$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f33459f8-870a-3523-b6bd-cfcbab57d805.roa File: f33459f8-870a-3523-b6bd-cfcbab57d805.roa (raw, json) Hash identifier: WToGqA1uE2BMY8qQutjdICg1Zom/Mi1QL+ls6XTgNq0= Subject key identifier: 32:1F:80:A5:A6:A1:18:DD:21:6E:85:B3:32:26:3B:A4:5B:F3:8A:22 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B59A1D1D0B719097A16485280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f33459f8-870a-3523-b6bd-cfcbab57d805.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.208.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:d1:d0:b7:19:09:7a:16:48:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=02a99937-2898-432b-9312-c8f42341de17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b6:06:67:cd:4d:26:63:7b:f4:41:4a:3d:31: 84:92:c1:0c:75:60:a2:b5:8b:34:59:49:a2:be:f9: 83:a0:83:49:a9:e8:54:5f:b2:9e:ac:22:4b:4a:39: 6c:74:7a:b8:67:ed:e6:36:0e:50:d8:16:f9:64:09: ba:50:a0:e0:7d:c6:92:d0:ee:e0:ae:83:e5:a3:23: 0a:1d:42:1a:6a:9e:4e:21:1f:47:0b:82:98:3d:65: 8d:ea:64:4d:37:e2:2e:24:44:c9:fb:02:27:01:1b: da:5e:9c:f3:ea:23:d2:62:92:48:df:4a:15:29:4a: fb:f7:2b:3b:b0:40:61:11:83:c8:74:3b:c4:2f:3a: 08:03:73:55:45:dd:e6:b3:46:73:ff:d7:3f:96:0b: d4:0f:12:2a:fc:c5:f1:eb:48:f8:d6:44:0c:5d:d9: 12:d3:a9:1c:33:92:69:f2:2a:5e:2c:4a:a1:7e:0d: 43:e8:8f:f5:22:d7:85:e7:78:73:67:88:d5:8a:a0: 7e:b1:a8:b3:cc:31:7b:2b:a3:7a:a0:c5:02:17:f5: fc:cf:0e:16:03:70:6c:7e:88:4a:c5:8a:63:e1:2b: 64:2e:8e:ac:ed:d7:ca:1e:15:f9:ad:f3:a9:06:31: fa:21:a6:57:9b:79:9f:51:c0:3f:2c:76:98:b8:fd: ec:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1F:80:A5:A6:A1:18:DD:21:6E:85:B3:32:26:3B:A4:5B:F3:8A:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f33459f8-870a-3523-b6bd-cfcbab57d805.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:7b:e0:55:a0:b4:18:c3:42:0d:38:4e:fe:21:55:17:73:51: b2:e9:c5:d2:d0:53:a6:29:2e:41:d5:67:47:0b:a4:21:eb:68: 9f:cf:b5:bb:dc:10:e6:93:bd:9a:cf:5d:6e:57:7d:ff:c0:44: 5e:3f:ac:8f:d5:bb:fa:c0:18:94:72:22:0c:72:50:c5:ed:d0: 3a:1a:23:e7:74:ef:37:80:d7:a7:23:df:44:49:81:9b:4d:7d: ba:9f:bf:0e:90:69:85:72:ff:d5:dc:f9:91:1a:80:9b:70:55: 0f:dd:28:79:ed:c5:02:24:50:fd:6d:24:3b:c1:bf:64:bd:e7: 4a:b4:4d:a5:d4:ca:d8:2b:8b:41:9e:8f:5a:51:f4:f0:23:85: 33:4e:49:81:28:6b:46:26:24:95:00:62:82:f8:7e:cc:36:e3: e2:ca:e2:bf:96:c2:cc:4b:06:12:99:ff:0c:78:d8:a6:92:ea: 4b:e6:d6:16:d8:85:dc:7b:19:a7:89:17:28:c5:fb:77:04:c8: c1:84:89:c5:9a:39:80:67:c8:10:77:67:52:90:4e:6c:2a:cd: 3a:5b:5a:9d:2b:3d:6b:e2:73:f3:80:db:6b:5b:9a:71:d7:96: aa:cd:c9:95:54:92:f9:13:dd:ee:d9:f1:b7:fb:1d:e7:80:4e: 44:41:9f:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtZodHQtxkJehZIUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk MDJhOTk5MzctMjg5OC00MzJiLTkzMTItYzhmNDIzNDFkZTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rYGZ81NJmN79EFKPTGEksEMdWCitYs0WUmi vvmDoINJqehUX7KerCJLSjlsdHq4Z+3mNg5Q2Bb5ZAm6UKDgfcaS0O7groPloyMK HUIaap5OIR9HC4KYPWWN6mRNN+IuJETJ+wInARvaXpzz6iPSYpJI30oVKUr79ys7 sEBhEYPIdDvELzoIA3NVRd3ms0Zz/9c/lgvUDxIq/MXx60j41kQMXdkS06kcM5Jp 8ipeLEqhfg1D6I/1IteF53hzZ4jViqB+saizzDF7K6N6oMUCF/X8zw4WA3BsfohK xYpj4StkLo6s7dfKHhX5rfOpBjH6IaZXm3mfUcA/LHaYuP3sqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIfgKWmoRjdIW6FszImO6Rb84oiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjMzNDU5ZjgtODcwYS0z NTIzLWI2YmQtY2ZjYmFiNTdkODA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9BWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJ74FWgtBjDQg04Tv4hVRdzUbLpxdLQU6YpLkHVZ0cLpCHraJ/Ptbvc EOaTvZrPXW5Xff/ARF4/rI/Vu/rAGJRyIgxyUMXt0DoaI+d07zeA16cj30RJgZtN fbqfvw6QaYVy/9Xc+ZEagJtwVQ/dKHntxQIkUP1tJDvBv2S950q0TaXUytgri0Ge j1pR9PAjhTNOSYEoa0YmJJUAYoL4fsw24+LK4r+WwsxLBhKZ/wx42KaS6kvm1hbY hdx7GaeJFyjF+3cEyMGEicWaOYBnyBB3Z1KQTmwqzTpbWp0rPWvic/OA22tbmnHX lqrNyZVUkvkT3e7Z8bf7HeeATkRBn6Q= -----END CERTIFICATE-----Generated at Mon Oct 20 02:36:31 2025 by rpki-client