$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4cbcf12-73b7-3448-83e0-250d214880ac.roa File: a4cbcf12-73b7-3448-83e0-250d214880ac.roa (raw, json) Hash identifier: 33v3zDIfH3fPM3hTQ/DMsD6qmc5b41AHHBGGvhQEcCQ= Subject key identifier: 29:D9:18:A9:5A:41:B7:B4:BC:F6:C2:7D:87:D5:DF:2D:00:A6:94:0B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E203EC27240024D4C01F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4cbcf12-73b7-3448-83e0-250d214880ac.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.203.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:03:ec:27:24:00:24:d4:c0:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=cb5ce31f-5493-4ed8-8b27-aa412131d228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:98:ab:ec:d9:16:e4:16:90:86:ff:a4:84:55: 28:c0:48:a5:32:3f:3b:d2:dc:3c:ed:0b:7e:19:28: 08:39:cd:29:36:47:dc:b9:a1:5a:28:e3:b3:75:0b: e5:53:75:45:33:e4:a0:67:5a:6c:c5:b7:f4:ff:3a: 9a:f9:37:66:4f:4c:40:89:4e:ce:7f:f3:f0:94:9d: 24:6a:6c:e2:17:95:2e:0a:60:29:26:06:16:11:94: e4:b3:6c:31:62:d6:ce:75:ca:72:62:2a:0e:57:ac: 55:25:b9:0b:7d:f4:69:00:59:05:71:ac:68:32:d7: 06:25:bb:11:a3:db:f1:a7:ad:96:91:09:14:68:38: 63:c4:fa:bb:b0:59:9e:eb:5e:43:f4:18:e4:86:c7: d7:d9:9f:53:a5:da:44:16:96:8f:a1:3a:d9:69:e1: ca:8b:b8:9c:fc:6f:bc:cc:89:17:aa:7c:c0:f3:b8: 77:27:fa:02:87:b0:42:91:4a:03:b7:6d:0f:72:50: df:b6:5e:37:7e:55:87:05:ae:47:73:34:96:4b:ff: e4:36:7a:4f:da:41:a2:dd:00:f3:e6:a3:5b:19:64: 7e:fa:4d:c9:7f:2e:bd:5b:75:ec:e4:69:b4:35:34: 36:a5:9f:eb:ef:77:dc:f8:16:b8:00:a8:9d:73:65: 26:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D9:18:A9:5A:41:B7:B4:BC:F6:C2:7D:87:D5:DF:2D:00:A6:94:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4cbcf12-73b7-3448-83e0-250d214880ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:6b:99:bc:dd:96:f9:79:fd:bd:a2:c6:01:39:9a:e8:14:ff: da:f4:f7:54:02:81:22:b3:0f:d5:66:61:88:db:31:5d:17:85: d9:db:4e:ce:f7:21:98:f6:a5:1d:f7:a5:63:a2:b8:49:71:d7: 64:ed:85:95:cb:ea:24:23:72:da:0b:71:45:dc:b9:39:7a:da: 47:aa:d2:2e:db:5a:9f:1c:21:03:7a:1c:04:fa:1a:a9:61:bf: b6:b1:7e:86:d1:86:4e:a0:01:7d:4a:2e:6c:89:c5:97:dc:80: 9a:1a:c7:38:1b:b3:97:c1:74:f0:d6:9c:b5:5f:8e:8d:fc:39: 30:5e:27:f4:f7:04:a4:40:1f:67:cc:a7:ed:ac:2c:70:02:c8: b1:da:b5:2e:00:c1:4e:be:5e:0b:42:27:e6:19:7a:3e:c1:ef: 8f:28:37:d6:21:82:58:9c:61:5c:f0:5b:70:06:fd:33:09:7f: d9:36:63:21:2c:a0:9e:59:19:01:de:1f:b5:93:0f:28:ec:5a: 25:d1:33:f0:5f:b4:aa:58:13:fd:6a:a0:83:7a:10:26:09:2c: 03:8c:03:d6:0e:2e:dd:cd:b4:b9:bb:0b:91:9b:d6:7d:87:14: 16:ec:60:93:e6:c9:44:44:9b:e0:49:6f:55:ca:3a:d3:29:4a: cf:70:88:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4gPsJyQAJNTAHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk Y2I1Y2UzMWYtNTQ5My00ZWQ4LThiMjctYWE0MTIxMzFkMjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJir7NkW5BaQhv+khFUowEilMj870tw87Qt+ GSgIOc0pNkfcuaFaKOOzdQvlU3VFM+SgZ1psxbf0/zqa+TdmT0xAiU7Of/PwlJ0k amziF5UuCmApJgYWEZTks2wxYtbOdcpyYioOV6xVJbkLffRpAFkFcaxoMtcGJbsR o9vxp62WkQkUaDhjxPq7sFme615D9BjkhsfX2Z9TpdpEFpaPoTrZaeHKi7ic/G+8 zIkXqnzA87h3J/oCh7BCkUoDt20PclDftl43flWHBa5HczSWS//kNnpP2kGi3QDz 5qNbGWR++k3Jfy69W3Xs5Gm0NTQ2pZ/r73fc+Ba4AKidc2UmPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnZGKlaQbe0vPbCfYfV3y0AppQLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTRjYmNmMTItNzNiNy0z NDQ4LTgzZTAtMjUwZDIxNDg4MGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8sQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxrmbzdlvl5/b2ixgE5mugU/9r091QCgSKzD9VmYYjbMV0XhdnbTs73 IZj2pR33pWOiuElx12TthZXL6iQjctoLcUXcuTl62keq0i7bWp8cIQN6HAT6Gqlh v7axfobRhk6gAX1KLmyJxZfcgJoaxzgbs5fBdPDWnLVfjo38OTBeJ/T3BKRAH2fM p+2sLHACyLHatS4AwU6+XgtCJ+YZej7B748oN9YhglicYVzwW3AG/TMJf9k2YyEs oJ5ZGQHeH7WTDyjsWiXRM/BftKpYE/1qoIN6ECYJLAOMA9YOLt3NtLm7C5Gb1n2H FBbsYJPmyUREm+BJb1XKOtMpSs9wiMc= -----END CERTIFICATE-----Generated at Mon Oct 20 05:07:12 2025 by rpki-client