$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95ad31de-fea9-3363-9f29-6dfb7f1e3056.roa File: 95ad31de-fea9-3363-9f29-6dfb7f1e3056.roa (raw, json) Hash identifier: oRnwN6xFXPK3tp6TVIAK83WcFDShZr6XpFmJuLKHKLg= Subject key identifier: 8F:F6:F2:EE:55:9F:C0:B8:D9:BE:A3:55:2C:C8:38:1D:AB:37:8A:A9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B328C4C51D82B52D997D30E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95ad31de-fea9-3363-9f29-6dfb7f1e3056.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.208.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:4c:51:d8:2b:52:d9:97:d3:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=a618c711-f380-4a1e-817e-fc932f279a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5b:95:9c:f2:53:8e:fd:93:ec:64:77:42:6e: 4b:25:0f:8f:dc:5d:21:26:33:db:05:81:ec:af:90: 45:c6:24:9c:b9:fd:fc:bc:c3:13:7e:67:96:5b:3c: 6c:5c:23:c1:3f:28:3c:da:ad:e0:50:80:63:2b:3c: 7a:1b:1f:ad:60:0f:75:8f:06:9b:2b:a1:26:fe:99: 48:ca:f3:d8:d2:ab:3e:fe:64:2b:38:7d:c0:0d:06: 1f:28:33:25:d5:16:dc:d6:d7:25:0c:a4:29:71:44: 75:dd:e0:b4:5b:b3:e6:b7:47:ed:93:5f:e4:38:87: 96:40:98:40:d3:2b:c2:e1:0e:ef:c3:e7:a2:35:71: f7:71:95:fe:bb:0b:c2:35:13:3d:12:ea:9b:46:37: e3:2b:7b:c1:b2:39:19:65:04:36:89:d1:b0:93:44: f8:58:83:95:b9:f3:c9:9b:d9:35:03:4b:ac:99:b8: 6f:0c:ce:f8:37:c2:da:ca:07:e1:8d:33:7e:7f:7e: 0a:3b:35:b6:2e:3c:49:b3:ed:d4:2e:98:29:25:10: 25:c0:43:f4:86:f2:bd:2e:e6:4e:aa:78:88:b4:99: a4:4f:03:c7:6a:59:5f:47:ad:41:a6:90:1e:89:bd: 85:1a:0b:59:46:88:78:10:48:8c:78:b9:80:e5:28: 3e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F6:F2:EE:55:9F:C0:B8:D9:BE:A3:55:2C:C8:38:1D:AB:37:8A:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95ad31de-fea9-3363-9f29-6dfb7f1e3056.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:9a:4e:19:08:63:03:05:47:c7:9f:77:0b:ee:c5:1c:2e:43: dd:99:2f:c6:95:4f:5f:4f:28:c4:2d:df:7f:bd:05:21:96:80: b9:a6:49:c7:98:9a:a0:e4:8c:50:e0:41:a6:81:7e:6f:14:2c: 33:08:4a:e4:3d:28:18:64:9e:7e:df:41:02:34:d7:63:29:59: aa:5b:76:a6:bc:22:fa:41:13:f0:68:87:41:55:eb:f8:0d:81: eb:8e:c4:3a:61:5a:32:e2:63:e5:e4:c3:3d:98:78:87:0f:ce: 45:aa:1a:90:33:76:84:a4:51:84:d1:02:13:80:af:66:be:bd: 5e:e2:77:a9:af:15:99:0e:6c:02:93:26:0b:cc:02:35:50:fa: e3:6f:94:2d:06:58:1e:af:22:63:84:2e:14:b9:35:74:45:0d: eb:f7:9b:20:e1:5e:58:b5:4b:9e:7c:4e:84:40:e5:a5:f0:38: 9e:97:76:4d:b8:e7:c4:54:e7:d0:d1:17:18:01:b3:3b:95:3b: 2b:1a:2d:4e:66:79:95:60:50:a0:16:54:d2:40:06:26:d8:a5: f2:32:66:e3:1f:ea:5d:65:fd:e3:31:f0:b9:9f:c1:f5:20:58: de:09:d1:6c:8a:b8:50:31:f1:e3:bc:2c:cf:8b:79:f8:7b:5a: 59:79:5c:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjExR2CtS2ZfTDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk YTYxOGM3MTEtZjM4MC00YTFlLTgxN2UtZmM5MzJmMjc5YTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuluVnPJTjv2T7GR3Qm5LJQ+P3F0hJjPbBYHs r5BFxiScuf38vMMTfmeWWzxsXCPBPyg82q3gUIBjKzx6Gx+tYA91jwabK6Em/plI yvPY0qs+/mQrOH3ADQYfKDMl1Rbc1tclDKQpcUR13eC0W7Pmt0ftk1/kOIeWQJhA 0yvC4Q7vw+eiNXH3cZX+uwvCNRM9EuqbRjfjK3vBsjkZZQQ2idGwk0T4WIOVufPJ m9k1A0usmbhvDM74N8LaygfhjTN+f34KOzW2LjxJs+3ULpgpJRAlwEP0hvK9LuZO qniItJmkTwPHallfR61BppAeib2FGgtZRoh4EEiMeLmA5Sg+0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/28u5Vn8C42b6jVSzIOB2rN4qpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTVhZDMxZGUtZmVhOS0z MzYzLTlmMjktNmRmYjdmMWUzMDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9DeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSaThkIYwMFR8efdwvuxRwuQ92ZL8aVT19PKMQt33+9BSGWgLmmSceY mqDkjFDgQaaBfm8ULDMISuQ9KBhknn7fQQI012MpWapbdqa8IvpBE/Boh0FV6/gN geuOxDphWjLiY+Xkwz2YeIcPzkWqGpAzdoSkUYTRAhOAr2a+vV7id6mvFZkObAKT JgvMAjVQ+uNvlC0GWB6vImOELhS5NXRFDev3myDhXli1S558ToRA5aXwOJ6Xdk24 58RU59DRFxgBszuVOysaLU5meZVgUKAWVNJABibYpfIyZuMf6l1l/eMx8LmfwfUg WN4J0WyKuFAx8eO8LM+Lefh7Wll5XJY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:24:11 2025 by rpki-client