$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34c85398-411e-34e4-b043-c9a494bca990.roa File: 34c85398-411e-34e4-b043-c9a494bca990.roa (raw, json) Hash identifier: v1TDXL+qCFkajphKCQptChR3LC88/8gyuNuWuuSfe1s= Subject key identifier: 4C:8C:59:B9:EB:7B:76:DA:27:9F:49:D5:62:B6:80:9D:DF:D2:18:E8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583C9FE4849071DB55A35300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34c85398-411e-34e4-b043-c9a494bca990.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.205.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:9f:e4:84:90:71:db:55:a3:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=602cb0e7-9460-4c94-84a9-c75ba6f397f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f0:6b:9c:0f:22:e8:86:e7:c2:ce:0d:1e:af: fb:4e:cb:15:a3:28:fe:4d:fd:cf:50:f0:d4:69:35: 14:70:5d:a9:9c:8c:52:0b:7f:a5:7a:41:08:49:62: 52:c1:bf:f1:e2:a4:31:b0:9e:77:d6:df:0a:74:78: 16:1c:1c:3d:bc:f4:1a:6d:0d:1b:79:d4:4c:cd:46: e4:21:07:e8:03:a7:a9:73:e9:06:ba:ee:d2:ec:c1: 08:42:f5:ef:ee:4e:7a:4a:77:a9:a2:eb:78:86:32: 81:33:ee:01:d5:a4:5a:0a:cf:85:19:c7:94:5f:a8: 36:1e:cc:05:32:f6:0f:22:88:11:fe:3e:0a:0b:af: 76:3f:72:21:e4:49:5b:a0:45:8a:49:24:7e:71:02: 29:b0:80:9a:5b:75:be:a0:86:e8:a2:28:09:ed:6f: 67:8b:95:4f:2c:18:f3:a3:a9:11:b9:4c:2c:92:36: 60:48:7c:cc:1b:10:2e:52:3a:94:5f:aa:29:67:6f: 4a:12:ec:37:41:74:fc:3a:74:53:be:cf:77:34:9d: 7a:87:ab:21:ce:1e:b6:b8:e4:6e:8f:e7:2d:1f:ca: f0:d9:cd:08:34:33:55:b4:16:42:26:ac:14:6f:df: 66:fb:7e:8a:3a:3d:92:2d:1b:30:e8:26:75:2b:5a: 4f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8C:59:B9:EB:7B:76:DA:27:9F:49:D5:62:B6:80:9D:DF:D2:18:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34c85398-411e-34e4-b043-c9a494bca990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ec:2a:93:6a:ca:10:85:7a:03:7b:e7:7c:5a:d7:ad:41:71: e7:3f:d6:1f:c4:b2:ed:e8:71:5a:12:57:91:53:03:87:c5:4a: 0e:2d:f6:ed:af:e0:30:8c:cf:ea:9c:e3:42:88:12:b8:f8:c3: 52:0a:7c:a1:6b:83:e4:e8:89:be:ab:1c:25:ae:0a:c5:d1:a8: ca:01:2d:0b:8b:50:e1:5c:a5:96:65:30:cc:99:af:b7:80:2b: 65:cb:91:2a:0d:50:34:63:62:c6:ec:91:73:a9:5e:78:6a:b3: 13:5d:37:42:57:c6:21:27:4f:59:c5:10:1a:c4:c3:8b:3f:0c: 6d:b3:75:5e:b9:ba:0e:04:d9:0e:57:a1:18:0b:5b:7a:ba:4d: 5e:8e:22:0a:1f:94:6f:ce:e0:e6:31:85:cb:d0:4d:65:67:bf: 37:7c:4a:e3:b7:15:88:cc:5e:be:66:ed:9f:e3:55:26:a5:e8: ba:29:ef:7d:3e:77:86:9e:75:c1:65:1c:04:11:f0:87:d9:75: 79:ce:80:cf:3c:97:b1:67:38:f0:a3:c2:3b:46:83:f2:be:0b: 22:1a:75:35:1b:c3:ce:88:07:4a:ff:4b:36:0f:2f:f0:44:04: 55:d1:bf:71:c4:ac:c2:79:1b:84:1a:32:9c:6d:28:76:85:46: 89:06:25:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJ/khJBx21WjUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NjAyY2IwZTctOTQ2MC00Yzk0LTg0YTktYzc1YmE2ZjM5N2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvBrnA8i6Ibnws4NHq/7TssVoyj+Tf3PUPDU aTUUcF2pnIxSC3+lekEISWJSwb/x4qQxsJ531t8KdHgWHBw9vPQabQ0bedRMzUbk IQfoA6epc+kGuu7S7MEIQvXv7k56Snepout4hjKBM+4B1aRaCs+FGceUX6g2HswF MvYPIogR/j4KC692P3Ih5ElboEWKSSR+cQIpsICaW3W+oIbooigJ7W9ni5VPLBjz o6kRuUwskjZgSHzMGxAuUjqUX6opZ29KEuw3QXT8OnRTvs93NJ16h6shzh62uORu j+ctH8rw2c0INDNVtBZCJqwUb99m+36KOj2SLRsw6CZ1K1pPjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyMWbnre3baJ59J1WK2gJ3f0hjoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzRjODUzOTgtNDExZS0z NGU0LWIwNDMtYzlhNDk0YmNhOTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF81nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7sKpNqyhCFegN753xa161Bcec/1h/Esu3ocVoSV5FTA4fFSg4t9u2v 4DCMz+qc40KIErj4w1IKfKFrg+Toib6rHCWuCsXRqMoBLQuLUOFcpZZlMMyZr7eA K2XLkSoNUDRjYsbskXOpXnhqsxNdN0JXxiEnT1nFEBrEw4s/DG2zdV65ug4E2Q5X oRgLW3q6TV6OIgoflG/O4OYxhcvQTWVnvzd8SuO3FYjMXr5m7Z/jVSal6Lop730+ d4aedcFlHAQR8IfZdXnOgM88l7FnOPCjwjtGg/K+CyIadTUbw86IB0r/SzYPL/BE BFXRv3HErMJ5G4QaMpxtKHaFRokGJSM= -----END CERTIFICATE-----Generated at Wed Nov 5 01:33:44 2025 by rpki-client