$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d7f9546-cc31-32f9-a120-101671b4588c.roa File: 8d7f9546-cc31-32f9-a120-101671b4588c.roa (raw, json) Hash identifier: L0ChLXNHu2S3fCWXLAV+jSgkRlkECnn7smQEuiGNMpg= Subject key identifier: 4F:3D:43:7B:20:F9:B5:EF:6E:5C:61:2E:5E:DA:A9:09:7C:49:0F:90 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC771D7ABE3B95151A05608 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d7f9546-cc31-32f9-a120-101671b4588c.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 9498 IP address blocks: 23.223.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:71:d7:ab:e3:b9:51:51:a0:56:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=b89420f5-3cdc-480d-8acb-7eb793e9d0dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5b:83:df:8a:6b:34:fe:b7:08:88:24:44:09: 57:44:ea:4b:62:13:2a:14:f1:f0:ff:28:53:6a:20: f8:1f:98:ed:21:e1:85:70:d1:09:5b:74:fe:56:68: 62:b3:37:85:93:eb:78:0b:b3:26:58:3e:9b:d6:d0: aa:96:75:87:ca:f7:ed:9c:66:57:e1:ba:db:57:bb: 68:1f:84:4a:6d:46:9a:10:16:f4:16:b6:f5:96:cc: 6b:de:18:4a:20:13:f5:bd:e9:76:2d:39:85:5c:1b: 50:58:99:a6:bf:3e:3b:0e:fa:d0:6c:86:5f:3c:50: 11:38:e4:06:5a:90:91:83:a2:62:67:52:7d:9a:dd: 9d:eb:eb:c8:30:9e:3b:a3:c1:12:8c:05:26:5e:e0: ff:01:ad:fe:a9:b7:f2:59:2d:bf:0c:a2:31:25:f3: 14:d0:43:19:07:75:32:c0:b3:c4:6d:0b:07:de:b4: 36:4d:ea:1f:a7:c1:8f:d8:06:93:09:9e:e8:a1:7c: b1:79:3b:d9:90:a4:7c:9b:da:48:e7:7e:c3:9b:d1: be:fc:88:c0:7e:5c:49:e8:e9:9d:b7:83:f4:7c:87: 0f:55:f9:b3:5f:a4:a0:42:f5:69:39:48:77:6e:96: 64:b2:c6:1d:03:4f:92:ec:f2:64:20:b8:ad:6b:c7: 55:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3D:43:7B:20:F9:B5:EF:6E:5C:61:2E:5E:DA:A9:09:7C:49:0F:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d7f9546-cc31-32f9-a120-101671b4588c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:a0:24:c8:8b:95:f4:e5:90:44:8c:96:79:52:7c:a3:d2:30: 71:71:27:2a:b6:cc:f7:2c:89:43:93:5c:71:49:5e:0e:93:ba: df:a4:77:c4:30:eb:e0:28:aa:f9:e2:91:f1:7f:75:ee:96:b4: 25:20:45:6f:7a:49:d4:b8:61:4b:d5:77:01:52:f3:1f:f6:0b: e1:04:ec:5f:e1:d9:03:69:19:de:0b:a3:94:80:4a:72:c8:d1: 09:f6:e8:30:e9:3c:4f:a9:2d:13:a6:3f:f0:5a:b4:87:5b:03: 97:9c:70:cb:e5:ef:52:26:35:84:7b:13:1d:47:39:67:0b:0d: fa:b6:1a:3b:39:a9:57:a6:7f:c6:ef:ec:d0:07:7e:43:e7:2b: a9:aa:56:d1:8c:b9:c5:bb:50:70:99:b7:e4:f7:14:7c:d6:3f: e2:3b:d1:3f:e7:99:11:21:92:ea:51:da:fe:a9:6a:65:b3:06: d2:f3:23:0a:a1:b0:ea:fe:84:05:c4:7b:c2:f2:18:b4:dc:5e: 1c:46:3f:84:99:4b:82:ad:20:0c:c0:b4:5f:cd:6e:49:1f:e8: 49:67:c7:c3:18:16:f6:b3:42:56:22:90:dc:4e:36:a7:b8:72: 91:84:ce:9d:0d:7d:1b:87:60:2a:02:2e:00:f8:fb:dc:4b:0e: dc:56:62:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3HXq+O5UVGgVggwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk Yjg5NDIwZjUtM2NkYy00ODBkLThhY2ItN2ViNzkzZTlkMGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFuD34prNP63CIgkRAlXROpLYhMqFPHw/yhT aiD4H5jtIeGFcNEJW3T+VmhiszeFk+t4C7MmWD6b1tCqlnWHyvftnGZX4brbV7to H4RKbUaaEBb0Frb1lsxr3hhKIBP1vel2LTmFXBtQWJmmvz47DvrQbIZfPFAROOQG WpCRg6JiZ1J9mt2d6+vIMJ47o8ESjAUmXuD/Aa3+qbfyWS2/DKIxJfMU0EMZB3Uy wLPEbQsH3rQ2Teofp8GP2AaTCZ7ooXyxeTvZkKR8m9pI537Dm9G+/IjAflxJ6Omd t4P0fIcPVfmzX6SgQvVpOUh3bpZkssYdA0+S7PJkILita8dVFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE89Q3sg+bXvblxhLl7aqQl8SQ+QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGQ3Zjk1NDYtY2MzMS0z MmY5LWExMjAtMTAxNjcxYjQ1ODhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9/zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+gJMiLlfTlkESMlnlSfKPSMHFxJyq2zPcsiUOTXHFJXg6Tut+kd8Qw 6+AoqvnikfF/de6WtCUgRW96SdS4YUvVdwFS8x/2C+EE7F/h2QNpGd4Lo5SASnLI 0Qn26DDpPE+pLROmP/BatIdbA5eccMvl71ImNYR7Ex1HOWcLDfq2Gjs5qVemf8bv 7NAHfkPnK6mqVtGMucW7UHCZt+T3FHzWP+I70T/nmREhkupR2v6pamWzBtLzIwqh sOr+hAXEe8LyGLTcXhxGP4SZS4KtIAzAtF/Nbkkf6Elnx8MYFvazQlYikNxONqe4 cpGEzp0NfRuHYCoCLgD4+9xLDtxWYiE= -----END CERTIFICATE-----Generated at Mon Oct 20 15:39:20 2025 by rpki-client