL+Vgzfpt6y/0TUGFYkJB+aaXwK yUM+xRicTOoqKAixuTJbjPzE10ZbKuaYA/QqLJyW+CWazkswjTsHoR2FMqFn51bO sXuPakeTrehDZS9ByJYYI/2sdgRmwgae2Yf68s9PsuZxbr2fxa2YRjXcn7t/+2Sc 8RFTUUuA1UVvy+HzQ7dHw0Kt/es6CrACaPGPnkmVpaeH8trYDpyCU5A7stkc0hID 9Ijk+BhXciFijzXW/lv9Hy8/u2GzHcN8vk0SlcJ0pQKeVdID3vebnd9L5g6MiNPN L+9jfxEHh9bSDFukwEcTzDKuY/n6A4dyTI9ioNZCzYv3JiQBpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhxWAnKehV8PEIQq7patsfbjdUhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmQzZjAxMWItYWE2NS0z MDdmLWJkZjAtNGYxMTgwMDQ1MzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8t8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJIg1x1LqCPtPbY8Zy6yBI+oS6edX+9VzSe3VGubFO05mTECYfIHqhb hULCWrJbWGx9t+yP6wAEtqOtTy7a00oeuyBvyy9eLsGjGPiWZWqhLLFyF0b0T+S6 IbZOaMWLKo80HyXea9h7t+BkYuznau73s+mGo2/46mqsQEnfdYjQQYlNJXYghXXI az3iRFA/r+5terT0mA1+Kscc0cKAXgZHhV/UK6zK9ixv1ak0chlbxZlgSf0Hrh+H SdG3AWJil5gG9PfKr+BNxbcPWcpLYKfq08LKeHxGjQ6oY73CzRDYyvfGQ2lP++nL hPe2ry+Xbh2O0Y2/LzOzVWVPMlc2m7o= -----END CERTIFICATE-----Generated at Mon Oct 20 02:24:25 2025 by rpki-client