$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/723520ed-b381-3cba-8bc5-30ec322bad2f.roa File: 723520ed-b381-3cba-8bc5-30ec322bad2f.roa (raw, json) Hash identifier: iKz59cHijs+l6XVYpL0+KlSe+dxQLKBfMQ0iZxRuEiA= Subject key identifier: A1:34:17:EB:FA:0D:D4:FA:82:12:E6:6E:C8:C4:4A:9F:C2:46:0A:6A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B3821AF45573C45BB4D3B2780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/723520ed-b381-3cba-8bc5-30ec322bad2f.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.192.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:af:45:57:3c:45:bb:4d:3b:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=8098011b-18a6-456e-8ead-2eb7e67ef94c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e7:c6:47:1a:f3:13:1b:9f:52:c9:a3:a1:0e: 50:48:b2:c8:7a:85:b8:2a:20:e9:29:1d:2b:4a:55: 8e:12:6a:d8:16:df:65:da:51:13:7c:2c:3c:41:97: 67:b5:19:98:75:c2:cf:a4:cb:f8:24:47:ab:c5:2b: 88:8f:5d:9e:ad:60:9b:c8:e3:20:26:7d:f8:e7:ca: 20:ad:27:79:b9:c9:fa:0e:94:67:f7:74:46:df:2a: 1b:8b:bc:8c:24:37:65:02:8a:a4:e4:38:fd:0b:99: 78:20:0f:c0:a7:13:0e:80:73:a8:7b:4e:54:8a:fe: 71:7f:79:3a:85:87:e3:ab:00:b7:3e:a7:55:2c:9d: 8c:da:bd:58:1f:39:25:9a:29:54:14:ca:1d:fb:13: 95:ed:8a:8b:f3:29:3c:35:88:e9:4e:2a:95:7d:57: ea:4a:b7:15:99:32:35:7e:6e:e6:1a:89:39:c4:84: 5e:95:bc:6a:a9:d9:95:12:4f:43:1c:f9:db:80:28: b1:bf:59:39:cd:32:9a:d1:3b:f0:4a:cf:35:33:80: db:c0:d1:b1:06:59:9c:96:d7:19:c4:c6:16:ff:8b: a8:04:5c:50:a4:61:4f:8f:85:77:79:cb:33:7a:8f: 8a:78:2a:cf:77:07:de:91:4f:08:db:f4:8c:bb:66: 3e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:34:17:EB:FA:0D:D4:FA:82:12:E6:6E:C8:C4:4A:9F:C2:46:0A:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/723520ed-b381-3cba-8bc5-30ec322bad2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.192.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:7a:8f:c1:d2:d8:5c:ae:9a:d0:73:6d:b7:dc:4d:40:ea:26: a7:d6:25:3c:06:7c:61:09:22:25:79:27:25:ce:28:45:13:ca: 6d:97:37:93:1d:b4:57:86:e6:cd:99:7e:07:0f:cd:12:e3:d0: 38:63:18:c0:42:9f:83:dc:9f:c8:b0:8c:57:a7:a2:90:f0:13: e3:2d:c5:bc:09:1f:1f:a6:54:a3:7d:6d:c2:e8:92:12:27:1a: 06:bf:ba:39:7a:2b:ca:fd:9e:97:20:00:8a:83:56:4d:ce:d5: 6e:68:82:00:ad:72:ae:cc:55:fc:98:b8:18:09:d2:b9:a0:c1: 63:b9:cb:05:c2:2e:b8:c9:c2:02:01:27:21:8c:9c:57:52:38: c2:b0:f6:b3:9a:66:51:07:73:3e:87:64:d5:87:33:8c:c2:7b: e6:9d:e1:99:c8:0b:27:3a:fa:af:31:c6:2f:64:b3:a9:98:ec: df:c2:13:e6:ea:e1:80:d1:8f:da:5d:79:eb:ff:87:3d:c7:e2: cc:51:f1:54:39:be:c4:50:4c:7f:fd:43:3f:83:ef:86:5b:26: 2d:16:17:a2:a8:fa:fe:33:a4:67:d9:e5:73:f2:26:e0:91:96: dd:af:77:04:cf:98:d8:c4:80:32:eb:fd:cd:37:c7:ee:a5:7d: 21:08:ee:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4Ia9FVzxFu007J4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk ODA5ODAxMWItMThhNi00NTZlLThlYWQtMmViN2U2N2VmOTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyefGRxrzExufUsmjoQ5QSLLIeoW4KiDpKR0r SlWOEmrYFt9l2lETfCw8QZdntRmYdcLPpMv4JEerxSuIj12erWCbyOMgJn3458og rSd5ucn6DpRn93RG3yobi7yMJDdlAoqk5Dj9C5l4IA/ApxMOgHOoe05Uiv5xf3k6 hYfjqwC3PqdVLJ2M2r1YHzklmilUFMod+xOV7YqL8yk8NYjpTiqVfVfqSrcVmTI1 fm7mGok5xIRelbxqqdmVEk9DHPnbgCixv1k5zTKa0TvwSs81M4DbwNGxBlmcltcZ xMYW/4uoBFxQpGFPj4V3ecszeo+KeCrPdwfekU8I2/SMu2Y+/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKE0F+v6DdT6ghLmbsjESp/CRgpqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzIzNTIwZWQtYjM4MS0z Y2JhLThiYzUtMzBlYzMyMmJhZDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8DnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAd6j8HS2FyumtBzbbfcTUDqJqfWJTwGfGEJIiV5JyXOKEUTym2XN5Md tFeG5s2ZfgcPzRLj0DhjGMBCn4Pcn8iwjFenopDwE+MtxbwJHx+mVKN9bcLokhIn Gga/ujl6K8r9npcgAIqDVk3O1W5oggCtcq7MVfyYuBgJ0rmgwWO5ywXCLrjJwgIB JyGMnFdSOMKw9rOaZlEHcz6HZNWHM4zCe+ad4ZnICyc6+q8xxi9ks6mY7N/CE+bq 4YDRj9pdeev/hz3H4sxR8VQ5vsRQTH/9Qz+D74ZbJi0WF6Ko+v4zpGfZ5XPyJuCR lt2vdwTPmNjEgDLr/c03x+6lfSEI7iA= -----END CERTIFICATE-----Generated at Mon Oct 20 05:07:45 2025 by rpki-client