$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79e5b476-e825-3f03-9bbd-240b335a58ac.roa File: 79e5b476-e825-3f03-9bbd-240b335a58ac.roa (raw, json) Hash identifier: iWikHUZqdCrz137ZUGTCsKQJE2wOszfE2dmBk9vp6tY= Subject key identifier: 52:06:D3:AF:0F:91:99:30:BF:94:D3:71:EB:5D:74:27:4F:83:AB:83 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E20547A2B49AB189161B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79e5b476-e825-3f03-9bbd-240b335a58ac.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.203.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:05:47:a2:b4:9a:b1:89:16:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=c1803eb2-ad5a-4b3a-bfe6-39e99fed4efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3f:66:ad:4c:ca:19:26:0c:73:d0:83:af:ea: 69:f6:de:44:44:d8:51:08:30:15:3a:15:44:cd:d7: 38:74:b1:5e:6a:ec:63:a3:64:55:2f:fd:44:a9:5c: 15:0f:ec:b3:38:56:34:67:a7:13:4c:ad:d3:32:d7: 38:83:7c:f2:34:70:04:f9:50:34:05:9b:60:54:e9: 54:c4:b9:1c:99:2d:f0:af:f7:d6:ca:bb:cf:b0:49: 37:17:6b:92:77:f0:c7:63:f0:5a:ce:d9:e8:15:e1: dd:b5:b7:be:d2:4b:45:ff:8f:f2:ef:ad:59:bf:d8: 23:73:33:36:e3:aa:af:0c:d9:3b:66:dd:9e:bf:27: 42:14:50:c8:95:1f:1a:e7:e1:0f:d7:73:3f:f7:e1: 4e:af:36:8f:6c:b0:de:db:ea:8e:f2:25:b9:ec:a1: 37:6c:bf:c5:47:17:fa:a9:0e:78:17:81:74:bb:fe: c7:4b:d0:dc:94:f7:d5:93:07:f7:fb:a2:0d:e0:6c: 91:47:ef:ea:66:77:38:49:21:64:d7:53:97:7c:60: f9:94:0b:72:26:25:7b:6e:8e:2f:47:e1:31:49:75: ab:d9:73:7c:41:4e:37:14:36:89:ce:c3:75:aa:e4: 3b:2a:eb:cb:ee:59:d2:95:f8:2e:6f:ab:7a:0b:d8: ec:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:06:D3:AF:0F:91:99:30:BF:94:D3:71:EB:5D:74:27:4F:83:AB:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79e5b476-e825-3f03-9bbd-240b335a58ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:8b:d1:75:0e:7e:eb:44:e6:7f:94:a4:a9:3b:cc:38:ac:bb: d2:fb:c8:ec:9a:3d:02:fd:00:eb:3f:d2:96:0b:65:1c:21:5b: e3:36:69:59:bd:9f:85:a8:8f:3d:f7:55:f9:f8:3f:07:7f:9f: e9:79:0e:aa:5d:ae:d2:f9:32:16:16:bb:00:d0:c5:28:90:bd: ab:d2:b2:77:a0:21:a1:2a:e1:17:76:fb:26:0b:f2:01:fd:8e: 07:e2:0d:20:82:82:aa:ab:b8:95:8d:73:5b:d1:cc:b3:59:66: 46:2d:f5:0e:42:f9:1d:db:1b:cc:ec:33:ff:49:a6:e3:f3:3d: af:8a:74:44:89:51:47:14:a6:cc:ec:0e:99:28:c4:ae:50:fb: f2:5a:46:bd:e2:de:2f:29:a6:f1:12:40:cb:21:64:c9:07:a9: 0c:fe:3f:de:fc:71:74:71:8d:5a:50:c4:c9:17:3a:b7:19:bc: 93:cf:ca:1f:9b:44:e9:b1:8d:62:96:6b:a6:00:9a:0d:c0:4f: 4f:e4:a5:42:ca:ce:1a:a9:36:9a:92:a6:e1:26:77:05:30:d7: be:2e:e9:e5:f6:d6:43:bb:e0:ea:11:d0:72:2b:59:65:36:78: 06:4b:6c:3a:ab:97:6d:dd:bf:a7:9b:2d:63:41:f5:63:55:1c: 9c:fe:f1:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4gVHorSasYkWG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YzE4MDNlYjItYWQ1YS00YjNhLWJmZTYtMzllOTlmZWQ0ZWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD9mrUzKGSYMc9CDr+pp9t5ERNhRCDAVOhVE zdc4dLFeauxjo2RVL/1EqVwVD+yzOFY0Z6cTTK3TMtc4g3zyNHAE+VA0BZtgVOlU xLkcmS3wr/fWyrvPsEk3F2uSd/DHY/BaztnoFeHdtbe+0ktF/4/y761Zv9gjczM2 46qvDNk7Zt2evydCFFDIlR8a5+EP13M/9+FOrzaPbLDe2+qO8iW57KE3bL/FRxf6 qQ54F4F0u/7HS9DclPfVkwf3+6IN4GyRR+/qZnc4SSFk11OXfGD5lAtyJiV7bo4v R+ExSXWr2XN8QU43FDaJzsN1quQ7KuvL7lnSlfgub6t6C9jsPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIG068PkZkwv5TTcetddCdPg6uDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzllNWI0NzYtZTgyNS0z ZjAzLTliYmQtMjQwYjMzNWE1OGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8ukMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+L0XUOfutE5n+UpKk7zDisu9L7yOyaPQL9AOs/0pYLZRwhW+M2aVm9 n4Wojz33Vfn4Pwd/n+l5DqpdrtL5MhYWuwDQxSiQvavSsnegIaEq4Rd2+yYL8gH9 jgfiDSCCgqqruJWNc1vRzLNZZkYt9Q5C+R3bG8zsM/9JpuPzPa+KdESJUUcUpszs DpkoxK5Q+/JaRr3i3i8ppvESQMshZMkHqQz+P978cXRxjVpQxMkXOrcZvJPPyh+b ROmxjWKWa6YAmg3AT0/kpULKzhqpNpqSpuEmdwUw174u6eX21kO74OoR0HIrWWU2 eAZLbDqrl23dv6ebLWNB9WNVHJz+8Qk= -----END CERTIFICATE-----Generated at Mon Oct 20 02:37:14 2025 by rpki-client