$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8db7d463-7eca-3f82-b189-32710d26967c.roa File: 8db7d463-7eca-3f82-b189-32710d26967c.roa (raw, json) Hash identifier: Of0y/mz5yqLJ23gm/409fxPoIPs2WwGAnG7d6i2ysdw= Subject key identifier: A4:0E:30:68:BD:AE:00:B4:9E:3F:49:57:93:D4:95:79:C4:BC:1D:7E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B59A1CEFF23C98EFB8EF413C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8db7d463-7eca-3f82-b189-32710d26967c.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.208.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:ce:ff:23:c9:8e:fb:8e:f4:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=3a5d65c6-ec54-484b-a411-75d7434d6941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:65:75:fa:18:2a:8c:4b:74:3d:19:1d:fa:9f: c0:1b:4e:dc:8a:d8:1c:24:c8:6c:57:ef:67:5a:2d: c5:27:89:53:66:74:a1:f1:c6:c9:35:3a:55:33:0b: f4:c4:c9:72:3f:7c:63:1c:a1:a5:ac:f6:22:4e:32: 62:2b:f3:d6:c9:42:23:95:88:1b:ed:4d:3c:37:ed: 35:a5:a7:78:dd:d8:74:86:d0:66:ba:45:9e:ea:fd: 4e:6a:2c:cf:98:73:76:35:4e:e1:8f:4c:bb:6a:21: a4:ec:cd:47:70:96:ff:0a:01:a6:1f:dc:54:ad:c5: 04:41:30:a0:79:ae:0c:cb:28:ee:64:ee:bc:2c:b2: 18:9e:28:31:92:06:3c:fb:a0:3f:01:7a:9b:44:fa: 9a:87:24:c2:f4:30:bb:6e:0f:83:b0:6b:97:e5:45: 87:b3:01:e8:7d:ee:3a:f2:3b:36:a1:79:05:76:7b: c7:c1:07:99:72:91:f0:14:33:7a:f5:ba:08:12:5b: f4:5f:19:45:47:67:66:b6:62:a6:9b:7d:d3:85:6e: 52:46:9f:85:ac:c3:86:ce:5b:5e:3a:63:6b:80:e9: 18:2e:81:c8:5a:ce:b2:87:8a:d1:7c:b4:a1:28:e9: d6:aa:2b:8d:3d:8f:fe:36:ea:0d:9c:23:89:56:2e: aa:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:0E:30:68:BD:AE:00:B4:9E:3F:49:57:93:D4:95:79:C4:BC:1D:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8db7d463-7eca-3f82-b189-32710d26967c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:26:10:01:d3:ca:7b:ef:f8:e4:84:0c:02:e5:7c:d9:8c:1a: d0:b8:50:dd:46:fc:bc:6f:8a:38:f6:96:e7:cb:10:a6:fe:fb: 67:d8:b9:5c:a2:7c:76:fa:9e:5a:29:01:99:f1:e5:6b:29:2d: 9c:e9:01:de:64:be:11:a7:e1:af:51:52:4d:32:75:b2:d7:4b: 03:f0:33:ab:b8:87:54:f6:e4:1d:6e:10:b4:23:17:52:e4:9a: 3b:bb:12:fb:f5:28:15:41:72:ba:ec:d6:75:ca:c0:e7:ed:ef: 4a:32:6c:d1:4a:71:2b:e9:51:5d:81:19:f5:3b:e6:cf:8e:62: 6e:89:8c:f3:9b:68:c5:5a:db:6e:93:d2:79:02:8c:00:50:4c: ff:52:7c:6b:c5:25:41:f8:ab:8a:78:c5:db:39:9e:fc:7f:63: 48:ce:13:ea:d4:ef:05:32:3d:bf:81:4b:e5:64:f2:a8:99:6d: c5:dd:47:96:96:38:a1:fb:6e:14:35:92:b4:7c:2f:23:89:94: 2c:93:22:50:fc:46:2e:71:2e:3d:f0:8e:47:4e:d0:17:23:85: 5f:51:0c:eb:05:54:fa:33:92:fb:dd:5b:0b:f2:a4:39:78:22: 74:93:16:d6:c1:28:6a:b3:c1:8f:ce:29:5d:a1:b7:7a:17:a2: e6:2d:21:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtZoc7/I8mO+470E8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk M2E1ZDY1YzYtZWM1NC00ODRiLWE0MTEtNzVkNzQzNGQ2OTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWV1+hgqjEt0PRkd+p/AG07citgcJMhsV+9n Wi3FJ4lTZnSh8cbJNTpVMwv0xMlyP3xjHKGlrPYiTjJiK/PWyUIjlYgb7U08N+01 pad43dh0htBmukWe6v1OaizPmHN2NU7hj0y7aiGk7M1HcJb/CgGmH9xUrcUEQTCg ea4MyyjuZO68LLIYnigxkgY8+6A/AXqbRPqahyTC9DC7bg+DsGuX5UWHswHofe46 8js2oXkFdnvHwQeZcpHwFDN69boIElv0XxlFR2dmtmKmm33ThW5SRp+FrMOGzlte OmNrgOkYLoHIWs6yh4rRfLShKOnWqiuNPY/+NuoNnCOJVi6q6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQOMGi9rgC0nj9JV5PUlXnEvB1+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGRiN2Q0NjMtN2VjYS0z ZjgyLWIxODktMzI3MTBkMjY5NjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9BUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMmEAHTynvv+OSEDALlfNmMGtC4UN1G/Lxvijj2lufLEKb++2fYuVyi fHb6nlopAZnx5WspLZzpAd5kvhGn4a9RUk0ydbLXSwPwM6u4h1T25B1uELQjF1Lk mju7Evv1KBVBcrrs1nXKwOft70oybNFKcSvpUV2BGfU75s+OYm6JjPObaMVa226T 0nkCjABQTP9SfGvFJUH4q4p4xds5nvx/Y0jOE+rU7wUyPb+BS+Vk8qiZbcXdR5aW OKH7bhQ1krR8LyOJlCyTIlD8Ri5xLj3wjkdO0BcjhV9RDOsFVPozkvvdWwvypDl4 InSTFtbBKGqzwY/OKV2ht3oXouYtIY8= -----END CERTIFICATE-----Generated at Mon Oct 20 02:43:48 2025 by rpki-client