$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ba6a77a-a359-3aa7-aa45-bec034e90341.roa File: 9ba6a77a-a359-3aa7-aa45-bec034e90341.roa (raw, json) Hash identifier: 5TgdjJoy3zgkcSl9oAvbJxX9MaLJYOOMDIvrakRVJjo= Subject key identifier: 55:39:E5:38:FF:91:BD:1B:80:E8:B8:00:2D:50:FD:C1:97:CC:60:D0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B434C88F642951F9298C521E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ba6a77a-a359-3aa7-aa45-bec034e90341.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16625 IP address blocks: 23.195.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:88:f6:42:95:1f:92:98:c5:21:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=a01653d4-f776-438d-ba64-88f400b7163a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6f:dc:9a:41:b8:e5:12:5f:c2:31:ff:f9:54: 03:11:47:ab:2e:1d:b6:71:54:bb:b5:78:cf:75:27: 19:4f:18:fb:bb:13:24:a6:96:0d:d5:52:bf:7b:d4: 8e:c6:e1:9a:00:ee:e0:a7:77:08:80:8c:c7:c6:a8: d6:17:a0:29:0f:31:d4:49:f0:10:40:7e:07:d0:7b: 61:48:17:25:f9:85:06:a2:35:4a:04:88:9a:3f:8c: 44:3f:20:be:ec:20:2e:66:c1:ff:bf:41:fa:d2:e6: 75:a5:05:4b:e8:d2:8b:60:59:13:1b:c8:11:d8:46: 34:56:fb:1c:24:36:72:06:a6:cc:4d:57:dc:a7:46: 0e:0b:de:19:9f:e5:a0:a1:db:90:45:76:e7:0f:e9: 38:cd:03:b1:24:41:94:2b:48:5e:fb:d4:ff:f0:0f: b5:f1:9f:02:e6:59:69:ca:70:6e:b6:b6:75:0b:c6: 86:1a:d3:7e:a9:93:a6:27:07:ef:15:e8:56:90:f2: e8:ff:3e:12:32:5d:33:1d:2b:8b:0b:b0:a1:2b:de: de:b7:71:c9:e9:0b:75:78:54:17:5a:0a:e7:a3:da: 76:2a:a3:f3:aa:de:04:87:e1:da:35:fa:82:0c:5c: dd:71:fa:16:80:92:49:3b:ee:87:44:67:68:1d:2d: 9f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:39:E5:38:FF:91:BD:1B:80:E8:B8:00:2D:50:FD:C1:97:CC:60:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ba6a77a-a359-3aa7-aa45-bec034e90341.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:ac:30:ac:8b:75:2b:ea:5b:b6:4d:43:87:66:95:bc:44:57: ac:fe:92:96:9f:73:87:4d:38:bf:ed:4f:ea:ec:8b:e2:12:54: 2f:5e:c7:55:76:41:af:16:17:2a:32:2f:5b:f3:d5:7c:ab:d2: 13:67:8a:59:57:46:d0:98:f0:38:82:e7:7a:87:08:c3:f3:ae: 95:a8:c0:4c:a3:a6:01:0c:84:ad:64:2e:1a:91:45:2c:82:c3: 80:68:03:79:3c:13:5f:b7:92:9d:09:f5:1b:57:61:2e:d3:38: ac:37:67:a2:0b:36:16:02:e7:0f:08:f5:c5:f4:e7:de:5c:75: c9:62:33:03:c1:a5:80:92:aa:5c:88:9a:70:5a:a0:59:24:af: fa:d8:66:ba:9d:aa:a6:5a:1a:b8:09:83:ad:22:91:f6:1c:a8: fc:81:40:96:ac:27:eb:dd:4d:14:9e:fa:db:24:db:97:0f:69: 25:f0:83:60:a9:08:c3:84:31:5f:24:91:04:6f:ef:35:a6:a6: ad:2e:94:f5:d7:68:7f:01:14:f2:ac:76:bf:d0:33:d7:5e:cb: 3c:6d:9c:99:24:41:bc:f4:00:08:02:d9:f8:07:e6:8e:68:24: bf:2c:74:57:0f:7b:ae:62:df:e5:2c:72:c8:24:69:e2:e3:64: 5e:99:ce:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTIj2QpUfkpjFIeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YTAxNjUzZDQtZjc3Ni00MzhkLWJhNjQtODhmNDAwYjcxNjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW/cmkG45RJfwjH/+VQDEUerLh22cVS7tXjP dScZTxj7uxMkppYN1VK/e9SOxuGaAO7gp3cIgIzHxqjWF6ApDzHUSfAQQH4H0Hth SBcl+YUGojVKBIiaP4xEPyC+7CAuZsH/v0H60uZ1pQVL6NKLYFkTG8gR2EY0Vvsc JDZyBqbMTVfcp0YOC94Zn+WgoduQRXbnD+k4zQOxJEGUK0he+9T/8A+18Z8C5llp ynButrZ1C8aGGtN+qZOmJwfvFehWkPLo/z4SMl0zHSuLC7ChK97et3HJ6Qt1eFQX Wgrno9p2KqPzqt4Eh+HaNfqCDFzdcfoWgJJJO+6HRGdoHS2f2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFU55Tj/kb0bgOi4AC1Q/cGXzGDQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWJhNmE3N2EtYTM1OS0z YWE3LWFhNDUtYmVjMDM0ZTkwMzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8MgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEesMKyLdSvqW7ZNQ4dmlbxEV6z+kpafc4dNOL/tT+rsi+ISVC9ex1V2 Qa8WFyoyL1vz1Xyr0hNnillXRtCY8DiC53qHCMPzrpWowEyjpgEMhK1kLhqRRSyC w4BoA3k8E1+3kp0J9RtXYS7TOKw3Z6ILNhYC5w8I9cX0595cdcliMwPBpYCSqlyI mnBaoFkkr/rYZrqdqqZaGrgJg60ikfYcqPyBQJasJ+vdTRSe+tsk25cPaSXwg2Cp CMOEMV8kkQRv7zWmpq0ulPXXaH8BFPKsdr/QM9deyzxtnJkkQbz0AAgC2fgH5o5o JL8sdFcPe65i3+UscsgkaeLjZF6ZzrA= -----END CERTIFICATE-----Generated at Mon Oct 20 07:41:48 2025 by rpki-client