$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6578e154-3b9f-300c-8018-c1abf5d3aea7.roa File: 6578e154-3b9f-300c-8018-c1abf5d3aea7.roa (raw, json) Hash identifier: Cgm1AVg0G+BXd6nUq4dD2b//T0YJNLk10oi97y2KamA= Subject key identifier: BD:B4:FA:57:A1:6C:0D:FC:C3:79:C8:D4:40:A3:7A:00:3D:3B:2F:55 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B074E663CD5830452996620 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6578e154-3b9f-300c-8018-c1abf5d3aea7.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.210.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:4e:66:3c:d5:83:04:52:99:66:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=d1d5e321-d7fb-488b-b4c9-b9167e199efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:70:7e:11:88:65:75:b5:e9:23:cd:35:17:08: 38:cd:d2:46:40:e6:76:2e:a6:07:77:55:1a:eb:22: 49:77:58:41:cd:d7:b8:38:c1:01:da:f3:94:d3:85: 45:d5:39:04:12:5c:59:52:86:79:65:b7:22:c8:69: a2:40:fd:f3:89:39:be:ff:b2:2a:99:45:ba:d6:8e: 02:89:ca:b9:26:36:fb:e4:03:c9:9f:64:ec:ce:e8: 75:13:28:2c:89:74:b0:8b:7a:cb:af:f4:ba:1c:76: 18:44:b8:1e:86:54:ed:4e:9c:3b:17:fb:7c:44:b8: 9d:84:d7:48:44:59:ba:51:95:af:8e:84:ed:64:8f: 3d:7b:8a:bc:fb:8a:0e:e3:a2:67:b9:4a:6d:c9:fd: 35:46:29:84:41:18:37:e8:53:83:cd:fe:3b:96:22: 07:a2:b1:b0:c2:22:6b:bc:6b:56:07:27:38:fb:58: 67:05:f1:53:99:fb:52:2b:48:dd:90:e9:27:38:8d: ec:3d:b8:6e:97:0a:cf:79:d0:83:76:6d:34:47:6c: 42:cf:d0:2a:8d:b7:f2:53:6a:18:f3:db:bf:e3:65: 2d:c0:bc:de:61:29:fe:06:0c:67:c1:2e:0d:25:30: c0:da:bd:ec:1c:bd:ea:2f:39:49:48:f9:ad:c9:92: 2c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B4:FA:57:A1:6C:0D:FC:C3:79:C8:D4:40:A3:7A:00:3D:3B:2F:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6578e154-3b9f-300c-8018-c1abf5d3aea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f0:ae:d8:8a:09:e7:58:4c:6a:4d:ef:37:f7:cd:38:ea:17: c2:18:0e:18:0a:9f:c4:3a:d7:4b:76:4a:dc:b0:80:bd:62:57: eb:b5:c8:fb:6b:15:4c:10:ce:80:7e:c2:00:19:63:0b:31:31: 1a:a7:d7:fa:30:2a:d3:27:3d:72:da:2a:c5:88:6c:f4:03:47: be:4a:a0:84:d2:8a:a5:09:aa:15:9e:92:a6:89:63:71:40:18: 03:e8:2b:ec:15:65:f5:04:97:21:68:31:21:66:33:64:ed:91: 02:6c:c0:4d:4e:63:ea:17:6b:92:a6:1b:e5:3a:12:9d:71:07: 40:e8:f3:82:de:f2:fa:a2:34:ea:32:90:10:b4:2b:75:71:19: 8e:6b:8f:61:b4:80:1f:62:26:44:24:fa:3f:a2:fc:eb:50:91: 97:71:4b:ec:86:db:27:e6:a1:1c:50:ff:df:96:24:cf:40:fd: a2:ba:2b:6b:28:c0:75:87:0b:75:2d:28:94:83:5c:9d:f7:66: 33:16:de:9c:4a:c9:74:84:bb:e9:0f:35:b4:2a:e7:c7:40:2c: 31:aa:e1:0c:27:19:d7:d7:8b:df:7e:16:39:97:15:97:9c:c0: 9b:1c:2f:d5:4e:ff:e3:ed:28:b8:0d:11:30:02:0b:d3:79:9d: 18:b4:2e:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB05mPNWDBFKZZiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZDFkNWUzMjEtZDdmYi00ODhiLWI0YzktYjkxNjdlMTk5ZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHB+EYhldbXpI801Fwg4zdJGQOZ2LqYHd1Ua 6yJJd1hBzde4OMEB2vOU04VF1TkEElxZUoZ5ZbciyGmiQP3ziTm+/7IqmUW61o4C icq5Jjb75APJn2Tszuh1EygsiXSwi3rLr/S6HHYYRLgehlTtTpw7F/t8RLidhNdI RFm6UZWvjoTtZI89e4q8+4oO46JnuUptyf01RimEQRg36FODzf47liIHorGwwiJr vGtWByc4+1hnBfFTmftSK0jdkOknOI3sPbhulwrPedCDdm00R2xCz9AqjbfyU2oY 89u/42UtwLzeYSn+BgxnwS4NJTDA2r3sHL3qLzlJSPmtyZIsDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL20+lehbA38w3nI1ECjegA9Oy9VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjU3OGUxNTQtM2I5Zi0z MDBjLTgwMTgtYzFhYmY1ZDNhZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9IQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXwrtiKCedYTGpN7zf3zTjqF8IYDhgKn8Q610t2StywgL1iV+u1yPtr FUwQzoB+wgAZYwsxMRqn1/owKtMnPXLaKsWIbPQDR75KoITSiqUJqhWekqaJY3FA GAPoK+wVZfUElyFoMSFmM2TtkQJswE1OY+oXa5KmG+U6Ep1xB0Do84Le8vqiNOoy kBC0K3VxGY5rj2G0gB9iJkQk+j+i/OtQkZdxS+yG2yfmoRxQ/9+WJM9A/aK6K2so wHWHC3UtKJSDXJ33ZjMW3pxKyXSEu+kPNbQq58dALDGq4QwnGdfXi99+FjmXFZec wJscL9VO/+PtKLgNETACC9N5nRi0Lho= -----END CERTIFICATE-----Generated at Tue Nov 4 22:40:50 2025 by rpki-client