$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae432139-bfc0-3b36-99d8-c9ed3458f5ab.roa File: ae432139-bfc0-3b36-99d8-c9ed3458f5ab.roa (raw, json) Hash identifier: XXoz2ZfrM86lecw1VO7QAHgncSQUjMBvHK1vwW/bat4= Subject key identifier: 95:24:8E:33:1E:AC:0A:D7:38:46:5F:59:6B:E3:D2:48:DA:75:BC:64 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B0758C82D99B298201BDE00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae432139-bfc0-3b36-99d8-c9ed3458f5ab.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.209.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:58:c8:2d:99:b2:98:20:1b:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=1a2e22df-300d-4498-bb65-3c3242ef33f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:db:2d:a4:5f:d4:b5:68:d0:d3:91:f9:62:ae: b2:68:9d:7c:c3:c4:d5:8d:c1:eb:65:d5:9d:fd:5b: 17:6b:d8:a6:20:d3:3f:ad:9a:a2:73:0e:15:db:c8: 26:06:ee:42:97:3d:dd:5f:23:9d:e7:cb:af:dd:96: c9:6a:60:3d:31:3a:78:c0:9c:0e:ab:7e:64:2e:b8: c0:03:6a:b8:5c:9d:6b:36:fb:d8:82:33:c5:25:8b: 43:30:d8:99:ec:1e:b7:9a:cd:aa:79:6c:73:f6:cf: 78:5c:06:14:cf:7d:69:68:c5:db:03:1c:f0:4b:43: 40:c6:19:aa:01:09:70:a5:e3:c4:66:9f:ba:b5:c1: ab:7a:d5:75:55:e1:53:c2:4d:7d:c4:60:27:7f:4a: d9:bf:36:ea:7c:da:dd:19:c2:57:f9:39:5d:07:43: 8c:09:65:67:bc:ae:cf:54:15:9e:d8:f8:ae:aa:f0: bd:27:1c:6d:86:fb:a6:e3:ad:85:88:bc:f5:6d:ca: fe:d3:b4:02:24:e8:ac:1e:26:31:fe:eb:fa:23:19: b6:26:18:e0:5b:61:62:3a:a1:36:8a:be:53:2d:da: ca:26:82:ee:e3:b2:01:72:e2:0c:5a:cd:ce:04:6d: b0:5c:42:f5:37:dc:8e:fa:6d:55:6b:c9:73:98:78: 2e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:24:8E:33:1E:AC:0A:D7:38:46:5F:59:6B:E3:D2:48:DA:75:BC:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae432139-bfc0-3b36-99d8-c9ed3458f5ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d5:04:c4:d2:fd:f3:6f:dc:59:e2:52:7a:83:ce:aa:0b:f2: 0d:b3:57:d5:8a:20:b1:2b:3e:7b:64:cf:0e:23:b4:51:aa:ed: fd:70:cc:df:4f:7d:dc:75:fc:1b:30:11:4c:fb:37:de:48:0d: bf:fa:ea:4c:c3:bb:09:7c:41:55:6a:49:27:e1:05:c3:7b:53: 0d:f8:48:32:5d:3c:19:0b:35:00:32:d6:94:80:00:ca:74:44: 64:65:a9:7d:44:d8:ae:1b:99:fd:1c:92:fc:f2:c0:29:7b:8d: 37:22:cc:b1:03:80:f5:d4:3e:ec:90:8d:7b:c2:b6:ea:d5:ff: ef:de:fc:55:6a:f7:30:df:37:62:8c:ee:36:50:6d:52:7f:06: 52:55:02:d0:08:5f:5f:8e:1c:70:a3:95:4a:eb:de:c7:65:77: 15:89:0f:b7:6a:e0:b0:30:1b:65:9e:d4:ab:2c:2a:d3:0f:5b: 3e:c0:88:f4:cc:fc:39:97:b7:91:15:a0:17:40:6a:cb:27:57: f3:2d:99:d4:9f:be:c0:bb:a8:95:86:07:ab:88:86:99:ae:76: b2:bc:2a:48:df:7e:23:0a:68:4c:eb:50:11:de:36:04:19:78: 3e:a4:48:7d:7d:b5:4d:29:92:81:4c:f9:0e:9a:82:03:21:1b: 20:d1:7f:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1jILZmymCAb3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MWEyZTIyZGYtMzAwZC00NDk4LWJiNjUtM2MzMjQyZWYzM2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tstpF/UtWjQ05H5Yq6yaJ18w8TVjcHrZdWd /VsXa9imINM/rZqicw4V28gmBu5Clz3dXyOd58uv3ZbJamA9MTp4wJwOq35kLrjA A2q4XJ1rNvvYgjPFJYtDMNiZ7B63ms2qeWxz9s94XAYUz31paMXbAxzwS0NAxhmq AQlwpePEZp+6tcGretV1VeFTwk19xGAnf0rZvzbqfNrdGcJX+TldB0OMCWVnvK7P VBWe2PiuqvC9Jxxthvum462FiLz1bcr+07QCJOisHiYx/uv6Ixm2JhjgW2FiOqE2 ir5TLdrKJoLu47IBcuIMWs3OBG2wXEL1N9yO+m1Va8lzmHgu9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUkjjMerArXOEZfWWvj0kjadbxkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWU0MzIxMzktYmZjMC0z YjM2LTk5ZDgtYzllZDM0NThmNWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9FJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzVBMTS/fNv3FniUnqDzqoL8g2zV9WKILErPntkzw4jtFGq7f1wzN9P fdx1/BswEUz7N95IDb/66kzDuwl8QVVqSSfhBcN7Uw34SDJdPBkLNQAy1pSAAMp0 RGRlqX1E2K4bmf0ckvzywCl7jTcizLEDgPXUPuyQjXvCturV/+/e/FVq9zDfN2KM 7jZQbVJ/BlJVAtAIX1+OHHCjlUrr3sdldxWJD7dq4LAwG2We1KssKtMPWz7AiPTM /DmXt5EVoBdAassnV/MtmdSfvsC7qJWGB6uIhpmudrK8KkjffiMKaEzrUBHeNgQZ eD6kSH19tU0pkoFM+Q6aggMhGyDRf5w= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:59 2025 by rpki-client