$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8eb1a35c-2e79-3bf5-b24b-0adfd4dc3859.roa File: 8eb1a35c-2e79-3bf5-b24b-0adfd4dc3859.roa (raw, json) Hash identifier: BNhAIf+eaTUze1yg96bHRDe9ovIfiPSf3AT/KQ+psJg= Subject key identifier: B9:E1:E0:17:28:82:5F:F4:B8:AB:D0:32:A2:4F:E9:3D:F6:29:5C:ED Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BBE404E235737B2F145EB74C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8eb1a35c-2e79-3bf5-b24b-0adfd4dc3859.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 16625 IP address blocks: 23.200.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:4e:23:57:37:b2:f1:45:eb:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=c6e77a95-d314-4110-a490-2415aa64ff3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:66:1d:99:4f:23:71:c0:d1:77:23:44:ee:58: d7:69:13:39:59:44:ae:07:07:7c:3b:d5:07:aa:6c: 38:d1:16:06:e0:39:a0:cf:4c:25:94:7c:7d:6a:9d: 3a:cd:f8:b4:6d:6f:bd:1d:b4:bc:ee:f8:87:11:37: 44:2c:57:5a:08:07:9f:69:9a:49:f1:e6:56:81:70: be:52:f3:3e:94:76:0a:d1:72:d4:7e:62:54:7e:c7: fc:83:22:4d:82:c3:0d:b5:e8:c8:23:c7:fb:b1:25: da:23:60:6f:0b:c3:47:af:dd:47:f6:46:46:e1:79: 37:f9:02:0c:42:e1:d7:84:6a:6f:6b:df:48:66:e9: cd:72:ba:88:74:6a:85:93:84:0e:71:3e:27:a7:49: dc:a6:9a:2b:86:e5:47:0e:2c:32:f7:de:93:44:f3: cd:40:0a:c1:04:cf:3b:98:6d:b5:cb:0c:44:eb:b9: 3b:d1:23:d2:92:8d:b6:96:f7:00:24:6a:ab:17:82: b5:62:73:17:00:07:16:61:e7:1c:a3:d4:44:13:60: 92:ee:39:d5:84:21:48:dc:7b:9d:ba:27:ed:74:73: f9:9b:00:29:a5:44:4e:b2:b5:60:04:5b:17:ca:e2: 03:a6:f8:f8:3f:dc:3e:82:31:a9:eb:3a:3d:64:ed: e1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E1:E0:17:28:82:5F:F4:B8:AB:D0:32:A2:4F:E9:3D:F6:29:5C:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8eb1a35c-2e79-3bf5-b24b-0adfd4dc3859.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:7e:4f:68:7b:ce:58:85:3e:02:6b:38:a8:40:08:12:17:21: b8:25:9e:7a:d7:e6:3b:63:74:29:c9:7e:b3:5b:31:43:49:f0: e0:f9:ce:4a:34:ca:47:6d:0d:c1:29:69:c1:1d:43:de:58:69: 78:5d:e3:8a:e3:c2:d2:8f:1b:15:84:6d:5a:55:4c:1c:fe:42: 20:c1:cd:ac:48:90:b1:4e:19:3e:a0:50:b6:88:60:8d:f7:48: d5:df:19:a8:ef:72:2b:fb:ce:b1:59:33:c5:86:a9:13:c7:b4: bd:d7:ae:01:c7:da:44:a5:cb:b1:a4:ae:4c:30:2e:c8:64:4d: 16:a6:f0:4e:4c:56:e1:a0:c6:b2:9e:94:a5:65:7b:b5:ae:3b: 12:58:05:87:ef:09:bf:ac:9f:2c:8e:52:8b:da:2f:59:a2:6b: 1f:bc:d7:33:66:43:12:24:ce:82:46:3d:5b:f3:3e:93:ca:23: 18:48:c7:c0:33:fb:c8:3e:08:88:5e:c6:9d:19:82:b1:d8:d8: 3e:42:1d:13:d2:eb:01:12:92:64:fa:50:6c:7b:bd:16:f3:1d: 73:61:48:21:98:6b:92:2b:21:d1:17:6f:e5:12:07:76:76:81: 96:e4:cd:18:ee:3f:2a:0d:ef:a7:ba:14:b9:71:a8:2f:b4:31: 03:d0:bc:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QE4jVzey8UXrdMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk YzZlNzdhOTUtZDMxNC00MTEwLWE0OTAtMjQxNWFhNjRmZjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2YdmU8jccDRdyNE7ljXaRM5WUSuBwd8O9UH qmw40RYG4Dmgz0wllHx9ap06zfi0bW+9HbS87viHETdELFdaCAefaZpJ8eZWgXC+ UvM+lHYK0XLUfmJUfsf8gyJNgsMNtejII8f7sSXaI2BvC8NHr91H9kZG4Xk3+QIM QuHXhGpva99IZunNcrqIdGqFk4QOcT4np0ncpporhuVHDiwy996TRPPNQArBBM87 mG21ywxE67k70SPSko22lvcAJGqrF4K1YnMXAAcWYecco9REE2CS7jnVhCFI3Hud uiftdHP5mwAppUROsrVgBFsXyuIDpvj4P9w+gjGp6zo9ZO3hYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnh4Bcogl/0uKvQMqJP6T32KVztMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGViMWEzNWMtMmU3OS0z YmY1LWIyNGItMGFkZmQ0ZGMzODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8jQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEB+T2h7zliFPgJrOKhACBIXIbglnnrX5jtjdCnJfrNbMUNJ8OD5zko0 ykdtDcEpacEdQ95YaXhd44rjwtKPGxWEbVpVTBz+QiDBzaxIkLFOGT6gULaIYI33 SNXfGajvciv7zrFZM8WGqRPHtL3XrgHH2kSly7GkrkwwLshkTRam8E5MVuGgxrKe lKVle7WuOxJYBYfvCb+snyyOUovaL1miax+81zNmQxIkzoJGPVvzPpPKIxhIx8Az +8g+CIhexp0ZgrHY2D5CHRPS6wESkmT6UGx7vRbzHXNhSCGYa5IrIdEXb+USB3Z2 gZbkzRjuPyoN76e6FLlxqC+0MQPQvJk= -----END CERTIFICATE-----Generated at Wed Nov 5 01:32:24 2025 by rpki-client