$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f758e807-9155-3363-ae69-9b25b161770b.roa File: f758e807-9155-3363-ae69-9b25b161770b.roa (raw, json) Hash identifier: MS5S4rS1e1pfNKQYsGUqT+D8tbYYIJP2Q66gRqv0y84= Subject key identifier: 6D:7B:D9:A6:67:FD:8D:1C:30:DE:E1:70:0B:8D:0C:8D:EC:30:A9:06 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B3821AE4D9CCBD9B037F21180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f758e807-9155-3363-ae69-9b25b161770b.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.192.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:ae:4d:9c:cb:d9:b0:37:f2:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=a17de9f9-6302-4a62-a442-a97d6690cae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ac:8c:d0:cc:66:54:f8:ea:b3:70:4a:5a:e9: ec:95:ed:7e:14:72:3d:e6:32:71:48:28:b0:f2:1b: d4:79:46:63:93:53:8d:36:74:ff:8b:72:cc:f9:7e: 73:d5:5d:99:37:31:fb:2a:87:e2:df:b2:9e:33:20: 69:95:bd:01:c5:df:6a:46:b9:9e:73:89:1b:13:96: a8:fb:61:a2:0b:54:fc:9b:d5:b6:db:24:2e:05:9e: f2:e8:57:03:75:d3:a2:53:5c:b3:20:82:c2:8e:65: 6e:e3:02:99:a8:f9:81:0e:ce:92:5b:d0:35:bc:ea: 9f:3b:c3:e6:4e:64:1d:61:23:f1:fa:dc:6f:b4:6b: ce:05:67:70:58:ae:54:96:ae:fb:c5:af:75:45:ef: 86:54:77:dc:f3:2f:ca:35:b7:02:86:1e:7a:09:f0: 0f:81:66:ea:fb:c4:ff:3e:3d:ed:cd:b9:41:1d:c0: bb:da:cc:02:3b:33:13:6c:bd:ca:b7:a5:d6:23:9e: 74:ba:c7:ac:ac:51:5e:dc:d4:9d:5b:7f:20:cc:ab: af:80:d1:ab:ec:63:a3:16:e1:54:b8:31:3e:00:dd: 7c:30:b6:23:66:ed:4d:65:b0:98:5d:9d:54:2c:8f: 2c:01:c4:cd:1a:fe:3f:1a:b9:a5:f0:c0:ae:9c:67: 68:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:7B:D9:A6:67:FD:8D:1C:30:DE:E1:70:0B:8D:0C:8D:EC:30:A9:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f758e807-9155-3363-ae69-9b25b161770b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.192.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:d9:e4:cd:5c:aa:43:61:3d:d5:c4:03:7e:dd:2c:72:98:11: 17:48:51:2a:b7:08:bb:75:1b:46:1c:b0:d3:19:e1:c0:5d:6b: ec:a7:5b:80:71:06:72:1e:85:c4:29:cc:91:b1:19:05:ec:55: f7:79:1d:38:b9:2b:e8:3d:4e:96:83:6b:c4:a4:83:29:71:5d: b1:88:60:cf:a4:1b:97:ce:e7:fc:4b:23:57:a4:db:8a:55:25: b7:5b:ec:05:7d:ba:97:37:52:4e:c9:bb:2b:9e:9f:86:8d:7b: b2:57:c7:ef:1a:b3:2f:aa:84:61:d4:dd:e8:85:6a:62:f7:e7: c6:e4:4c:83:af:f5:21:f7:6c:a8:58:7d:b6:cc:bc:c8:44:f9: 4a:f6:b5:a1:9a:3c:97:45:d7:eb:be:b5:1e:89:a4:b8:0d:d6: c6:14:f6:b4:6f:87:f6:6e:1d:98:98:6e:ca:ab:17:00:f0:aa: 12:96:10:91:15:e7:7c:82:0d:e6:31:1a:1a:34:d4:1f:81:ad: 4d:70:30:d3:d9:51:5c:1c:ce:23:5c:22:f9:02:c9:ae:7c:ce: 81:64:3f:83:1e:52:cf:32:93:84:d7:e3:75:d4:35:76:33:5a: 73:73:d9:b4:53:70:b0:5a:d8:7a:0b:79:c9:78:f7:40:96:0a: 66:15:97:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4Ia5NnMvZsDfyEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk YTE3ZGU5ZjktNjMwMi00YTYyLWE0NDItYTk3ZDY2OTBjYWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqyM0MxmVPjqs3BKWunsle1+FHI95jJxSCiw 8hvUeUZjk1ONNnT/i3LM+X5z1V2ZNzH7Kofi37KeMyBplb0Bxd9qRrmec4kbE5ao +2GiC1T8m9W22yQuBZ7y6FcDddOiU1yzIILCjmVu4wKZqPmBDs6SW9A1vOqfO8Pm TmQdYSPx+txvtGvOBWdwWK5Ulq77xa91Re+GVHfc8y/KNbcChh56CfAPgWbq+8T/ Pj3tzblBHcC72swCOzMTbL3Kt6XWI550usesrFFe3NSdW38gzKuvgNGr7GOjFuFU uDE+AN18MLYjZu1NZbCYXZ1ULI8sAcTNGv4/Grml8MCunGdoMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG172aZn/Y0cMN7hcAuNDI3sMKkGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjc1OGU4MDctOTE1NS0z MzYzLWFlNjktOWIyNWIxNjE3NzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8CsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbZ5M1cqkNhPdXEA37dLHKYERdIUSq3CLt1G0YcsNMZ4cBda+ynW4Bx BnIehcQpzJGxGQXsVfd5HTi5K+g9TpaDa8SkgylxXbGIYM+kG5fO5/xLI1ek24pV Jbdb7AV9upc3Uk7Juyuen4aNe7JXx+8asy+qhGHU3eiFamL358bkTIOv9SH3bKhY fbbMvMhE+Ur2taGaPJdF1+u+tR6JpLgN1sYU9rRvh/ZuHZiYbsqrFwDwqhKWEJEV 53yCDeYxGho01B+BrU1wMNPZUVwcziNcIvkCya58zoFkP4MeUs8yk4TX43XUNXYz WnNz2bRTcLBa2HoLecl490CWCmYVl0U= -----END CERTIFICATE-----Generated at Mon Oct 20 02:43:25 2025 by rpki-client