$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a4c1342-fbd2-3908-90fa-402c36424876.roa File: 8a4c1342-fbd2-3908-90fa-402c36424876.roa (raw, json) Hash identifier: dBxsEQIHwei8WC2Jxnph10pOiUx9pHeQ0G8M3VcTTFA= Subject key identifier: 48:F1:FE:44:9C:B4:84:79:7C:D7:C0:CB:85:73:E7:EA:50:AE:ED:9E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583C93DBC86B597C49E39800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a4c1342-fbd2-3908-90fa-402c36424876.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.205.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:93:db:c8:6b:59:7c:49:e3:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=1da14fc6-2066-4973-b2e2-03c6b9eb976d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0c:5a:6d:e2:3e:59:f4:d2:c2:75:ee:d9:0a: 07:cb:88:13:46:cf:03:64:8d:e2:70:80:61:4d:d0: 44:12:42:4a:6e:d2:78:48:c0:7b:db:b1:be:10:c2: 41:82:f2:9f:3d:b4:d5:33:fa:ab:a3:8e:90:da:a0: 2f:74:ad:2a:ce:33:b4:1a:5a:d8:87:c1:ab:ec:02: 69:96:77:c5:ca:84:95:d9:6a:ab:d1:2b:62:1d:f4: 7f:b5:72:f3:e4:b0:24:d7:b9:14:06:f7:6e:5d:d9: cf:dd:3e:d0:e2:71:ab:89:e6:24:0a:b3:0f:12:c0: 17:e8:80:85:ad:bc:4e:9d:97:a7:51:e3:22:98:80: b8:3f:5e:a5:d5:e8:c1:ed:6d:ce:a2:8f:63:9a:1d: f3:af:6b:dc:b0:df:41:90:39:5f:67:90:52:3f:e9: 23:07:c8:6f:27:f5:e4:93:f4:a6:33:21:58:b4:2e: 2d:5a:40:dc:1f:79:43:6f:8a:15:ab:1e:19:4f:2d: 98:89:46:c7:ea:fb:ea:86:6b:2a:55:87:74:a7:2e: 2a:fe:fa:01:ab:94:6a:77:be:6f:f3:d6:dc:e2:0e: d2:9b:45:23:b3:5b:ba:9a:7c:ec:15:29:f9:66:8b: 53:dd:d1:8d:ba:3f:3c:be:d3:3d:2b:6c:b4:1c:4f: 2d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F1:FE:44:9C:B4:84:79:7C:D7:C0:CB:85:73:E7:EA:50:AE:ED:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a4c1342-fbd2-3908-90fa-402c36424876.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:43:a1:78:87:71:f8:54:a9:9b:75:4d:f0:e7:f5:52:fc:60: 04:19:bd:2d:7b:64:13:59:3c:c6:bc:49:49:c5:c5:d8:4f:32: 8e:02:69:69:22:03:60:b5:c0:10:d5:c0:87:4e:25:af:3f:80: c2:82:be:1c:83:4e:e7:7d:6b:8d:41:60:5c:d7:27:b9:23:b0: 6d:df:b9:59:20:50:06:8a:97:1c:6d:e9:41:46:e0:86:17:91: ec:0e:5c:6a:f7:dd:96:01:b7:7e:f1:b6:c2:e4:51:b2:f7:3f: c9:d6:ee:3e:e6:ad:01:bc:ec:e7:b3:b2:2c:7d:a2:1b:cd:47: ed:d9:f3:38:1b:41:fb:09:4c:cd:e1:f6:17:d2:5b:3c:4e:73: fe:0e:28:3c:1c:eb:47:e3:94:a3:96:f5:e9:ab:ca:af:4e:4d: c5:05:cb:06:79:3e:f4:48:b8:ef:66:78:a5:fa:20:f2:64:7e: 14:5f:fc:6d:34:b1:95:97:56:63:d0:63:de:bc:f9:67:b0:1b: cd:11:6b:77:86:45:57:28:32:6e:f4:d3:b2:16:9f:78:17:c8: 15:e5:c2:26:63:c7:4b:a2:0e:b7:6f:5e:28:6d:79:85:e6:63: d0:2f:4b:86:21:20:6d:28:63:49:70:39:51:31:1b:3e:0f:63: 58:65:b1:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJPbyGtZfEnjmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MWRhMTRmYzYtMjA2Ni00OTczLWIyZTItMDNjNmI5ZWI5NzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAxabeI+WfTSwnXu2QoHy4gTRs8DZI3icIBh TdBEEkJKbtJ4SMB727G+EMJBgvKfPbTVM/qro46Q2qAvdK0qzjO0GlrYh8Gr7AJp lnfFyoSV2Wqr0StiHfR/tXLz5LAk17kUBvduXdnP3T7Q4nGrieYkCrMPEsAX6ICF rbxOnZenUeMimIC4P16l1ejB7W3Ooo9jmh3zr2vcsN9BkDlfZ5BSP+kjB8hvJ/Xk k/SmMyFYtC4tWkDcH3lDb4oVqx4ZTy2YiUbH6vvqhmsqVYd0py4q/voBq5Rqd75v 89bc4g7Sm0Ujs1u6mnzsFSn5ZotT3dGNuj88vtM9K2y0HE8tOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjx/kSctIR5fNfAy4Vz5+pQru2eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGE0YzEzNDItZmJkMi0z OTA4LTkwZmEtNDAyYzM2NDI0ODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF811MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABDoXiHcfhUqZt1TfDn9VL8YAQZvS17ZBNZPMa8SUnFxdhPMo4CaWki A2C1wBDVwIdOJa8/gMKCvhyDTud9a41BYFzXJ7kjsG3fuVkgUAaKlxxt6UFG4IYX kewOXGr33ZYBt37xtsLkUbL3P8nW7j7mrQG87Oezsix9ohvNR+3Z8zgbQfsJTM3h 9hfSWzxOc/4OKDwc60fjlKOW9emryq9OTcUFywZ5PvRIuO9meKX6IPJkfhRf/G00 sZWXVmPQY968+WewG80Ra3eGRVcoMm7007IWn3gXyBXlwiZjx0uiDrdvXihteYXm Y9AvS4YhIG0oY0lwOVExGz4PY1hlsT4= -----END CERTIFICATE-----Generated at Mon Oct 20 10:40:36 2025 by rpki-client