$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ef5da3d-d143-344b-84e4-dbb013ca14da.roa File: 8ef5da3d-d143-344b-84e4-dbb013ca14da.roa (raw, json) Hash identifier: dMNBMS43yS3yZWYewopBuw0W8+j2DVzJ7L4sgYcxF0c= Subject key identifier: 46:0D:02:BC:F2:EB:A0:30:82:01:CD:61:FF:E2:FD:57:8A:B8:3C:3B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B59A1D25F3DF3769FBE2B9550 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ef5da3d-d143-344b-84e4-dbb013ca14da.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.208.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:d2:5f:3d:f3:76:9f:be:2b:95:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=3f3e1ce8-1234-4546-a6db-1b4573b6fcd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f5:20:cd:15:80:33:cb:de:7c:17:b6:74:fe: c8:85:12:68:52:9a:4c:2f:e8:8f:d5:3a:f7:01:34: 97:28:24:64:48:53:a1:df:92:8d:eb:10:8a:c8:14: b5:d1:9f:02:ea:eb:41:33:ee:17:1e:6f:51:ea:27: 6c:44:18:f9:50:fd:7c:97:e6:f4:73:cf:ee:9d:65: 7a:a1:35:3f:86:8c:73:fc:25:17:dc:f3:8a:dc:6c: 19:2e:5a:ee:2d:5c:d7:0d:0a:a8:d0:e3:84:d4:dc: c4:18:67:bd:5a:5a:6b:e2:27:d3:ab:ff:49:6c:bb: c8:ae:53:4b:2b:4b:03:60:27:ae:12:83:d4:c9:a6: f3:d8:d9:a4:ff:f8:89:da:7a:d3:05:7d:d8:cf:6a: c6:06:bf:6a:1f:ed:74:83:12:9f:cb:2c:23:66:65: b0:2f:7d:c4:14:da:2c:c6:6d:b9:11:12:4f:54:d5: 59:52:77:89:9a:cc:c5:00:7b:01:4a:a9:db:1d:94: a7:66:71:ab:d7:30:0b:e7:fa:c1:79:7c:61:f8:28: 03:d4:18:e1:cc:7f:f4:64:d6:43:93:5a:45:22:4b: 44:cc:2e:75:7e:33:04:d5:57:cd:25:86:c7:a8:bb: 12:bb:14:e4:64:80:bb:ac:aa:3f:53:c6:9b:b2:17: de:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0D:02:BC:F2:EB:A0:30:82:01:CD:61:FF:E2:FD:57:8A:B8:3C:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ef5da3d-d143-344b-84e4-dbb013ca14da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:42:78:7c:4d:80:a6:05:ab:5d:2a:0d:5f:d2:55:33:19:b0: e8:f1:33:e2:6f:1c:9f:44:af:f4:81:85:1f:d8:1b:b7:10:05: f7:a9:4d:cc:f9:8c:17:f1:b7:4f:a8:87:8e:6e:2c:0a:c8:aa: 4c:55:29:09:0c:8b:96:83:68:dc:2e:73:a3:89:6d:0a:2c:b1: cc:8b:77:7f:4e:59:77:11:11:ce:98:cd:ed:b7:ec:af:8e:5f: e8:c2:53:ba:a6:cf:71:fd:b7:7d:cb:ac:06:ee:29:72:b6:ad: 32:45:99:60:03:39:99:22:50:bc:f4:12:e3:71:5b:ff:40:96: 69:2b:a5:d7:b5:0b:00:fc:f9:b9:6d:77:d6:1e:a0:70:d2:17: 24:33:60:e4:84:dd:f7:df:9d:7d:76:79:82:ce:17:e4:27:11: be:3b:26:34:69:ff:3e:f2:f0:0c:2b:6b:68:72:b3:78:4b:57: 5e:68:81:af:5e:df:85:70:67:78:9d:7f:52:26:e0:54:27:2f: 6b:d6:26:fe:71:e0:b9:a1:d0:b3:a1:46:1a:e8:49:4f:4c:3b: 69:e3:88:a9:07:ee:f3:37:99:3c:c2:fe:89:4a:1e:2b:42:f3: 7e:a6:ae:f4:48:a0:29:a5:5e:c0:37:4e:61:d2:39:28:67:2a: 30:80:54:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtZodJfPfN2n74rlVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk M2YzZTFjZTgtMTIzNC00NTQ2LWE2ZGItMWI0NTczYjZmY2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfUgzRWAM8vefBe2dP7IhRJoUppML+iP1Tr3 ATSXKCRkSFOh35KN6xCKyBS10Z8C6utBM+4XHm9R6idsRBj5UP18l+b0c8/unWV6 oTU/hoxz/CUX3POK3GwZLlruLVzXDQqo0OOE1NzEGGe9Wlpr4ifTq/9JbLvIrlNL K0sDYCeuEoPUyabz2Nmk//iJ2nrTBX3Yz2rGBr9qH+10gxKfyywjZmWwL33EFNos xm25ERJPVNVZUneJmszFAHsBSqnbHZSnZnGr1zAL5/rBeXxh+CgD1BjhzH/0ZNZD k1pFIktEzC51fjME1VfNJYbHqLsSuxTkZIC7rKo/U8abshfeowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYNArzy66AwggHNYf/i/VeKuDw7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGVmNWRhM2QtZDE0My0z NDRiLTg0ZTQtZGJiMDEzY2ExNGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9CPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlCeHxNgKYFq10qDV/SVTMZsOjxM+JvHJ9Er/SBhR/YG7cQBfepTcz5 jBfxt0+oh45uLArIqkxVKQkMi5aDaNwuc6OJbQosscyLd39OWXcREc6Yze237K+O X+jCU7qmz3H9t33LrAbuKXK2rTJFmWADOZkiULz0EuNxW/9Almkrpde1CwD8+blt d9YeoHDSFyQzYOSE3fffnX12eYLOF+QnEb47JjRp/z7y8Awra2hys3hLV15oga9e 34VwZ3idf1Im4FQnL2vWJv5x4Lmh0LOhRhroSU9MO2njiKkH7vM3mTzC/olKHitC 836mrvRIoCmlXsA3TmHSOShnKjCAVFs= -----END CERTIFICATE-----Generated at Wed Nov 5 04:20:18 2025 by rpki-client