$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf2812d8-2207-3975-bce2-e928190a6c96.roa File: cf2812d8-2207-3975-bce2-e928190a6c96.roa (raw, json) Hash identifier: Uyx7PMSEOT+ipvo7Ipzj6aD/Z32qCsmGNQzMEc7OJaQ= Subject key identifier: F4:20:05:B9:52:14:C5:C4:54:63:6E:1A:09:0A:75:E3:08:2E:84:7C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E20D0F50FEF4D7B8F64600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf2812d8-2207-3975-bce2-e928190a6c96.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.202.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:0d:0f:50:fe:f4:d7:b8:f6:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=09aea08a-53b0-439a-83f6-f91c5b55e758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9d:96:cf:64:97:bd:c0:28:8d:c9:a0:a5:7d: 93:7f:53:9e:1c:07:06:2c:2b:03:67:0c:8c:ae:97: d0:4a:84:80:a4:c5:6f:38:89:02:7d:44:45:55:f8: df:61:02:62:02:29:f7:6a:68:9e:a0:e4:84:c7:56: 01:ee:7e:23:0c:cc:08:27:ee:17:8c:d8:d6:f2:13: 64:52:ee:e3:73:28:48:6f:59:9f:70:98:4a:4d:b1: b6:5f:b4:5f:34:93:d4:27:23:96:5a:6a:c6:e3:69: 71:7e:bf:19:f0:b4:94:3b:f7:9c:07:13:20:7a:d4: e4:8c:5e:a1:2b:db:53:1e:14:02:d1:6b:f3:8b:15: ad:66:8c:28:39:dc:32:3f:c8:d0:e9:c9:d7:5b:40: 37:ce:29:ef:22:82:43:1f:4e:de:ad:f2:f8:b7:16: 46:af:be:9d:6b:84:6a:cb:c5:91:0f:77:88:66:bf: aa:93:f8:0c:71:9f:36:88:a5:07:59:8c:09:cd:22: f5:42:1d:f1:e8:38:54:e5:6c:7f:10:36:cc:d5:20: 34:b2:4c:e6:54:cc:e7:56:f4:29:09:21:1f:f8:d5: 4b:44:f7:44:27:47:1a:d1:5b:d1:af:5f:5f:1b:a0: f9:db:84:30:c6:8e:73:03:9c:ea:27:c0:cb:fe:fa: 21:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:20:05:B9:52:14:C5:C4:54:63:6E:1A:09:0A:75:E3:08:2E:84:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf2812d8-2207-3975-bce2-e928190a6c96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:d4:67:40:08:bf:10:a0:31:d8:00:78:a7:10:32:6f:e4:f4: df:f0:a0:ae:d3:ae:b5:35:d9:a0:5a:ca:94:7f:7a:8b:50:1f: 0e:60:73:0a:40:3a:5f:40:78:1e:70:6b:0d:2f:2e:70:08:ee: 6d:15:06:48:7d:dc:8a:d2:fe:8b:e8:c8:ff:8a:27:b8:ff:22: cf:9c:f5:43:df:05:bf:40:8e:32:01:fb:50:7c:e8:50:33:96: 5b:b6:67:7d:b3:95:1c:13:d5:5d:4e:b4:c7:53:c9:e3:d6:19: 37:25:3f:51:98:83:4b:82:bc:f9:25:7c:8f:16:c9:a4:48:48: b2:a8:ee:07:96:33:ab:41:73:d9:86:88:4f:18:8d:f5:83:eb: cb:3f:af:25:b4:55:00:00:63:95:3d:78:9d:d1:0b:ec:66:83: e9:af:25:53:65:d5:f2:ea:9d:78:07:41:39:9d:d8:8a:85:e2: d9:62:7c:d5:f3:52:ab:91:ac:10:79:fa:74:4c:1c:21:7f:b0: a8:fb:1d:54:f3:2a:d3:8e:d0:91:6e:18:01:fa:07:c2:68:d2: 44:11:c0:38:9a:85:36:81:01:e5:9e:19:30:ae:d1:cd:1d:64: 64:95:ca:50:6f:7e:89:38:c8:82:27:f6:86:bc:5e:38:c6:2c: b2:f1:59:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4g0PUP7017j2RgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MDlhZWEwOGEtNTNiMC00MzlhLTgzZjYtZjkxYzViNTVlNzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp2Wz2SXvcAojcmgpX2Tf1OeHAcGLCsDZwyM rpfQSoSApMVvOIkCfURFVfjfYQJiAin3amieoOSEx1YB7n4jDMwIJ+4XjNjW8hNk Uu7jcyhIb1mfcJhKTbG2X7RfNJPUJyOWWmrG42lxfr8Z8LSUO/ecBxMgetTkjF6h K9tTHhQC0WvzixWtZowoOdwyP8jQ6cnXW0A3zinvIoJDH07erfL4txZGr76da4Rq y8WRD3eIZr+qk/gMcZ82iKUHWYwJzSL1Qh3x6DhU5Wx/EDbM1SA0skzmVMznVvQp CSEf+NVLRPdEJ0ca0VvRr19fG6D524Qwxo5zA5zqJ8DL/vohswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQgBblSFMXEVGNuGgkKdeMILoR8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2YyODEyZDgtMjIwNy0z OTc1LWJjZTItZTkyODE5MGE2Yzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8qgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/UZ0AIvxCgMdgAeKcQMm/k9N/woK7TrrU12aBaypR/eotQHw5gcwpA Ol9AeB5waw0vLnAI7m0VBkh93IrS/ovoyP+KJ7j/Is+c9UPfBb9AjjIB+1B86FAz llu2Z32zlRwT1V1OtMdTyePWGTclP1GYg0uCvPklfI8WyaRISLKo7geWM6tBc9mG iE8YjfWD68s/ryW0VQAAY5U9eJ3RC+xmg+mvJVNl1fLqnXgHQTmd2IqF4tlifNXz UquRrBB5+nRMHCF/sKj7HVTzKtOO0JFuGAH6B8Jo0kQRwDiahTaBAeWeGTCu0c0d ZGSVylBvfok4yIIn9oa8XjjGLLLxWco= -----END CERTIFICATE-----Generated at Mon Oct 20 02:35:22 2025 by rpki-client