$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a208b88-34b1-3349-bd0c-21a4398a14c2.roa File: 2a208b88-34b1-3349-bd0c-21a4398a14c2.roa (raw, json) Hash identifier: sv1fQUhhqOoVvfcDZSln0iVMe2bcbU7J9Nl3KbCer2s= Subject key identifier: 0C:0D:F2:02:E7:94:C8:8E:E6:DA:1E:2F:01:D8:02:4A:0E:DC:C6:9A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC767B16E1B5AF35A7AE080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a208b88-34b1-3349-bd0c-21a4398a14c2.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.223.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:67:b1:6e:1b:5a:f3:5a:7a:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=8ece0233-91ec-4e57-b3ad-444957bf2aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f2:8c:9b:13:fb:7d:87:60:c1:d1:c3:0b:12: 25:57:85:48:dc:f9:40:31:e0:7e:e7:91:f5:6d:9e: de:a9:10:2e:a3:cb:67:c7:af:14:f3:ca:7e:58:21: 3b:80:ff:01:64:18:91:2d:55:2a:bb:bb:49:e5:36: 55:5d:00:2b:9f:1b:72:de:45:94:4c:60:c8:80:14: 8f:fb:c6:6e:a3:71:df:55:aa:ac:1c:02:15:65:18: fe:80:c9:12:06:dc:0d:f5:37:70:1b:b8:f3:74:06: aa:b1:90:c1:7c:a2:44:bd:3c:45:55:42:a7:c2:2a: 45:33:b7:c5:7c:cd:52:51:f5:89:9b:67:6e:11:bb: 17:83:89:10:01:91:1c:64:31:44:ec:43:55:8f:44: 7a:6b:2d:fb:13:52:9a:b2:d5:7e:2a:72:f9:a2:ba: 23:18:5c:6b:a4:fb:08:e9:61:5f:19:8f:9b:14:e7: fa:ad:20:b8:d8:91:40:63:14:05:ec:04:e9:7e:4d: f9:73:9e:43:eb:b7:db:ac:1d:35:10:f4:5e:06:55: 1c:b4:b4:8e:ec:23:7d:3c:f9:e0:98:00:89:bd:49: 53:bb:60:24:28:9b:71:3e:1b:53:35:47:a6:21:71: dc:ee:4a:cb:b9:42:26:52:bf:bc:d2:e5:c8:f5:76: 59:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0D:F2:02:E7:94:C8:8E:E6:DA:1E:2F:01:D8:02:4A:0E:DC:C6:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a208b88-34b1-3349-bd0c-21a4398a14c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:3b:ae:e2:f4:3b:23:84:6a:dd:75:c0:77:86:46:ad:2b:37: 2d:39:5e:71:20:c9:1a:b6:de:fd:70:45:10:42:77:20:d2:f3: 84:3c:6b:7a:06:61:ee:41:27:21:20:80:ba:77:0e:b5:07:4f: 77:df:a2:63:ad:b5:20:0e:8f:b5:81:f3:e1:df:5d:b6:de:54: 83:6d:56:0e:61:a9:d7:03:20:b9:f4:92:a3:e2:9b:8f:2b:b5: f0:d4:2c:a0:92:1e:e0:87:8f:89:f2:7e:e0:d0:97:51:0e:eb: d0:7c:1b:71:f6:a5:0a:0c:ae:c3:65:00:cb:53:dd:05:21:bd: dc:e2:a0:69:7c:2c:da:84:8d:87:b9:3f:c0:7e:21:a8:8d:ac: e8:85:fe:53:13:c9:fa:0f:73:1f:19:0b:37:36:3c:e6:6c:2c: d4:1f:27:f2:04:2a:bf:43:cc:24:eb:81:f4:51:59:79:6b:93: cc:b8:29:85:8c:17:47:a4:f1:b3:86:cb:65:da:d3:3d:bf:7c: af:7c:36:3e:2c:70:61:c5:14:48:1c:1c:f7:6c:67:9e:77:07: c5:06:a5:70:da:4d:de:46:c5:9d:93:47:4e:ce:83:73:d6:cf: 05:ff:59:7c:fe:c6:8c:ae:21:05:f4:eb:cd:63:fe:43:71:38: 5d:67:12:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2exbhta81p64IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk OGVjZTAyMzMtOTFlYy00ZTU3LWIzYWQtNDQ0OTU3YmYyYWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/KMmxP7fYdgwdHDCxIlV4VI3PlAMeB+55H1 bZ7eqRAuo8tnx68U88p+WCE7gP8BZBiRLVUqu7tJ5TZVXQArnxty3kWUTGDIgBSP +8Zuo3HfVaqsHAIVZRj+gMkSBtwN9TdwG7jzdAaqsZDBfKJEvTxFVUKnwipFM7fF fM1SUfWJm2duEbsXg4kQAZEcZDFE7ENVj0R6ay37E1KastV+KnL5orojGFxrpPsI 6WFfGY+bFOf6rSC42JFAYxQF7ATpfk35c55D67fbrB01EPReBlUctLSO7CN9PPng mACJvUlTu2AkKJtxPhtTNUemIXHc7krLuUImUr+80uXI9XZZKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwN8gLnlMiO5toeLwHYAkoO3MaaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmEyMDhiODgtMzRiMS0z MzQ5LWJkMGMtMjFhNDM5OGExNGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF98pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF07ruL0OyOEat11wHeGRq0rNy05XnEgyRq23v1wRRBCdyDS84Q8a3oG Ye5BJyEggLp3DrUHT3ffomOttSAOj7WB8+HfXbbeVINtVg5hqdcDILn0kqPim48r tfDULKCSHuCHj4nyfuDQl1EO69B8G3H2pQoMrsNlAMtT3QUhvdzioGl8LNqEjYe5 P8B+IaiNrOiF/lMTyfoPcx8ZCzc2POZsLNQfJ/IEKr9DzCTrgfRRWXlrk8y4KYWM F0ek8bOGy2Xa0z2/fK98Nj4scGHFFEgcHPdsZ553B8UGpXDaTd5GxZ2TR07Og3PW zwX/WXz+xoyuIQX0681j/kNxOF1nEl4= -----END CERTIFICATE-----Generated at Tue Nov 4 23:54:27 2025 by rpki-client