$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/c53cb806-27f4-343a-9db8-41d80aa3f46b.roa File: c53cb806-27f4-343a-9db8-41d80aa3f46b.roa (raw, json) Hash identifier: LhA8jyY79TA5fOC8NznN3YFvzmlHNbGH2qUL6Y8CJ50= Subject key identifier: B3:87:F3:C7:55:FD:EF:7E:73:31:8A:99:8D:BA:06:F5:60:20:22:96 Certificate issuer: /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c Certificate serial: 010D0C9F4328584BA39D286A09082CB915587500 Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/c53cb806-27f4-343a-9db8-41d80aa3f46b.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 399989 IP address blocks: 23.143.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:28:6a:09:08:2c:b9:15:58:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=5bc76c0e-7faa-4de7-aa25-65b7e2b3a32f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8f:4b:0e:26:60:8f:13:45:f2:ec:6b:54:33: 6f:b3:d2:4f:ad:b3:0f:5b:92:72:19:9a:61:e0:3c: 93:5b:11:73:07:c1:3a:59:50:3b:ad:95:5f:7f:a2: 3f:22:94:6e:74:7c:70:55:91:6a:2e:b7:c6:c1:15: b7:7c:43:2f:da:77:39:fc:e7:c2:ad:3b:97:c5:36: 41:a5:7c:5f:b0:cd:2d:c2:f7:18:82:ec:76:ba:b5: b0:ff:e1:ca:c1:39:82:69:05:ce:8a:31:b2:d2:12: f1:b4:39:8e:98:6d:aa:49:9d:93:3e:fc:65:b4:d6: 70:ed:3f:f9:bd:df:17:b6:e7:5d:e5:36:c4:ac:c0: fb:3f:bd:92:a4:24:1f:d9:20:f0:42:d5:83:17:a8: 10:61:c2:58:53:e6:2e:e1:2f:1a:0f:63:e4:d5:f8: b2:8f:8f:71:83:ed:6c:65:1b:85:ef:cc:1b:89:eb: 20:6f:9a:87:45:04:47:8a:f7:a8:30:44:af:0a:b3: 2c:19:16:2c:3f:c2:ca:a8:72:5b:d6:56:8b:08:85: c2:d2:5d:4f:a9:9e:5d:1d:c5:58:05:40:63:3c:c9: 82:01:1c:0f:94:13:62:fe:b8:6a:57:e2:b6:d0:eb: 0d:c2:66:e5:ea:e6:05:14:d5:7c:7d:12:d3:db:0f: 5b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:87:F3:C7:55:FD:EF:7E:73:31:8A:99:8D:BA:06:F5:60:20:22:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/c53cb806-27f4-343a-9db8-41d80aa3f46b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl X509v3 Authority Key Identifier: keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer sbgp-ipAddrBlock: critical IPv4: 23.143.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:12:72:e9:57:e9:1d:fa:70:09:cb:f5:64:d1:66:75:97:1d: d1:ea:b7:da:a5:76:e5:73:eb:9f:5a:55:5d:ce:1b:fe:16:19: ea:51:76:d0:bc:2e:75:97:8a:0d:e8:97:f7:7a:52:63:2e:45: 35:1e:d0:24:24:71:f5:ed:2e:7f:b6:78:52:51:1a:a8:63:8e: c5:55:20:f3:e5:79:a5:31:32:b4:29:f8:56:3d:02:f2:f0:d7: 09:ff:46:da:dc:2c:8c:be:43:b9:63:9a:0c:71:83:ac:5b:cc: 4c:88:ba:c5:9e:64:a6:c6:47:1c:c0:6c:3a:20:c3:10:61:bb: fb:5b:77:2e:ad:35:c5:64:10:c0:5a:a0:5f:a1:ad:68:ca:b9: 7d:37:5d:d6:2d:f6:e6:bb:9d:6f:b7:6d:0c:15:97:d1:75:04: f1:33:ea:0c:6f:8f:d8:67:8c:37:ab:fd:b4:83:a3:c8:60:93: 47:57:55:e0:78:1b:8d:ea:fe:98:34:73:1c:06:8c:9a:e6:15: 4f:fa:14:45:0a:a9:8c:90:b5:f1:8d:82:47:25:ad:21:01:63: e5:87:21:67:45:5e:9e:77:c8:b3:d2:a5:18:be:dd:f4:4c:e2: 53:93:05:63:77:56:4e:09:84:b4:2e:16:a7:63:5e:f8:4c:16: 20:e9:28:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnShqCQgsuRVYdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhM2I4YmEtYWM3ZS00ZTBlLTg5MWMtYWEyMGU1ZmU0 NDJjMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NWJjNzZjMGUtN2ZhYS00ZGU3LWFhMjUtNjViN2UyYjNhMzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY9LDiZgjxNF8uxrVDNvs9JPrbMPW5JyGZph 4DyTWxFzB8E6WVA7rZVff6I/IpRudHxwVZFqLrfGwRW3fEMv2nc5/OfCrTuXxTZB pXxfsM0twvcYgux2urWw/+HKwTmCaQXOijGy0hLxtDmOmG2qSZ2TPvxltNZw7T/5 vd8Xtudd5TbErMD7P72SpCQf2SDwQtWDF6gQYcJYU+Yu4S8aD2Pk1fiyj49xg+1s ZRuF78wbiesgb5qHRQRHiveoMESvCrMsGRYsP8LKqHJb1laLCIXC0l1PqZ5dHcVY BUBjPMmCARwPlBNi/rhqV+K20OsNwmbl6uYFFNV8fRLT2w9bVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOH88dV/e9+czGKmY26BvVgICKWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEz YjhiYS1hYzdlLTRlMGUtODkxYy1hYTIwZTVmZTQ0MmMvYzUzY2I4MDYtMjdmNC0z NDNhLTlkYjgtNDFkODBhYTNmNDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDlhM2I4YmEtYWM3ZS00ZTBlLTg5 MWMtYWEyMGU1ZmU0NDJjLzA5YTNiOGJhLWFjN2UtNGUwZS04OTFjLWFhMjBlNWZl NDQyYy5jcmwwHwYDVR0jBBgwFoAUxFLvKSfy7FpRPMFy1nO9HjkFlSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEzYjhiYS1hYzdlLTRlMGUtODkxYy1hYTIw ZTVmZTQ0MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF49oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEESculX6R36cAnL9WTRZnWXHdHqt9qlduVz659aVV3OG/4WGepRdtC8 LnWXig3ol/d6UmMuRTUe0CQkcfXtLn+2eFJRGqhjjsVVIPPleaUxMrQp+FY9AvLw 1wn/RtrcLIy+Q7ljmgxxg6xbzEyIusWeZKbGRxzAbDogwxBhu/tbdy6tNcVkEMBa oF+hrWjKuX03XdYt9ua7nW+3bQwVl9F1BPEz6gxvj9hnjDer/bSDo8hgk0dXVeB4 G43q/pg0cxwGjJrmFU/6FEUKqYyQtfGNgkclrSEBY+WHIWdFXp53yLPSpRi+3fRM 4lOTBWN3Vk4JhLQuFqdjXvhMFiDpKMA= -----END CERTIFICATE-----Generated at Thu Nov 6 00:23:26 2025 by rpki-client