$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1629e28-a0f8-3f38-802b-16cbedcf6646.roa File: d1629e28-a0f8-3f38-802b-16cbedcf6646.roa (raw, json) Hash identifier: DNfJxgeteGBdPctpaq1BM6y5IBeQky9N8dvI3rkrg4U= Subject key identifier: 16:85:63:3E:FD:A3:00:3C:D3:95:9E:2F:01:1A:A4:C3:09:A1:1C:6E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E205952308D5BC56922E40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1629e28-a0f8-3f38-802b-16cbedcf6646.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.203.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:05:95:23:08:d5:bc:56:92:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=a847ab20-e9c6-4453-b609-2148ee905691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6a:e0:76:f3:1d:25:0c:34:96:9a:d8:f7:cb: bb:00:2a:cf:c9:7d:b2:fc:6d:a1:4e:c1:f8:bc:a4: 07:67:be:5f:21:35:46:b2:cf:e8:68:c3:c9:9a:f0: c8:4f:40:ab:98:86:cb:64:a7:bd:fe:1d:2c:2e:b0: f6:85:62:90:dc:b5:74:fb:b5:07:25:83:06:9e:62: 6f:35:85:2f:3d:b6:6c:c3:31:df:62:87:e8:d3:e0: 85:06:a0:f4:08:d9:d0:20:9d:69:a8:0c:41:1f:5b: f0:43:62:90:02:14:ec:52:f1:97:d1:41:88:7f:de: 15:f0:c0:b1:e7:1b:4d:ca:e4:f8:f0:69:34:d0:9e: c2:57:9b:ba:10:0b:6a:b4:04:56:f8:7b:e1:9f:be: e1:48:45:b5:6c:52:f1:a9:3f:b6:d1:8e:73:c5:e8: 1b:d6:b8:fa:10:93:d2:3a:b9:09:c8:c4:c3:76:de: 23:58:5c:27:ae:fe:b6:58:59:71:f7:16:12:c1:b3: 29:35:f3:3c:10:06:76:30:c8:39:0d:15:94:a4:bc: 1b:63:75:03:cc:21:8c:3e:d7:6d:db:50:78:02:1e: 39:66:50:d6:e1:20:29:c8:36:72:48:3b:2a:46:f7: 1c:62:cb:dc:72:68:cd:04:3f:45:3f:da:b6:e6:35: 1b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:85:63:3E:FD:A3:00:3C:D3:95:9E:2F:01:1A:A4:C3:09:A1:1C:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1629e28-a0f8-3f38-802b-16cbedcf6646.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:c4:0b:05:f3:86:7a:77:5e:28:68:31:30:87:b2:f4:f8:74: 3f:33:b4:dd:04:f4:ec:bf:fb:6c:a3:8d:13:e8:ee:65:49:ca: 22:71:78:39:d9:16:09:68:d6:85:fe:3b:cc:ef:de:63:b6:2a: 9b:38:e9:60:92:64:ee:b7:d5:a9:53:e7:26:2e:05:15:f2:73: 58:c2:1f:31:cd:72:09:64:6c:ac:50:f6:4c:e8:13:32:3f:3f: 44:16:63:92:94:63:9e:d6:01:a8:4d:bb:0b:73:11:a8:32:40: 7f:83:a5:21:6f:99:5c:a7:8e:0d:86:bc:71:dd:74:df:7b:81: 16:59:96:90:9b:a8:8f:8c:53:e5:b1:9b:02:ec:42:43:b2:6f: e5:16:d2:2c:a7:6d:6f:8f:69:1f:61:0c:a6:91:17:85:bc:2c: f2:9e:2b:4c:ec:9c:d3:5d:aa:74:bc:05:f5:b2:03:59:64:4a: cf:2a:3a:97:fd:71:9e:44:ed:bc:df:d6:51:04:db:ff:52:c1: 13:c8:73:05:a9:c4:5e:06:2e:fb:3e:65:ea:f5:ed:cb:b9:ff: b6:33:df:6f:a3:09:91:01:ee:ee:de:62:ea:8b:2f:d5:21:13: e4:3a:d1:7c:ff:7c:07:3b:93:c1:1e:df:8f:07:d7:8e:52:61: 4e:58:14:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4gWVIwjVvFaSLkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YTg0N2FiMjAtZTljNi00NDUzLWI2MDktMjE0OGVlOTA1NjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42rgdvMdJQw0lprY98u7ACrPyX2y/G2hTsH4 vKQHZ75fITVGss/oaMPJmvDIT0CrmIbLZKe9/h0sLrD2hWKQ3LV0+7UHJYMGnmJv NYUvPbZswzHfYofo0+CFBqD0CNnQIJ1pqAxBH1vwQ2KQAhTsUvGX0UGIf94V8MCx 5xtNyuT48Gk00J7CV5u6EAtqtARW+Hvhn77hSEW1bFLxqT+20Y5zxegb1rj6EJPS OrkJyMTDdt4jWFwnrv62WFlx9xYSwbMpNfM8EAZ2MMg5DRWUpLwbY3UDzCGMPtdt 21B4Ah45ZlDW4SApyDZySDsqRvccYsvccmjNBD9FP9q25jUbNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaFYz79owA805WeLwEapMMJoRxuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDE2MjllMjgtYTBmOC0z ZjM4LTgwMmItMTZjYmVkY2Y2NjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8vAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3ECwXzhnp3XihoMTCHsvT4dD8ztN0E9Oy/+2yjjRPo7mVJyiJxeDnZ Fglo1oX+O8zv3mO2Kps46WCSZO631alT5yYuBRXyc1jCHzHNcglkbKxQ9kzoEzI/ P0QWY5KUY57WAahNuwtzEagyQH+DpSFvmVynjg2GvHHddN97gRZZlpCbqI+MU+Wx mwLsQkOyb+UW0iynbW+PaR9hDKaRF4W8LPKeK0zsnNNdqnS8BfWyA1lkSs8qOpf9 cZ5E7bzf1lEE2/9SwRPIcwWpxF4GLvs+Zer17cu5/7Yz32+jCZEB7u7eYuqLL9Uh E+Q60Xz/fAc7k8Ee348H145SYU5YFNs= -----END CERTIFICATE-----Generated at Mon Oct 20 07:23:09 2025 by rpki-client