$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9f3ced6-d4ef-3297-b890-7b65f9d6911e.roa File: f9f3ced6-d4ef-3297-b890-7b65f9d6911e.roa (raw, json) Hash identifier: Da87hacfBZa1bP+HXF6gz+1hVOwhM8EMpqZHO3F8JuA= Subject key identifier: 82:F8:19:2A:AA:4E:AC:37:72:A2:92:B5:FB:28:BD:38:CC:62:9F:10 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF7EBE5048FEAD08594A8E080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9f3ced6-d4ef-3297-b890-7b65f9d6911e.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.4.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:e5:04:8f:ea:d0:85:94:a8:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=3cbda8a8-0620-4ead-b121-bd3bfe2f7843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:af:dc:ee:06:b0:87:09:cc:02:6a:6a:6a:e0: 31:6d:6c:3e:8e:eb:f4:98:fc:83:94:6f:42:7b:70: d1:14:70:41:39:59:ed:19:cb:13:87:eb:ef:58:86: cc:c8:9b:d5:d2:14:a3:8f:63:94:20:76:82:74:4e: 2f:45:f7:8d:ff:5f:3d:b6:1b:8c:b4:57:2c:b5:4f: db:ef:e4:ab:a7:e2:60:62:d0:58:38:ee:d5:77:d1: 10:8b:60:0a:0e:d3:e5:a8:35:17:25:5d:48:b3:3b: 78:46:1c:3d:26:b7:16:46:de:5c:7c:81:f2:15:9c: a4:65:75:27:17:3e:6a:d3:d0:66:2d:5b:21:c4:7c: a9:27:a0:73:7a:a4:34:e2:27:2a:8c:69:1c:be:31: 6d:6c:10:b7:68:ea:fd:b1:95:8d:ba:5f:65:fb:b8: b9:28:6c:a5:2a:4d:ce:c1:62:37:9f:a4:d1:48:1d: c4:98:94:8c:4c:aa:3f:1c:71:cc:2e:9c:04:98:13: c1:a4:0c:65:1b:7d:4f:7f:aa:02:6e:bc:53:2d:3b: 38:28:95:52:f9:a3:e2:33:77:92:87:3a:bc:79:b9: 5d:93:ca:09:04:cb:8b:63:94:75:3b:5a:90:d3:58: 04:88:d8:11:58:78:e1:49:2c:8e:1d:ae:97:59:37: e0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F8:19:2A:AA:4E:AC:37:72:A2:92:B5:FB:28:BD:38:CC:62:9F:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9f3ced6-d4ef-3297-b890-7b65f9d6911e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.4.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:14:4c:ae:f2:5c:fe:86:31:e7:f6:45:a3:02:a1:68:2c:b6: 40:6f:67:1c:aa:53:47:d3:d1:59:f4:02:3e:41:a4:a3:20:83: 39:df:de:67:a8:4a:ac:b3:96:c6:7e:cc:91:2b:0e:7d:46:ab: 03:be:04:c9:24:8d:8c:c9:be:0d:8e:f8:09:df:13:19:b2:18: 8e:ce:05:ac:24:97:9d:57:d1:6d:ef:29:1b:2d:42:e8:c0:62: 76:08:32:a0:b8:c0:ea:78:37:44:4b:4f:fb:3b:b2:7d:4b:af: d4:83:40:84:95:c5:83:2c:d8:e9:d7:4d:af:d0:d0:4c:de:19: 07:8a:17:f0:4f:36:ad:b5:20:e6:53:e4:a3:28:7b:00:96:99: 42:82:6e:44:e7:96:38:d5:6e:4f:a6:13:88:e8:6c:a8:85:51: 48:b4:07:2b:56:a2:34:6d:eb:61:80:6b:5b:a4:78:e3:fc:58: 4e:fc:2e:ac:68:00:91:a0:ff:a5:ce:bc:d3:9e:7f:59:ea:e4: dc:f8:30:ea:0f:05:b5:70:b2:63:b9:ce:72:17:c7:51:b4:a9: 17:c6:3e:49:1d:c8:85:f2:f9:09:af:7b:98:c8:ec:6c:66:41: 88:94:92:b1:23:a9:44:f2:c3:79:f5:6c:f8:9b:eb:f6:09:53: 54:99:a4:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr36+UEj+rQhZSo4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk M2NiZGE4YTgtMDYyMC00ZWFkLWIxMjEtYmQzYmZlMmY3ODQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa/c7gawhwnMAmpqauAxbWw+juv0mPyDlG9C e3DRFHBBOVntGcsTh+vvWIbMyJvV0hSjj2OUIHaCdE4vRfeN/189thuMtFcstU/b 7+Srp+JgYtBYOO7Vd9EQi2AKDtPlqDUXJV1Iszt4Rhw9JrcWRt5cfIHyFZykZXUn Fz5q09BmLVshxHypJ6BzeqQ04icqjGkcvjFtbBC3aOr9sZWNul9l+7i5KGylKk3O wWI3n6TRSB3EmJSMTKo/HHHMLpwEmBPBpAxlG31Pf6oCbrxTLTs4KJVS+aPiM3eS hzq8ebldk8oJBMuLY5R1O1qQ01gEiNgRWHjhSSyOHa6XWTfg/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIL4GSqqTqw3cqKStfsovTjMYp8QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjlmM2NlZDYtZDRlZi0z Mjk3LWI4OTAtN2I2NWY5ZDY5MTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwRdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYUTK7yXP6GMef2RaMCoWgstkBvZxyqU0fT0Vn0Aj5BpKMggznf3meo SqyzlsZ+zJErDn1GqwO+BMkkjYzJvg2O+AnfExmyGI7OBawkl51X0W3vKRstQujA YnYIMqC4wOp4N0RLT/s7sn1Lr9SDQISVxYMs2OnXTa/Q0EzeGQeKF/BPNq21IOZT 5KMoewCWmUKCbkTnljjVbk+mE4jobKiFUUi0BytWojRt62GAa1ukeOP8WE78Lqxo AJGg/6XOvNOef1nq5Nz4MOoPBbVwsmO5znIXx1G0qRfGPkkdyIXy+Qmve5jI7Gxm QYiUkrEjqUTyw3n1bPib6/YJU1SZpDM= -----END CERTIFICATE-----Generated at Mon Oct 20 00:28:08 2025 by rpki-client