$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2851886f-cac6-34bd-8e75-56d47090f207.roa File: 2851886f-cac6-34bd-8e75-56d47090f207.roa (raw, json) Hash identifier: PC249AgvFEZSY3+p5kgnhmpZE/rSH9qNqh8lcXbNXrk= Subject key identifier: A0:DB:27:CB:A0:C7:4A:33:57:C8:21:81:B0:EE:35:30:1F:7F:61:0A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B477C939EC2432079CE6D2C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2851886f-cac6-34bd-8e75-56d47090f207.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 20940 IP address blocks: 23.201.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:93:9e:c2:43:20:79:ce:6d:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=7399473b-988f-4e50-8da3-5005bb8b337b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c7:09:57:5e:f0:e5:24:d2:65:4c:f6:07:40: e3:25:9d:29:24:97:bd:c1:47:a4:5f:66:72:da:13: 12:0f:55:c7:33:eb:c3:43:3d:d6:1c:8c:24:6f:b9: bb:4b:dc:11:a4:ae:97:42:a8:38:86:6a:e2:68:b3: c1:0b:4c:4a:5f:a1:22:2b:da:45:3c:8e:76:ef:42: 36:b7:11:29:0c:91:c8:5f:d3:c9:6b:e7:69:c7:7b: a2:33:10:43:a8:dc:60:cc:2d:06:99:c4:84:c9:93: de:92:f9:45:1c:92:75:96:2c:8a:98:29:6f:39:ce: 1d:2f:c7:81:ce:a1:82:7c:9d:50:ac:a1:ee:4b:f1: 2c:61:43:ac:82:64:ed:96:2b:ff:9d:05:5a:98:18: b5:72:bd:9b:3f:56:48:85:3e:ef:5a:7c:7c:0e:1d: 72:c7:e3:52:ab:d5:bd:c4:4c:50:2e:b7:6a:c1:f7: d9:6d:45:db:9b:5d:6a:e4:fa:2f:6d:07:f8:4a:bc: 0c:f4:17:0e:6e:4e:ec:a5:d8:07:87:ba:2b:b6:54: 42:57:e3:fc:60:53:bf:ed:10:98:b6:e3:06:c7:25: 1f:54:45:db:4c:61:5e:c4:1d:db:49:1e:83:25:6c: 49:dd:fe:42:6e:52:01:b4:5b:b4:a6:ea:06:a3:13: 37:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DB:27:CB:A0:C7:4A:33:57:C8:21:81:B0:EE:35:30:1F:7F:61:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2851886f-cac6-34bd-8e75-56d47090f207.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:66:5e:56:28:f0:39:62:a7:b1:5f:d5:0a:f1:52:3b:7d:5e: 6d:9f:b4:ae:a8:c9:de:8d:90:fd:f1:57:40:03:b9:e5:4d:fb: 38:9d:2d:fb:c9:35:03:4c:7a:6d:70:bf:9b:e7:a1:b7:ea:3a: b1:42:95:d5:ae:9f:cb:74:d3:fb:c2:15:9a:3f:5a:a5:44:e2: f1:15:c7:b6:5c:b0:5c:7e:d0:92:f5:20:70:c6:9c:66:8b:3b: 82:7b:f8:99:41:8a:3d:50:b7:50:eb:0e:d1:81:bc:25:35:a8: 35:4f:3a:5c:de:7a:09:75:5d:39:3d:ff:a3:e1:f4:4b:6d:2b: f2:bf:0f:6e:11:2a:37:9d:9d:9e:7a:b9:52:f9:b9:b1:93:41: e8:a8:26:fd:2f:c0:de:06:d1:f6:64:80:10:e0:b6:35:b3:da: 46:bc:a0:cf:76:fd:f7:59:38:87:a7:23:45:a7:29:9f:75:0e: cd:3d:c4:cf:ba:a1:9d:44:bd:6f:e5:1a:25:fd:62:24:b6:7e: a8:c4:71:b7:59:36:57:50:5b:e2:a2:9a:d4:a4:07:a6:6b:bc: ed:46:af:72:f0:83:fb:a8:34:c6:f6:95:ac:0f:16:bf:84:de: 19:f8:37:fb:20:9d:4f:30:90:2d:45:87:47:5d:df:25:ab:83: cc:ed:f6:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfJOewkMgec5tLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk NzM5OTQ3M2ItOTg4Zi00ZTUwLThkYTMtNTAwNWJiOGIzMzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58cJV17w5STSZUz2B0DjJZ0pJJe9wUekX2Zy 2hMSD1XHM+vDQz3WHIwkb7m7S9wRpK6XQqg4hmriaLPBC0xKX6EiK9pFPI5270I2 txEpDJHIX9PJa+dpx3uiMxBDqNxgzC0GmcSEyZPekvlFHJJ1liyKmClvOc4dL8eB zqGCfJ1QrKHuS/EsYUOsgmTtliv/nQVamBi1cr2bP1ZIhT7vWnx8Dh1yx+NSq9W9 xExQLrdqwffZbUXbm11q5PovbQf4SrwM9BcObk7spdgHh7ortlRCV+P8YFO/7RCY tuMGxyUfVEXbTGFexB3bSR6DJWxJ3f5CblIBtFu0puoGoxM3ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDbJ8ugx0ozV8ghgbDuNTAff2EKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjg1MTg4NmYtY2FjNi0z NGJkLThlNzUtNTZkNDcwOTBmMjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8kfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNmXlYo8Dlip7Ff1QrxUjt9Xm2ftK6oyd6NkP3xV0ADueVN+zidLfvJ NQNMem1wv5vnobfqOrFCldWun8t00/vCFZo/WqVE4vEVx7ZcsFx+0JL1IHDGnGaL O4J7+JlBij1Qt1DrDtGBvCU1qDVPOlzeegl1XTk9/6Ph9EttK/K/D24RKjednZ56 uVL5ubGTQeioJv0vwN4G0fZkgBDgtjWz2ka8oM92/fdZOIenI0WnKZ91Ds09xM+6 oZ1EvW/lGiX9YiS2fqjEcbdZNldQW+KimtSkB6ZrvO1Gr3Lwg/uoNMb2lawPFr+E 3hn4N/sgnU8wkC1Fh0dd3yWrg8zt9vE= -----END CERTIFICATE-----Generated at Tue Nov 4 22:28:59 2025 by rpki-client