$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c923ecc-ee26-3b89-bdd3-1e5444c353eb.roa File: 7c923ecc-ee26-3b89-bdd3-1e5444c353eb.roa (raw, json) Hash identifier: jxkxaskBE02JqK8H8Cb8VdKNizX7B/B1Qu1Ao3S0DU8= Subject key identifier: 5F:3E:4C:47:D7:B1:D3:4B:91:A5:13:1E:3E:19:20:C2:00:A7:D9:B3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B3821AE02D0A613C7104FC200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c923ecc-ee26-3b89-bdd3-1e5444c353eb.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.192.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:ae:02:d0:a6:13:c7:10:4f:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=3f25488a-eb49-441c-b88e-0dbfdc903b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:34:78:29:08:33:90:b3:4d:24:bc:e8:9a:99: c8:3b:79:05:5b:13:6a:97:85:b4:20:93:20:56:93: a7:4c:8d:88:c0:90:23:97:9e:7a:33:5f:da:c3:fe: db:42:d7:17:db:5e:57:6a:b3:c8:fb:bc:5d:4d:4f: 86:60:a9:89:fe:90:1b:33:b2:b5:60:02:97:61:64: 06:64:0c:8c:14:65:33:c5:e9:35:3b:fb:37:c6:4b: dc:2f:ea:93:63:b5:11:93:64:fa:24:f9:a3:6f:a2: 3c:2c:eb:b9:53:86:ef:aa:89:25:84:4a:ba:bb:48: 0f:77:fc:14:46:df:79:31:32:e1:be:a4:fb:db:3f: 36:d4:59:e4:20:e9:4e:37:5b:a8:d7:e8:71:8b:d2: 9d:22:c2:c8:9b:6d:14:b8:16:8c:08:3b:ee:7a:f0: a9:00:ce:1d:32:73:bf:37:48:8a:ec:43:36:ec:e7: 63:16:4c:e5:8f:f1:63:5b:17:41:ff:9c:ce:4e:10: 8c:1e:06:a1:14:9a:a6:5b:40:7b:6b:83:57:b0:a4: dd:60:09:58:ae:7a:fc:e1:57:20:16:e8:fa:88:d5: 1f:3a:f6:3c:1e:48:75:9c:26:59:79:99:5e:e9:9c: c1:65:f7:94:ba:97:f5:48:11:6c:51:37:28:fb:a7: fc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:3E:4C:47:D7:B1:D3:4B:91:A5:13:1E:3E:19:20:C2:00:A7:D9:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c923ecc-ee26-3b89-bdd3-1e5444c353eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.192.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:2d:5c:8e:ca:d8:b9:c3:26:d7:44:a4:ae:a8:94:5b:6a:fd: 4e:54:48:16:af:ee:7a:81:6f:32:33:c0:db:11:f2:f5:98:c1: da:75:38:8d:6f:16:9a:a9:e1:35:78:0d:04:88:f8:84:f8:ba: ea:15:c0:61:a2:a3:92:8c:87:e7:cb:0a:d5:d0:ee:fe:57:7b: 5c:59:82:d7:b1:69:22:cb:7e:34:af:1e:f6:99:77:cc:78:87: c4:b3:6b:4c:d5:ea:13:f7:d4:90:1e:6d:ba:ba:9f:92:c5:28: 38:8a:00:90:0f:58:c1:13:87:b2:f0:12:7f:a5:f7:ac:9c:16: 6e:b3:31:fa:3c:6e:24:67:c2:37:e4:5a:3f:66:cb:32:eb:16: 6b:d0:5c:2c:26:e9:61:b9:16:fc:1d:d0:89:8e:02:ca:8b:a4: b8:72:b1:d6:20:88:64:54:41:63:28:f5:f1:57:72:fc:a4:6d: 98:3a:da:7b:92:9f:7a:ca:5a:ce:1e:44:ab:52:f9:20:02:6f: fb:91:38:bb:d3:83:5f:b8:74:d3:f0:c0:f4:97:af:ec:a8:1d: f8:94:3c:01:ba:71:10:b2:4b:61:57:a2:f2:2e:31:52:a8:1b: 77:25:33:6a:76:ab:60:6f:9e:64:04:88:4f:e3:73:f2:85:e3: db:21:96:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4Ia4C0KYTxxBPwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk M2YyNTQ4OGEtZWI0OS00NDFjLWI4OGUtMGRiZmRjOTAzYjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDR4KQgzkLNNJLzompnIO3kFWxNql4W0IJMg VpOnTI2IwJAjl556M1/aw/7bQtcX215XarPI+7xdTU+GYKmJ/pAbM7K1YAKXYWQG ZAyMFGUzxek1O/s3xkvcL+qTY7URk2T6JPmjb6I8LOu5U4bvqoklhEq6u0gPd/wU Rt95MTLhvqT72z821FnkIOlON1uo1+hxi9KdIsLIm20UuBaMCDvuevCpAM4dMnO/ N0iK7EM27OdjFkzlj/FjWxdB/5zOThCMHgahFJqmW0B7a4NXsKTdYAlYrnr84Vcg Fuj6iNUfOvY8Hkh1nCZZeZle6ZzBZfeUupf1SBFsUTco+6f83wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8+TEfXsdNLkaUTHj4ZIMIAp9mzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2M5MjNlY2MtZWUyNi0z Yjg5LWJkZDMtMWU1NDQ0YzM1M2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8CkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4tXI7K2LnDJtdEpK6olFtq/U5USBav7nqBbzIzwNsR8vWYwdp1OI1v Fpqp4TV4DQSI+IT4uuoVwGGio5KMh+fLCtXQ7v5Xe1xZgtexaSLLfjSvHvaZd8x4 h8Sza0zV6hP31JAebbq6n5LFKDiKAJAPWMETh7LwEn+l96ycFm6zMfo8biRnwjfk Wj9myzLrFmvQXCwm6WG5Fvwd0ImOAsqLpLhysdYgiGRUQWMo9fFXcvykbZg62nuS n3rKWs4eRKtS+SACb/uROLvTg1+4dNPwwPSXr+yoHfiUPAG6cRCyS2FXovIuMVKo G3clM2p2q2BvnmQEiE/jc/KF49shlvE= -----END CERTIFICATE-----Generated at Tue Nov 4 23:55:01 2025 by rpki-client