$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d95a362-4da9-3abb-a605-f0a7233463f2.roa File: 1d95a362-4da9-3abb-a605-f0a7233463f2.roa (raw, json) Hash identifier: iTIlyaAhWdIXP/75voakR26neAAqgg4qX9CHYlvbgfw= Subject key identifier: 86:D9:A8:60:DF:1E:96:90:0A:11:3D:3E:A4:D1:E0:36:76:66:A0:E5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AFC1C17FEA228FB077A811780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d95a362-4da9-3abb-a605-f0a7233463f2.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.32.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:17:fe:a2:28:fb:07:7a:81:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=67a92b5b-6354-4d16-8050-f08da57cc9b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:09:c0:36:a4:28:4e:2c:5b:b4:bd:d8:d9:d8: 70:1e:73:80:bc:81:45:eb:71:16:ed:c0:1b:0b:c3: c8:f3:a3:1d:51:ff:27:f0:01:1f:c9:33:31:5b:7e: 63:4e:d9:b7:c6:b0:03:9b:4a:c4:9b:fc:af:62:38: e0:00:bb:7f:88:20:bc:8c:cd:e4:ad:5a:90:f7:4f: c2:b5:5d:55:b0:cf:17:99:dc:b2:94:64:ac:2c:1b: ef:3e:ac:34:4c:99:74:89:d4:9d:a7:d2:d1:c9:1a: ed:6a:76:28:20:ae:dc:8e:80:3e:4f:cd:63:1e:62: d4:3a:76:b0:8c:ea:02:0a:fa:fe:ef:a2:67:fb:95: 8b:76:98:fd:34:f8:8d:fc:24:2a:eb:bc:b1:30:91: af:8d:80:1b:57:bc:28:e1:93:0e:a0:00:ea:fa:6d: 81:a0:03:60:a0:cd:f6:fe:66:ec:49:aa:c6:23:d7: d7:36:df:4e:a4:8f:b5:0d:f3:96:6b:2f:e2:c5:92: 99:98:39:d9:21:e2:26:16:bf:69:1c:cf:5c:13:17: 04:14:48:56:7c:4a:e2:78:4f:04:9c:36:1c:f6:c0: 53:51:07:bd:49:f2:61:d4:47:4e:5d:96:0b:09:b7: dc:7b:13:5b:59:01:a5:2e:95:70:33:6a:60:8a:4e: 75:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D9:A8:60:DF:1E:96:90:0A:11:3D:3E:A4:D1:E0:36:76:66:A0:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d95a362-4da9-3abb-a605-f0a7233463f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:8c:b9:ac:64:63:eb:00:4c:f6:79:1c:20:ca:bd:fd:4c:ab: 86:1d:43:ad:8f:1e:1a:f4:7b:90:b4:16:27:43:d9:60:e7:74: e3:f8:f9:ea:b5:07:0a:36:b0:b4:bf:7d:ef:0d:85:19:12:65: 2b:13:38:cb:bf:07:33:e9:d2:15:45:3a:5e:0c:d7:de:97:cf: 10:31:55:53:86:b1:85:01:c9:97:1e:61:4c:dc:b2:79:9c:6b: d9:b5:ef:26:6f:0c:9a:e2:31:a1:6b:a0:92:85:61:b0:c1:2c: c4:8a:f5:a5:b6:ab:66:ab:7b:d3:7f:d1:46:46:5c:3c:65:bf: 33:cc:87:98:e4:86:f6:47:07:28:63:9d:47:9f:66:62:5c:a9: c2:e4:ce:d3:36:a9:fa:1e:54:3f:11:b0:ec:26:75:90:e2:f9: f1:76:db:a4:4a:1f:de:ba:0f:9d:f7:55:01:0e:cd:fa:e9:ee: f2:a5:9e:40:5a:e4:c7:f0:3e:31:c0:4c:b1:22:0f:51:98:b1: 03:c8:ae:a0:74:7c:32:c5:70:57:92:7a:f1:02:62:7c:eb:c4: 29:ea:6e:0d:c1:c9:69:20:54:14:50:87:03:61:f1:c2:25:e4: 29:bb:55:de:44:b6:e1:e4:51:37:5e:00:96:31:0c:87:c1:f6: 6a:af:0e:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HBf+oij7B3qBF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NjdhOTJiNWItNjM1NC00ZDE2LTgwNTAtZjA4ZGE1N2NjOWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwnANqQoTixbtL3Y2dhwHnOAvIFF63EW7cAb C8PI86MdUf8n8AEfyTMxW35jTtm3xrADm0rEm/yvYjjgALt/iCC8jM3krVqQ90/C tV1VsM8XmdyylGSsLBvvPqw0TJl0idSdp9LRyRrtanYoIK7cjoA+T81jHmLUOnaw jOoCCvr+76Jn+5WLdpj9NPiN/CQq67yxMJGvjYAbV7wo4ZMOoADq+m2BoANgoM32 /mbsSarGI9fXNt9OpI+1DfOWay/ixZKZmDnZIeImFr9pHM9cExcEFEhWfErieE8E nDYc9sBTUQe9SfJh1EdOXZYLCbfcexNbWQGlLpVwM2pgik51TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbZqGDfHpaQChE9PqTR4DZ2ZqDlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWQ5NWEzNjItNGRhOS0z YWJiLWE2MDUtZjBhNzIzMzQ2M2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImMuaxkY+sATPZ5HCDKvf1Mq4YdQ62PHhr0e5C0FidD2WDndOP4+eq1 Bwo2sLS/fe8NhRkSZSsTOMu/BzPp0hVFOl4M196XzxAxVVOGsYUByZceYUzcsnmc a9m17yZvDJriMaFroJKFYbDBLMSK9aW2q2are9N/0UZGXDxlvzPMh5jkhvZHByhj nUefZmJcqcLkztM2qfoeVD8RsOwmdZDi+fF226RKH966D533VQEOzfrp7vKlnkBa 5MfwPjHATLEiD1GYsQPIrqB0fDLFcFeSevECYnzrxCnqbg3ByWkgVBRQhwNh8cIl 5Cm7Vd5EtuHkUTdeAJYxDIfB9mqvDi8= -----END CERTIFICATE-----Generated at Tue Nov 4 20:56:27 2025 by rpki-client