$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/852334f8-74f0-38f8-9e4d-3534f641748e.roa File: 852334f8-74f0-38f8-9e4d-3534f641748e.roa (raw, json) Hash identifier: 3THn7m8O9ombKF8l3G76pmEKbpwFbMS9J1jd4vbtT2Q= Subject key identifier: 95:4C:38:4E:0A:37:B0:74:E2:1D:15:04:39:EB:91:08:F7:C7:83:8B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B477C93C39D359FB9D39F2080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/852334f8-74f0-38f8-9e4d-3534f641748e.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 16625 IP address blocks: 23.201.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:93:c3:9d:35:9f:b9:d3:9f:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=807acd88-ab0c-43e1-a2c7-e4abc8af0dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d6:96:56:d9:d0:83:5f:58:b5:19:99:d0:c3: d7:e8:14:c8:da:ad:44:49:1d:f4:1e:6b:6a:ac:cb: 3a:2e:ec:89:e2:02:fc:81:4f:2f:83:b2:34:a9:27: bd:ad:0c:3f:05:66:e7:4a:76:f6:28:02:26:24:4e: 6e:28:87:fb:91:20:1d:1f:f3:5b:8b:c6:2d:5f:ad: 21:f6:2d:1d:37:b0:47:05:3d:7b:99:56:2b:a8:77: 17:c9:a5:7d:62:d9:c4:d5:0c:4b:23:7c:52:2e:ec: c7:67:e7:16:f0:0e:97:77:e6:15:3a:33:4d:01:44: 85:81:c1:d4:7f:33:df:4d:34:36:b1:c3:81:d7:5d: e3:de:1f:de:f3:46:98:1d:9c:f1:4c:30:56:02:9d: be:08:78:3a:97:f4:14:32:a7:97:62:cf:53:f1:fd: 22:f2:cf:cb:bf:33:aa:75:25:8a:35:00:93:25:d1: 56:d8:c0:db:61:2b:51:24:31:6c:7c:2d:c3:4d:05: 92:8d:d5:f2:90:df:52:77:38:9c:c8:3a:13:50:96: 7d:7c:71:00:21:c9:55:0b:7c:eb:6a:e4:21:2d:8f: c9:6d:3e:2e:0d:3f:86:d2:21:e6:45:c7:c6:9d:bb: 1c:39:2d:37:50:09:20:dd:78:88:be:15:ba:65:e3: 75:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4C:38:4E:0A:37:B0:74:E2:1D:15:04:39:EB:91:08:F7:C7:83:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/852334f8-74f0-38f8-9e4d-3534f641748e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:f8:9e:16:62:04:ae:37:45:71:fd:60:f1:56:27:a1:2b:51: c3:8e:b9:44:53:7c:fd:38:72:e5:3d:c9:13:23:e4:bd:68:c3: 53:a1:ed:98:d2:57:cc:d0:33:99:cf:7b:9b:2d:66:7d:83:67: 28:ab:19:da:a0:f8:31:b7:2c:bc:e1:e1:96:47:00:07:33:3a: 95:f6:89:ea:91:5a:8e:f7:47:d8:37:6f:83:ea:b3:42:15:7b: 2f:04:b2:16:d8:ee:26:1d:9a:40:16:2f:60:28:6a:3b:03:ef: 80:75:20:37:15:49:fc:62:d3:59:78:99:86:ca:ba:be:4a:1f: 04:c4:68:8b:a0:18:f4:21:5e:84:4b:52:2b:64:7f:1f:1a:fb: 29:a3:55:43:75:f1:ea:65:23:86:dd:52:32:4e:4d:f4:b3:5e: 4d:26:02:4b:ef:86:70:a1:cf:42:6c:33:e0:5d:5b:28:1d:f7: 79:7b:9f:55:59:14:3b:b2:f1:65:c6:c1:44:ad:3b:e1:e1:f5: 3a:84:7e:1f:f8:ae:ca:07:bb:68:b5:f0:56:ce:0d:ca:0e:58: 77:ca:94:bb:1d:f2:d0:42:bf:f9:29:b1:18:36:99:81:d9:d3: 68:0e:ca:23:4d:7e:2e:c8:91:4c:68:43:19:41:6c:96:e3:50: 98:56:b7:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfJPDnTWfudOfIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk ODA3YWNkODgtYWIwYy00M2UxLWEyYzctZTRhYmM4YWYwZGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9aWVtnQg19YtRmZ0MPX6BTI2q1ESR30Hmtq rMs6LuyJ4gL8gU8vg7I0qSe9rQw/BWbnSnb2KAImJE5uKIf7kSAdH/Nbi8YtX60h 9i0dN7BHBT17mVYrqHcXyaV9YtnE1QxLI3xSLuzHZ+cW8A6Xd+YVOjNNAUSFgcHU fzPfTTQ2scOB113j3h/e80aYHZzxTDBWAp2+CHg6l/QUMqeXYs9T8f0i8s/LvzOq dSWKNQCTJdFW2MDbYStRJDFsfC3DTQWSjdXykN9SdzicyDoTUJZ9fHEAIclVC3zr auQhLY/JbT4uDT+G0iHmRcfGnbscOS03UAkg3XiIvhW6ZeN1HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVMOE4KN7B04h0VBDnrkQj3x4OLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODUyMzM0ZjgtNzRmMC0z OGY4LTllNGQtMzUzNGY2NDE3NDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8kkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGf4nhZiBK43RXH9YPFWJ6ErUcOOuURTfP04cuU9yRMj5L1ow1Oh7ZjS V8zQM5nPe5stZn2DZyirGdqg+DG3LLzh4ZZHAAczOpX2ieqRWo73R9g3b4Pqs0IV ey8EshbY7iYdmkAWL2AoajsD74B1IDcVSfxi01l4mYbKur5KHwTEaIugGPQhXoRL Uitkfx8a+ymjVUN18eplI4bdUjJOTfSzXk0mAkvvhnChz0JsM+BdWygd93l7n1VZ FDuy8WXGwUStO+Hh9TqEfh/4rsoHu2i18FbODcoOWHfKlLsd8tBCv/kpsRg2mYHZ 02gOyiNNfi7IkUxoQxlBbJbjUJhWt+E= -----END CERTIFICATE-----Generated at Mon Oct 20 05:03:15 2025 by rpki-client