$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9eb7404-9118-302b-90c7-8a314e8e84b0.roa File: f9eb7404-9118-302b-90c7-8a314e8e84b0.roa (raw, json) Hash identifier: q5cvnO8LVk210t9ssfzhQlVjHg91hsM3QpqteftyJ0I= Subject key identifier: 48:31:D0:89:40:69:94:4C:CD:EF:C3:0B:90:AB:A4:82:20:AD:05:64 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E20E1634335C375549DF40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9eb7404-9118-302b-90c7-8a314e8e84b0.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.203.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:0e:16:34:33:5c:37:55:49:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=2e9f2f1b-1e23-47ca-9b6d-3765868b17dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:12:0f:ec:ff:14:ff:eb:37:49:d7:58:ce:a6: 98:bb:f6:ae:a6:72:09:35:0f:b3:39:44:86:88:ac: d3:c3:e4:49:5a:a8:24:d0:03:f3:f5:1e:07:c5:bd: 6f:39:20:cc:af:68:aa:2f:51:f5:9a:2c:a1:52:dd: 69:af:cb:c8:37:32:50:86:c7:4c:11:a0:eb:a0:d8: d8:b4:22:d8:3d:b4:3c:7b:6b:36:c6:24:d1:7d:9e: ab:ed:68:75:a7:29:c2:bf:3e:5e:2e:c8:8f:32:7b: d6:1a:bf:a1:82:df:ee:51:66:51:3d:6a:4b:f1:29: e7:c4:20:ce:fb:c9:4e:47:fc:1e:71:51:3d:94:d2: c1:16:93:16:01:5d:c1:d0:f0:54:52:d3:34:f5:66: 31:cb:15:38:ef:e3:81:1d:39:37:ff:5b:65:40:b6: ba:a4:5e:5e:34:68:c0:cc:78:cc:d3:6e:15:8d:ab: 3a:0e:8d:d4:f9:95:52:27:8e:5b:83:61:e2:52:7d: c3:e5:9d:44:02:e8:c0:b1:fc:3f:23:ac:67:8e:a7: e5:e1:97:d8:a1:e7:58:a3:54:b2:d8:2f:5b:31:d2: 74:2c:b7:d9:78:8b:ba:1b:b0:65:41:f9:59:3d:fa: cf:c6:f5:41:7e:13:35:c6:24:27:fa:a3:42:15:fd: 29:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:31:D0:89:40:69:94:4C:CD:EF:C3:0B:90:AB:A4:82:20:AD:05:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9eb7404-9118-302b-90c7-8a314e8e84b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:12:48:44:8f:01:51:25:31:3a:97:b5:b8:4d:31:6d:7a:29: 2a:c6:e5:0b:5e:73:8d:6d:19:c2:b2:e2:fa:c7:42:23:46:87: 3e:46:42:4d:bd:f2:9c:c8:bc:98:ff:0e:a7:25:ae:c8:ad:4d: c2:01:be:7d:9d:53:85:26:f6:22:73:ff:aa:92:8f:f0:bc:b7: 85:bd:09:ac:37:78:38:a7:5f:17:0e:ac:f8:3e:d1:0c:bc:06: bd:6c:09:b4:f4:21:2e:64:dd:e4:d4:94:ec:80:31:92:9f:ea: 8c:c3:4a:fd:96:b1:7a:5c:50:e0:f5:0e:15:0d:3e:dc:8e:e9: e0:64:4e:59:4a:d2:5f:9e:f1:7e:71:fd:33:81:af:a5:57:92: 4e:54:43:b3:ee:03:64:6e:50:d5:1e:ab:b5:3d:b5:44:4c:9c: 54:52:ba:2e:90:bd:01:df:e7:04:0b:e5:15:23:3e:5a:20:35: 1e:2d:ef:30:a8:e0:a7:de:fa:94:0e:9f:be:d3:7a:f1:e1:b9: b3:fc:27:bb:83:3f:74:f4:87:3a:38:ba:81:04:1f:66:05:95: 48:4f:f2:78:0a:33:68:e6:e5:1c:8f:55:1b:71:fa:a3:22:56: 74:b1:9a:2d:ee:23:2c:ac:03:f1:5d:06:7e:47:94:9f:9c:11: f2:0a:dc:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4g4WNDNcN1VJ30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MmU5ZjJmMWItMWUyMy00N2NhLTliNmQtMzc2NTg2OGIxN2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBIP7P8U/+s3SddYzqaYu/aupnIJNQ+zOUSG iKzTw+RJWqgk0APz9R4Hxb1vOSDMr2iqL1H1miyhUt1pr8vINzJQhsdMEaDroNjY tCLYPbQ8e2s2xiTRfZ6r7Wh1pynCvz5eLsiPMnvWGr+hgt/uUWZRPWpL8SnnxCDO +8lOR/wecVE9lNLBFpMWAV3B0PBUUtM09WYxyxU47+OBHTk3/1tlQLa6pF5eNGjA zHjM024Vjas6Do3U+ZVSJ45bg2HiUn3D5Z1EAujAsfw/I6xnjqfl4ZfYoedYo1Sy 2C9bMdJ0LLfZeIu6G7BlQflZPfrPxvVBfhM1xiQn+qNCFf0pfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgx0IlAaZRMze/DC5CrpIIgrQVkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjllYjc0MDQtOTExOC0z MDJiLTkwYzctOGEzMTRlOGU4NGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8t4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0SSESPAVElMTqXtbhNMW16KSrG5Qtec41tGcKy4vrHQiNGhz5GQk29 8pzIvJj/DqclrsitTcIBvn2dU4Um9iJz/6qSj/C8t4W9Caw3eDinXxcOrPg+0Qy8 Br1sCbT0IS5k3eTUlOyAMZKf6ozDSv2WsXpcUOD1DhUNPtyO6eBkTllK0l+e8X5x /TOBr6VXkk5UQ7PuA2RuUNUeq7U9tURMnFRSui6QvQHf5wQL5RUjPlogNR4t7zCo 4Kfe+pQOn77TevHhubP8J7uDP3T0hzo4uoEEH2YFlUhP8ngKM2jm5RyPVRtx+qMi VnSxmi3uIyysA/FdBn5HlJ+cEfIK3LA= -----END CERTIFICATE-----Generated at Mon Oct 20 07:22:21 2025 by rpki-client