$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9179020f-74fe-3be3-9f0d-b2ad904e023e.roa File: 9179020f-74fe-3be3-9f0d-b2ad904e023e.roa (raw, json) Hash identifier: PCfc8nP+sQSyYDjF6/KTz/8EaRQM4GbYf9OzIDne+wc= Subject key identifier: B1:3D:18:8E:B3:6C:CE:86:93:51:E7:31:8A:8B:14:3C:4B:4B:78:63 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E20F2E7D6ADFC0B032FE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9179020f-74fe-3be3-9f0d-b2ad904e023e.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.203.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:0f:2e:7d:6a:df:c0:b0:32:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=ffb922f7-2e8d-48ac-99d0-606d1db79adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:18:85:d7:cd:39:57:ac:43:fb:73:b3:6a:56: 2f:a8:44:ba:e9:2b:ac:94:5e:53:de:6f:58:1e:ac: 2c:31:6b:36:ce:c9:ac:0f:34:15:a2:af:45:49:0f: c6:77:54:f0:58:57:b0:a9:4b:e3:44:8b:ee:0f:d8: 0b:95:a4:d8:04:b7:0a:50:e7:ea:9c:cc:dc:ef:92: 39:8f:44:8b:6b:9b:6c:02:6f:23:2c:75:30:c2:50: bc:b9:05:47:7d:b5:22:28:5e:20:ae:e0:74:aa:3e: a6:ab:ee:9f:17:44:51:02:72:ea:3d:9e:db:be:f1: ed:26:39:98:44:30:7b:e6:20:85:57:0a:f4:13:ea: 8d:39:00:36:f7:1a:c6:c6:ae:e1:b0:80:b5:eb:58: 63:09:4a:cf:2b:df:42:5b:11:2f:7b:51:0d:a0:44: 87:11:d6:63:ad:4d:51:f0:f0:d1:55:27:21:03:8e: 60:b2:cc:ee:c4:84:9a:81:36:74:56:15:96:a4:5b: be:e0:b3:2a:9f:5c:4b:e4:fa:4d:20:c3:49:cc:95: e0:10:33:75:ee:ad:0a:82:d0:c1:61:87:f3:59:78: 5c:52:60:0b:6f:3f:a1:7d:88:ec:af:46:38:7e:de: ee:6c:61:7c:45:08:af:88:29:05:6a:82:09:9e:d3: 23:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3D:18:8E:B3:6C:CE:86:93:51:E7:31:8A:8B:14:3C:4B:4B:78:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9179020f-74fe-3be3-9f0d-b2ad904e023e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:fc:97:23:b7:c6:6f:c2:9f:6d:62:a1:07:65:67:59:c8:9e: ff:a6:5e:0f:ac:b2:a1:d7:79:a9:31:31:3b:a2:25:53:f8:4d: 35:73:fb:28:1e:e0:8f:8b:59:15:60:82:6c:15:62:5b:cd:a7: b4:90:56:44:d8:b6:27:36:44:57:f8:72:b2:ce:04:3d:56:46: 20:84:89:32:f0:6f:1b:37:6a:87:ae:87:1f:c9:82:1c:8d:45: a3:70:5a:d8:18:07:38:df:10:5f:0d:20:36:4a:dc:fa:85:f2: c8:52:86:c4:d1:3f:f7:79:5c:94:9b:59:6b:aa:43:33:10:5b: d3:21:92:9a:f1:d6:16:05:be:37:ce:e3:c6:12:c3:3c:14:53: 8f:96:f9:dc:eb:b4:29:d6:47:e7:69:05:2f:83:fa:84:44:6d: c9:b8:9f:22:fe:0e:df:36:84:6c:d4:55:58:8b:ef:a8:38:ae: d1:4f:d2:13:12:d1:67:7c:30:a6:75:ca:78:e6:09:4e:17:47: d6:a5:ab:94:11:3a:77:c0:3a:d6:89:54:6d:75:02:4d:ca:9f: 3c:d0:ac:71:55:65:39:8a:f9:ef:09:89:17:0f:a5:1b:52:92: 5f:f6:ec:69:9e:51:fe:8e:cc:2c:b1:d8:25:55:fe:46:d0:39: ef:9a:ca:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4g8ufWrfwLAy/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZmZiOTIyZjctMmU4ZC00OGFjLTk5ZDAtNjA2ZDFkYjc5YWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixiF1805V6xD+3OzalYvqES66SuslF5T3m9Y HqwsMWs2zsmsDzQVoq9FSQ/Gd1TwWFewqUvjRIvuD9gLlaTYBLcKUOfqnMzc75I5 j0SLa5tsAm8jLHUwwlC8uQVHfbUiKF4gruB0qj6mq+6fF0RRAnLqPZ7bvvHtJjmY RDB75iCFVwr0E+qNOQA29xrGxq7hsIC161hjCUrPK99CWxEve1ENoESHEdZjrU1R 8PDRVSchA45gsszuxISagTZ0VhWWpFu+4LMqn1xL5PpNIMNJzJXgEDN17q0KgtDB YYfzWXhcUmALbz+hfYjsr0Y4ft7ubGF8RQiviCkFaoIJntMjtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLE9GI6zbM6Gk1HnMYqLFDxLS3hjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTE3OTAyMGYtNzRmZS0z YmUzLTlmMGQtYjJhZDkwNGUwMjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8v5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF38lyO3xm/Cn21ioQdlZ1nInv+mXg+ssqHXeakxMTuiJVP4TTVz+yge 4I+LWRVggmwVYlvNp7SQVkTYtic2RFf4crLOBD1WRiCEiTLwbxs3aoeuhx/JghyN RaNwWtgYBzjfEF8NIDZK3PqF8shShsTRP/d5XJSbWWuqQzMQW9Mhkprx1hYFvjfO 48YSwzwUU4+W+dzrtCnWR+dpBS+D+oREbcm4nyL+Dt82hGzUVViL76g4rtFP0hMS 0Wd8MKZ1ynjmCU4XR9alq5QROnfAOtaJVG11Ak3KnzzQrHFVZTmK+e8JiRcPpRtS kl/27GmeUf6OzCyx2CVV/kbQOe+ayuY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:32:03 2025 by rpki-client