$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41cf08e1-2a16-3f0a-900b-4d73e5e9e693.roa File: 41cf08e1-2a16-3f0a-900b-4d73e5e9e693.roa (raw, json) Hash identifier: 18Htmvq9zNayJkvfnzDC/088IZhU0eP68Tdcmov9gSA= Subject key identifier: EA:F3:6C:F9:22:47:37:7D:A7:43:64:0F:89:56:80:2B:11:85:BE:5E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583C933921564A61E3A62880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41cf08e1-2a16-3f0a-900b-4d73e5e9e693.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.205.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:93:39:21:56:4a:61:e3:a6:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=9d70a4c0-356d-4e27-a213-eb4af1923081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c7:6d:f0:29:ad:1b:99:5c:35:fb:69:f0:13: 0a:96:05:77:d1:d5:3a:ca:73:9d:c9:6a:e1:db:74: f5:e5:6b:9e:68:ef:b1:2f:43:dd:da:d0:12:bb:ac: 32:96:aa:f8:57:8d:0d:e3:c3:71:83:5c:c0:92:17: 67:a0:d9:33:0a:07:5d:98:49:34:71:7b:23:a1:c0: 64:c4:d1:d9:d0:e4:19:92:ab:e3:df:cf:4e:33:40: 26:15:25:bb:86:c7:72:10:88:5f:f9:7f:35:e5:90: 7b:3d:21:08:eb:f6:60:15:3d:a1:48:96:2b:3d:81: 39:87:4b:98:1c:68:59:f3:07:a8:42:48:42:62:40: d4:a9:d3:60:34:4f:80:19:fc:56:a0:ab:f0:ac:1c: 4e:dc:8a:f8:25:5e:b0:37:9f:5c:51:3d:40:dc:c8: cf:ab:b3:fc:2d:ea:11:23:71:3c:84:c6:3a:14:06: dc:12:48:a6:22:de:c3:bb:2f:78:6c:27:4e:e5:9f: 22:7e:ba:a9:18:31:11:fa:fa:db:b7:1b:c5:b9:59: 6d:69:a6:1f:c0:06:1c:86:08:8c:84:84:36:94:8d: 0e:21:47:3b:c4:a8:c4:b6:ce:d1:11:78:bf:1c:d4: d7:f5:9f:62:78:d5:94:e1:da:ff:44:66:c7:c7:85: 60:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F3:6C:F9:22:47:37:7D:A7:43:64:0F:89:56:80:2B:11:85:BE:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41cf08e1-2a16-3f0a-900b-4d73e5e9e693.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:1b:ab:c7:b2:09:1a:81:95:e0:d0:94:fd:c6:a8:b5:d2:fb: 0f:07:c6:88:01:bb:16:e6:f1:7a:39:de:5d:e1:2b:b0:35:a5: 3a:d9:a3:9b:6c:b2:bb:e6:8d:f8:44:ff:51:c4:24:c4:57:cf: 59:c7:c5:e7:75:2d:4f:d0:4b:1c:37:88:06:02:10:46:ca:18: 2f:e1:99:39:3f:7a:e7:0a:b9:2b:1c:01:d4:40:f2:19:a5:76: 4a:35:e8:47:ac:e5:d0:45:a4:14:13:33:63:f3:5f:de:51:d2: e2:1f:f5:98:a0:7b:8c:19:dd:87:c5:80:18:6d:16:52:29:65: 4a:20:9e:76:13:f0:40:b9:a7:55:60:b1:68:2e:bc:f0:f0:e4: 37:c2:db:d4:5f:db:a1:8c:43:59:4d:72:72:b9:b6:a2:2d:bd: f7:68:b4:bc:41:87:87:4e:67:56:55:e2:fb:90:c8:48:17:f7: 45:38:c6:39:49:2e:4e:28:a3:84:f3:72:b5:57:70:d6:8e:bd: 5a:68:2f:7e:db:43:19:23:04:da:f6:50:9a:e4:42:73:60:20: 32:fa:24:64:8d:5f:ce:98:ca:ab:00:2a:cf:53:53:70:81:68: a6:e0:2e:d9:54:73:c3:99:37:0f:47:f5:20:69:e1:68:77:e1: cd:b6:41:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJM5IVZKYeOmKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk OWQ3MGE0YzAtMzU2ZC00ZTI3LWEyMTMtZWI0YWYxOTIzMDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcdt8CmtG5lcNftp8BMKlgV30dU6ynOdyWrh 23T15WueaO+xL0Pd2tASu6wylqr4V40N48Nxg1zAkhdnoNkzCgddmEk0cXsjocBk xNHZ0OQZkqvj389OM0AmFSW7hsdyEIhf+X815ZB7PSEI6/ZgFT2hSJYrPYE5h0uY HGhZ8weoQkhCYkDUqdNgNE+AGfxWoKvwrBxO3Ir4JV6wN59cUT1A3MjPq7P8LeoR I3E8hMY6FAbcEkimIt7Duy94bCdO5Z8ifrqpGDER+vrbtxvFuVltaaYfwAYchgiM hIQ2lI0OIUc7xKjEts7REXi/HNTX9Z9ieNWU4dr/RGbHx4VggwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrzbPkiRzd9p0NkD4lWgCsRhb5eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDFjZjA4ZTEtMmExNi0z ZjBhLTkwMGItNGQ3M2U1ZTllNjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF81MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsbq8eyCRqBleDQlP3GqLXS+w8HxogBuxbm8Xo53l3hK7A1pTrZo5ts srvmjfhE/1HEJMRXz1nHxed1LU/QSxw3iAYCEEbKGC/hmTk/eucKuSscAdRA8hml dko16Ees5dBFpBQTM2PzX95R0uIf9Zige4wZ3YfFgBhtFlIpZUognnYT8EC5p1Vg sWguvPDw5DfC29Rf26GMQ1lNcnK5tqItvfdotLxBh4dOZ1ZV4vuQyEgX90U4xjlJ Lk4oo4TzcrVXcNaOvVpoL37bQxkjBNr2UJrkQnNgIDL6JGSNX86YyqsAKs9TU3CB aKbgLtlUc8OZNw9H9SBp4Wh34c22QYw= -----END CERTIFICATE-----Generated at Tue Nov 4 22:42:25 2025 by rpki-client