$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a231467-34ce-36c3-a195-45dc2aeeea4a.roa File: 8a231467-34ce-36c3-a195-45dc2aeeea4a.roa (raw, json) Hash identifier: Pk1eDUNCd0MfNFFFz62yn24zNnWfcOWpz3riAUuh5zs= Subject key identifier: 6F:08:04:D3:E2:A3:A4:80:9B:EB:E0:9D:73:3A:F9:E8:2B:3E:0E:E4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2496E65BE195A9935513F580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a231467-34ce-36c3-a195-45dc2aeeea4a.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.53.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:e6:5b:e1:95:a9:93:55:13:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=af0cf1e7-3095-44f2-b266-74539be241c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4b:cd:fe:0b:38:5b:b9:75:91:41:66:8e:a7: cc:46:fe:fd:44:c5:2a:58:1d:52:2e:0d:a0:c4:01: 21:4d:f2:f1:3a:39:ee:ed:ec:1b:00:e9:3c:c0:97: fa:7d:df:ab:37:ee:e4:ac:b6:1a:68:8c:20:81:2b: a7:2f:f1:08:a5:de:98:8b:d6:a1:c1:f7:7c:94:d1: 5c:4a:11:1d:f3:cb:60:97:94:89:ac:da:08:06:5f: c3:20:64:68:6c:71:43:03:d7:cb:1a:9b:55:1e:9b: a3:13:d2:96:48:8d:b3:0d:10:55:cd:f5:1c:a4:43: a3:2d:18:4a:a6:77:a5:fb:e2:d8:9c:82:09:6c:b5: e9:a4:0d:38:6e:e9:c7:48:b9:6d:94:00:b7:5a:b3: a6:9f:6d:d3:c4:06:08:44:31:c8:45:41:23:42:74: 78:48:21:09:4f:97:07:1f:e6:c4:4d:f8:c7:bd:f0: 92:cc:21:45:08:5e:a9:3a:93:f6:b3:fe:cd:6c:31: ff:44:ca:64:cd:8e:b6:57:d3:db:ed:76:d4:77:f7: 57:02:ff:f6:93:9b:48:56:b9:5f:cc:fc:ac:a5:66: 44:08:a3:fc:c6:ba:6f:16:68:9f:af:af:fb:07:69: 3f:e3:20:16:6c:29:94:d7:ea:92:ab:09:f4:c7:da: 14:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:08:04:D3:E2:A3:A4:80:9B:EB:E0:9D:73:3A:F9:E8:2B:3E:0E:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a231467-34ce-36c3-a195-45dc2aeeea4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:66:f9:f0:7f:d3:f3:10:da:03:2d:a9:c3:a2:58:02:1c:68: fa:e9:e7:25:51:2e:a0:b9:c2:e3:b1:22:88:dc:49:cd:f8:34: 68:df:b8:37:63:50:ae:0e:53:20:af:4a:5c:f5:ab:a0:de:fa: f2:a7:74:31:27:37:9e:b1:1b:7b:55:b2:1d:f5:bb:c4:f4:d4: c8:c2:d3:d5:1c:2a:39:51:2d:a1:b6:b2:b4:c5:32:18:26:52: 50:89:d2:2c:e8:cf:08:4f:dd:54:19:9d:7c:a1:e6:5a:3d:64: dd:09:ae:b6:96:14:a6:52:ed:84:e8:0b:5a:cf:55:14:8b:7f: f6:67:6f:7a:59:05:fa:13:96:c2:dd:5c:e2:69:de:01:58:91: 2e:12:b2:bc:ed:8d:c6:99:ea:f6:bc:02:2f:62:d1:43:50:ef: 09:95:48:fd:24:ee:6d:f6:60:70:b3:44:09:3c:11:cc:68:10: 8f:ff:45:ed:25:89:9c:fd:ea:ab:51:53:90:b1:ec:cf:2c:d7: bf:78:a5:e5:3a:53:29:42:46:53:6f:fc:27:71:5c:ea:e5:61: 9f:12:ec:79:cf:ad:70:c3:88:41:b8:72:9b:58:22:c8:bc:6c: 04:db:e7:9b:12:51:ea:7c:e0:00:08:82:68:f3:bf:11:5b:55: e1:5f:fd:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskluZb4ZWpk1UT9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk YWYwY2YxZTctMzA5NS00NGYyLWIyNjYtNzQ1MzliZTI0MWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUvN/gs4W7l1kUFmjqfMRv79RMUqWB1SLg2g xAEhTfLxOjnu7ewbAOk8wJf6fd+rN+7krLYaaIwggSunL/EIpd6Yi9ahwfd8lNFc ShEd88tgl5SJrNoIBl/DIGRobHFDA9fLGptVHpujE9KWSI2zDRBVzfUcpEOjLRhK pnel++LYnIIJbLXppA04bunHSLltlAC3WrOmn23TxAYIRDHIRUEjQnR4SCEJT5cH H+bETfjHvfCSzCFFCF6pOpP2s/7NbDH/RMpkzY62V9Pb7XbUd/dXAv/2k5tIVrlf zPyspWZECKP8xrpvFmifr6/7B2k/4yAWbCmU1+qSqwn0x9oUxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8IBNPio6SAm+vgnXM6+egrPg7kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGEyMzE0NjctMzRjZS0z NmMzLWExOTUtNDVkYzJhZWVlYTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFzVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpm+fB/0/MQ2gMtqcOiWAIcaPrp5yVRLqC5wuOxIojcSc34NGjfuDdj UK4OUyCvSlz1q6De+vKndDEnN56xG3tVsh31u8T01MjC09UcKjlRLaG2srTFMhgm UlCJ0izozwhP3VQZnXyh5lo9ZN0JrraWFKZS7YToC1rPVRSLf/Znb3pZBfoTlsLd XOJp3gFYkS4SsrztjcaZ6va8Ai9i0UNQ7wmVSP0k7m32YHCzRAk8EcxoEI//Re0l iZz96qtRU5Cx7M8s1794peU6UylCRlNv/CdxXOrlYZ8S7HnPrXDDiEG4cptYIsi8 bATb55sSUep84AAIgmjzvxFbVeFf/XI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:18:34 2025 by rpki-client