$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb37efcb-73b0-3f55-842c-9ad87a685728.roa File: bb37efcb-73b0-3f55-842c-9ad87a685728.roa (raw, json) Hash identifier: wGq9LzlPbkf/Fy6il3G87/zF81vdGv/DEDDPvsQqx7s= Subject key identifier: E9:63:04:FA:79:81:F7:E6:04:37:84:49:4C:93:1C:97:C3:84:4A:1F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B249705AEA10FB3EE7F477F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb37efcb-73b0-3f55-842c-9ad87a685728.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.53.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:97:05:ae:a1:0f:b3:ee:7f:47:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=770ba95c-04a7-4396-9839-e310cb1a1737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0a:5d:77:ba:56:b5:e7:48:c7:22:9a:56:0b: 17:77:40:26:fc:32:b5:19:7d:c2:4e:ed:5e:28:56: 37:e9:9e:4d:e5:39:3d:ba:9e:b8:00:52:f9:0b:ef: a5:57:9d:96:d6:39:68:72:d3:c2:d7:bb:d4:3b:11: 47:65:d1:29:e2:c8:1d:1b:5a:17:83:c7:4c:dc:2e: 74:f6:16:0b:af:1d:21:56:d7:54:3c:8c:c1:88:9c: 2d:78:1e:00:07:f8:f9:14:a5:a4:d2:dc:f9:84:13: b4:ef:36:25:f6:9e:2b:90:dd:15:55:e1:4b:f2:65: c3:79:78:b2:be:6b:ab:76:8e:7a:e6:8c:f8:84:3a: d4:43:48:34:99:4b:37:72:e7:54:92:46:e8:ed:23: 78:73:dd:a9:e4:07:98:d1:29:8c:be:61:f7:47:b0: 4b:a4:40:6a:ee:cb:72:c3:a3:37:97:3b:db:86:15: 3e:8c:95:f5:25:ba:b8:7d:26:7e:ba:68:9b:66:4a: c8:ac:72:d2:0a:75:c3:65:8b:dd:7e:54:6d:1a:68: 4e:df:2d:a9:33:91:bc:1a:19:28:5a:fe:7a:f9:6c: 13:cb:a1:1c:a7:c7:43:2c:6e:b2:33:d0:17:58:c8: 70:26:3b:56:20:cb:49:69:57:86:6d:49:96:f0:31: 68:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:63:04:FA:79:81:F7:E6:04:37:84:49:4C:93:1C:97:C3:84:4A:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb37efcb-73b0-3f55-842c-9ad87a685728.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:a4:28:73:13:c0:33:f3:04:12:05:64:62:fe:78:4a:7b:c9: 34:fe:15:34:b5:cc:51:87:cb:21:73:75:94:27:d3:9b:c1:91: b0:5d:f5:7b:04:35:09:25:1f:8a:3b:fa:61:22:7b:1b:47:18: 14:97:e1:d6:80:05:9b:58:9a:2e:ef:23:ea:d8:d7:73:de:5c: fc:a0:90:b1:b2:f2:0d:c1:6a:15:1b:db:7d:08:04:43:fe:c1: 0f:88:bd:d8:af:ec:ed:e5:89:fd:de:0e:ef:59:98:25:fc:d0: d3:0d:3c:7a:21:c1:45:cd:c9:dc:f7:f6:e5:80:fc:f3:b6:80: b1:d8:98:79:bc:cf:84:eb:ad:bd:31:c7:ff:a1:3b:15:ef:56: ee:73:1f:53:76:77:ba:5a:1b:b3:d3:90:a0:5e:1c:5e:25:e8: 08:09:6d:c4:44:0c:d8:3b:44:d1:b0:2f:ee:cd:7a:bd:09:60: 36:c9:bc:bb:7c:e5:c4:79:bb:60:45:a6:ce:9b:b0:63:17:84: 47:7d:a8:e8:6f:1e:ab:f2:31:3f:20:09:50:65:d9:14:e2:bd: 83:8c:2e:a9:85:76:44:fa:4d:d9:0e:70:52:98:e0:6b:06:eb: a5:8a:21:7c:45:d4:7a:da:3e:6a:30:ed:c0:43:49:76:f2:3e: 10:49:42:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklwWuoQ+z7n9Hf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk NzcwYmE5NWMtMDRhNy00Mzk2LTk4MzktZTMxMGNiMWExNzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswpdd7pWtedIxyKaVgsXd0Am/DK1GX3CTu1e KFY36Z5N5Tk9up64AFL5C++lV52W1jloctPC17vUOxFHZdEp4sgdG1oXg8dM3C50 9hYLrx0hVtdUPIzBiJwteB4AB/j5FKWk0tz5hBO07zYl9p4rkN0VVeFL8mXDeXiy vmurdo565oz4hDrUQ0g0mUs3cudUkkbo7SN4c92p5AeY0SmMvmH3R7BLpEBq7sty w6M3lzvbhhU+jJX1Jbq4fSZ+umibZkrIrHLSCnXDZYvdflRtGmhO3y2pM5G8Ghko Wv56+WwTy6Ecp8dDLG6yM9AXWMhwJjtWIMtJaVeGbUmW8DFoGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOljBPp5gffmBDeESUyTHJfDhEofMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmIzN2VmY2ItNzNiMC0z ZjU1LTg0MmMtOWFkODdhNjg1NzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzV5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6kKHMTwDPzBBIFZGL+eEp7yTT+FTS1zFGHyyFzdZQn05vBkbBd9XsE NQklH4o7+mEiextHGBSX4daABZtYmi7vI+rY13PeXPygkLGy8g3BahUb230IBEP+ wQ+Ivdiv7O3lif3eDu9ZmCX80NMNPHohwUXNydz39uWA/PO2gLHYmHm8z4Trrb0x x/+hOxXvVu5zH1N2d7paG7PTkKBeHF4l6AgJbcREDNg7RNGwL+7Ner0JYDbJvLt8 5cR5u2BFps6bsGMXhEd9qOhvHqvyMT8gCVBl2RTivYOMLqmFdkT6TdkOcFKY4GsG 66WKIXxF1HraPmow7cBDSXbyPhBJQlo= -----END CERTIFICATE-----Generated at Mon Oct 20 10:08:08 2025 by rpki-client