$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ea9f4db-5e76-3732-ad19-0e5fdc72cb98.roa File: 8ea9f4db-5e76-3732-ad19-0e5fdc72cb98.roa (raw, json) Hash identifier: ltAO8M7SfxmeYQU2wNRVkxb1FC303O6Ib1AF+tF37GQ= Subject key identifier: EC:B4:84:CA:D3:0C:EF:D4:31:4F:59:11:62:9C:52:2E:80:87:F3:1B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E20DF0CF1AC80EBBD86B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ea9f4db-5e76-3732-ad19-0e5fdc72cb98.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.203.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:0d:f0:cf:1a:c8:0e:bb:d8:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=cf2cf84a-b7c8-4d45-ad8b-69408dd9d784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:37:79:98:3e:f9:7c:38:dc:a1:f4:3e:3b:5d: 0b:4f:08:e9:38:2d:a1:e3:e4:fc:ca:04:dd:e2:ea: 9b:53:d5:01:0d:d3:f9:90:9f:d2:bb:c4:34:72:5b: d9:d9:5e:d5:7e:a4:b6:3f:5e:cf:50:f6:bf:6a:d8: d0:8f:c4:23:eb:ec:32:ff:ab:86:2a:ea:44:6b:3e: bc:24:71:55:74:c1:1b:37:8b:ac:eb:67:7c:ed:c5: d1:f8:6b:ac:2f:37:84:01:75:67:06:4e:ae:50:dc: e2:9e:ac:d4:7d:5c:d8:97:1e:6a:0f:b7:ef:57:05: bf:30:b0:c6:b9:50:99:7e:85:44:03:ab:78:87:65: 1c:ce:f3:eb:98:68:08:ca:ae:0a:77:2e:e8:04:e4: 6c:41:2a:71:f0:89:86:b0:cb:ae:ee:a3:e8:24:15: 10:c8:cc:c7:7d:3d:71:6a:b9:89:b5:4b:46:54:81: 33:bb:69:67:79:e1:c1:00:b2:18:82:6c:cd:8b:bd: ab:9c:53:03:b1:bf:df:65:04:26:3e:78:75:44:ca: 06:10:50:5e:3c:ae:4d:54:0b:5c:54:fa:73:06:51: a1:a9:f4:d8:3b:e6:6e:41:68:3c:d4:aa:bd:92:8c: 09:a7:76:81:12:18:f9:db:3d:d7:40:b7:eb:db:5f: c6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B4:84:CA:D3:0C:EF:D4:31:4F:59:11:62:9C:52:2E:80:87:F3:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ea9f4db-5e76-3732-ad19-0e5fdc72cb98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:1a:73:ab:ad:d1:f2:bf:84:a4:e0:5c:9e:99:30:b2:cb:5c: df:14:68:b2:c0:eb:f0:b4:3e:6f:0d:85:bf:05:04:17:f1:b2: fa:6a:3b:95:1b:a4:ee:6d:b8:ac:ce:c6:d4:ea:6a:88:22:6a: 01:1b:90:6e:d2:5a:d2:1b:d7:07:e3:93:99:a4:65:f7:e7:35: 1b:d0:44:95:53:28:93:23:98:51:e7:62:28:05:43:e1:2d:36: 02:a1:34:07:1c:eb:ec:8e:fb:21:a0:d7:e8:c8:26:06:27:08: 35:d6:98:df:d3:47:ac:59:70:38:c2:92:86:26:c1:a7:84:31: ff:06:1c:87:70:91:32:06:83:d1:e0:9a:e8:6f:9c:b5:d9:e7: 6f:0f:21:4d:fc:31:85:87:62:74:b1:24:86:a3:5b:92:5d:76: 39:be:c8:90:d6:22:f6:76:b2:dd:0b:21:6a:87:23:d3:15:5e: 28:67:b7:15:08:c5:49:ae:28:8f:50:dd:17:a9:e4:69:71:0b: fb:1c:66:ea:29:e5:64:9a:50:3c:9e:04:3f:db:64:e4:24:84: 28:23:ab:c5:95:f7:10:ff:39:c6:bd:ef:37:6d:c3:6e:ff:2f: 7c:0c:fc:12:3c:1d:b1:1a:0b:6a:ce:5a:d2:48:5c:15:9a:b9: 83:fd:83:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4g3wzxrIDrvYa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk Y2YyY2Y4NGEtYjdjOC00ZDQ1LWFkOGItNjk0MDhkZDlkNzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjd5mD75fDjcofQ+O10LTwjpOC2h4+T8ygTd 4uqbU9UBDdP5kJ/Su8Q0clvZ2V7VfqS2P17PUPa/atjQj8Qj6+wy/6uGKupEaz68 JHFVdMEbN4us62d87cXR+GusLzeEAXVnBk6uUNzinqzUfVzYlx5qD7fvVwW/MLDG uVCZfoVEA6t4h2UczvPrmGgIyq4Kdy7oBORsQSpx8ImGsMuu7qPoJBUQyMzHfT1x armJtUtGVIEzu2lneeHBALIYgmzNi72rnFMDsb/fZQQmPnh1RMoGEFBePK5NVAtc VPpzBlGhqfTYO+ZuQWg81Kq9kowJp3aBEhj52z3XQLfr21/GLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOy0hMrTDO/UMU9ZEWKcUi6Ah/MbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGVhOWY0ZGItNWU3Ni0z NzMyLWFkMTktMGU1ZmRjNzJjYjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8tgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsac6ut0fK/hKTgXJ6ZMLLLXN8UaLLA6/C0Pm8Nhb8FBBfxsvpqO5Ub pO5tuKzOxtTqaogiagEbkG7SWtIb1wfjk5mkZffnNRvQRJVTKJMjmFHnYigFQ+Et NgKhNAcc6+yO+yGg1+jIJgYnCDXWmN/TR6xZcDjCkoYmwaeEMf8GHIdwkTIGg9Hg muhvnLXZ528PIU38MYWHYnSxJIajW5Jddjm+yJDWIvZ2st0LIWqHI9MVXihntxUI xUmuKI9Q3Rep5GlxC/scZuop5WSaUDyeBD/bZOQkhCgjq8WV9xD/Oca97zdtw27/ L3wM/BI8HbEaC2rOWtJIXBWauYP9g3w= -----END CERTIFICATE-----Generated at Mon Oct 20 04:38:33 2025 by rpki-client