$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/83e59f06-db01-33ff-880f-1e9b8260094e.roa File: 83e59f06-db01-33ff-880f-1e9b8260094e.roa (raw, json) Hash identifier: eWBgOZ3Y1S4h2BMnNfIGi1IYdeYbLK4uFxNk13rsdxo= Subject key identifier: A1:63:12:58:D6:55:81:C4:1B:83:A5:C1:15:E8:5E:6C:80:0B:BE:0A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583C9E032A79961F3A0EA980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/83e59f06-db01-33ff-880f-1e9b8260094e.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.204.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:9e:03:2a:79:96:1f:3a:0e:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=0549eaf9-b1f8-424f-b828-04fae26e3a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a3:c3:bc:f7:84:e2:85:0d:a9:8e:38:db:d0: 4e:92:55:b0:cc:bc:da:85:9c:70:43:be:b5:ec:5f: ac:e8:2c:d9:e7:a2:70:60:3f:4d:19:5d:02:45:e5: 40:83:e7:4f:3a:34:a1:36:ae:46:29:13:69:bc:cd: a2:1a:34:d2:48:12:df:91:a1:01:63:05:27:e3:3a: a1:5c:9c:21:c7:c7:85:8a:00:df:ab:90:3f:a7:65: c6:fa:9a:2e:43:1d:48:c6:4c:e2:b0:8f:24:e3:33: bb:f8:d3:d3:1a:0c:29:ee:b3:5a:10:ac:40:50:ed: b0:bf:1d:79:79:c2:95:17:c5:2f:21:d8:c1:dd:42: ad:6e:9d:56:f7:5e:4a:d2:e9:e4:bc:72:4e:10:97: 9c:b9:7c:ae:d1:f9:e6:b1:84:db:5a:fc:85:e7:85: ae:58:32:24:f5:4a:34:b7:c5:73:e8:5b:f3:9d:ce: 29:39:2c:e3:3e:6e:9e:72:6f:aa:a7:b1:2e:60:fc: 1c:7d:c9:64:dc:a3:a3:ac:99:7f:b7:26:34:a3:d1: a1:e4:20:ea:d6:c2:4b:f2:69:1b:5f:e4:e9:fc:41: 97:7c:e0:d2:a5:d2:6c:50:68:7b:02:ff:35:14:7b: c7:c7:c5:17:a0:43:e8:a9:97:4d:71:e4:2e:80:17: a5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:63:12:58:D6:55:81:C4:1B:83:A5:C1:15:E8:5E:6C:80:0B:BE:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/83e59f06-db01-33ff-880f-1e9b8260094e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:a9:2c:81:ef:53:47:bf:12:a3:b9:d6:a9:83:be:17:32:bc: 00:b9:7e:3e:c8:96:72:73:1a:18:94:b0:ea:ef:df:e2:c9:4d: 4e:97:9d:a3:6d:3d:0b:99:a4:88:81:fe:72:15:0a:e5:d6:0c: 0b:76:75:8b:f4:b6:34:01:89:39:e8:fb:67:e6:e5:3d:27:85: 32:56:4d:08:5d:bf:04:03:b9:8a:53:24:90:ed:01:44:96:ad: fc:0f:18:5d:4a:51:6d:b5:90:f1:9a:f6:d8:71:c0:6c:8a:b9: 06:42:6b:e5:33:21:c6:fd:f5:06:52:d9:dd:c4:05:f9:88:d7: 36:8b:e2:34:20:c0:26:27:60:0e:9c:5e:6d:d8:68:3d:0d:b5: 0f:76:6c:1e:36:18:35:47:85:ce:3f:7e:b8:bb:37:54:fe:17: 2a:23:9b:3a:8c:5a:b8:5d:e3:12:dd:f1:c1:63:f3:25:ba:93: 3a:3a:66:76:8f:6b:b9:67:fe:ae:9c:ec:9f:24:16:2c:cf:ea: 28:8f:7e:38:ce:45:2f:c0:2b:88:6d:88:27:0c:a5:47:5a:2b: 6b:ab:24:1f:f4:2d:da:b3:cb:dc:dc:b6:f9:ba:78:8c:09:e6: 84:5d:15:b7:76:96:7f:7c:60:22:28:fe:47:b1:d3:56:f0:e4: d3:db:99:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJ4DKnmWHzoOqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MDU0OWVhZjktYjFmOC00MjRmLWI4MjgtMDRmYWUyNmUzYTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqPDvPeE4oUNqY4429BOklWwzLzahZxwQ761 7F+s6CzZ56JwYD9NGV0CReVAg+dPOjShNq5GKRNpvM2iGjTSSBLfkaEBYwUn4zqh XJwhx8eFigDfq5A/p2XG+pouQx1IxkzisI8k4zO7+NPTGgwp7rNaEKxAUO2wvx15 ecKVF8UvIdjB3UKtbp1W915K0unkvHJOEJecuXyu0fnmsYTbWvyF54WuWDIk9Uo0 t8Vz6Fvznc4pOSzjPm6ecm+qp7EuYPwcfclk3KOjrJl/tyY0o9Gh5CDq1sJL8mkb X+Tp/EGXfODSpdJsUGh7Av81FHvHx8UXoEPoqZdNceQugBelnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFjEljWVYHEG4OlwRXoXmyAC74KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODNlNTlmMDYtZGIwMS0z M2ZmLTg4MGYtMWU5YjgyNjAwOTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8yLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOpLIHvU0e/EqO51qmDvhcyvAC5fj7IlnJzGhiUsOrv3+LJTU6XnaNt PQuZpIiB/nIVCuXWDAt2dYv0tjQBiTno+2fm5T0nhTJWTQhdvwQDuYpTJJDtAUSW rfwPGF1KUW21kPGa9thxwGyKuQZCa+UzIcb99QZS2d3EBfmI1zaL4jQgwCYnYA6c Xm3YaD0NtQ92bB42GDVHhc4/fri7N1T+FyojmzqMWrhd4xLd8cFj8yW6kzo6ZnaP a7ln/q6c7J8kFizP6iiPfjjORS/AK4htiCcMpUdaK2urJB/0Ldqzy9zctvm6eIwJ 5oRdFbd2ln98YCIo/kex01bw5NPbmd0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:27:20 2025 by rpki-client