$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a91d4e3e-53c2-337b-b1f7-5aac3cf51ddb.roa File: a91d4e3e-53c2-337b-b1f7-5aac3cf51ddb.roa (raw, json) Hash identifier: mnArn04tRSY6312XmbCblr7QZnfB2lL1Zix4/+mhsGM= Subject key identifier: 41:01:5C:0D:4C:3B:28:54:0B:D6:54:20:BC:F0:F6:D2:DF:FF:F4:3D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AFD812C8926C7AFAD6395B800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a91d4e3e-53c2-337b-b1f7-5aac3cf51ddb.roa Signing time: Wed 27 Aug 2025 01:00:32 +0000 ROA not before: Wed 27 Aug 2025 01:00:32 +0000 ROA not after: Tue 25 Nov 2025 02:00:32 +0000 asID: 16625 IP address blocks: 23.209.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:81:2c:89:26:c7:af:ad:63:95:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 27 01:00:32 2025 GMT Not After : Nov 25 02:00:32 2025 GMT Subject: CN=81e88e37-3446-4a2f-bff9-7ac4d189c247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b3:e0:40:0c:d2:bb:5c:bd:65:2b:52:18:6b: b2:e4:dd:aa:50:c5:45:62:7d:98:7b:7a:64:e0:66: 21:c3:ae:a0:8f:8b:a7:aa:01:e1:85:ee:be:51:9f: 19:7f:7a:5e:f3:f5:3f:df:dc:68:c0:8d:c7:0d:b1: 7d:4c:b6:07:98:6d:25:5a:0d:f6:9e:e5:65:d9:1d: 20:d2:df:56:d5:37:96:bf:01:13:9c:d9:90:4e:6f: a8:ed:aa:91:bd:15:84:9a:97:7d:0c:eb:0a:49:9b: 6b:93:be:3f:6f:35:97:ba:f9:b7:f4:c2:62:fe:72: cc:8b:c5:69:92:94:a0:3c:da:cf:00:dc:25:36:cc: 67:d4:f3:dc:6d:36:24:ce:e1:71:57:6d:aa:a9:aa: b8:a6:66:8d:f1:fe:3c:ed:69:2b:61:1e:ec:6e:4a: 45:e6:a6:6c:fd:d6:c9:57:c9:c7:0e:ba:80:8a:65: 66:31:43:0d:be:00:02:7a:da:34:06:b4:45:d4:66: ea:27:6a:d0:a9:ab:a5:d8:2f:fb:cc:5a:8c:27:b2: 6c:41:fd:49:a7:a9:40:9d:6d:18:85:04:48:b5:c2: f1:37:92:58:76:dc:eb:a4:e9:ad:9a:2a:66:9a:6c: e6:c8:f8:98:f1:15:1e:3c:fc:40:1e:37:74:49:d3: 3e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:01:5C:0D:4C:3B:28:54:0B:D6:54:20:BC:F0:F6:D2:DF:FF:F4:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a91d4e3e-53c2-337b-b1f7-5aac3cf51ddb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:9e:67:81:e9:4a:d5:ae:90:96:d4:9e:03:c3:1b:80:bf:11: 9c:74:98:40:ce:71:bf:66:c2:8f:1a:a2:d6:55:c7:2c:c9:48: ec:92:fb:a6:a9:6c:19:f4:52:b8:1c:da:ec:19:18:af:d1:f2: a5:2f:a0:ac:55:87:85:62:bb:a6:07:98:b1:0d:6b:41:1c:6d: 49:f6:55:95:ad:57:82:2b:7c:48:bb:cd:ed:f7:54:46:0b:b8: 79:9a:64:af:8d:ea:4b:70:dd:55:05:35:2e:4c:81:d7:bd:f4: 8c:64:d3:9c:c9:d0:f7:36:4b:24:f2:4a:27:b4:b1:ea:ec:fc: ee:21:77:ce:05:81:cb:d8:3a:18:5a:53:b8:5d:6f:c6:ce:de: 23:ae:80:0a:e1:cf:0b:19:f4:de:cd:1f:22:fd:56:c9:99:cd: 6f:d8:d7:80:6c:01:e6:dc:be:66:e8:22:ba:77:dd:6d:53:d2: 2a:9a:5a:ed:13:3f:9a:9d:23:8c:73:6f:25:9d:bb:a8:d7:ae: 04:4d:7b:6d:cc:51:87:9d:df:93:9d:39:df:e8:02:2a:c6:30: 79:a1:8b:e5:27:f6:a0:48:1e:6e:2d:bd:4d:94:25:35:ae:80: d8:63:23:2d:64:ca:bd:9f:5e:ef:ca:b9:23:b9:66:1a:02:26: e8:63:97:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9gSyJJsevrWOVuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNzAxMDAzMloXDTI1MTEyNTAyMDAzMlowLzEtMCsGA1UEAxMk ODFlODhlMzctMzQ0Ni00YTJmLWJmZjktN2FjNGQxODljMjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbPgQAzSu1y9ZStSGGuy5N2qUMVFYn2Ye3pk 4GYhw66gj4unqgHhhe6+UZ8Zf3pe8/U/39xowI3HDbF9TLYHmG0lWg32nuVl2R0g 0t9W1TeWvwETnNmQTm+o7aqRvRWEmpd9DOsKSZtrk74/bzWXuvm39MJi/nLMi8Vp kpSgPNrPANwlNsxn1PPcbTYkzuFxV22qqaq4pmaN8f487WkrYR7sbkpF5qZs/dbJ V8nHDrqAimVmMUMNvgACeto0BrRF1GbqJ2rQqaul2C/7zFqMJ7JsQf1Jp6lAnW0Y hQRItcLxN5JYdtzrpOmtmipmmmzmyPiY8RUePPxAHjd0SdM+rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEBXA1MOyhUC9ZUILzw9tLf//Q9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTkxZDRlM2UtNTNjMi0z MzdiLWIxZjctNWFhYzNjZjUxZGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9FYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6eZ4HpStWukJbUngPDG4C/EZx0mEDOcb9mwo8aotZVxyzJSOyS+6ap bBn0Urgc2uwZGK/R8qUvoKxVh4Viu6YHmLENa0EcbUn2VZWtV4IrfEi7ze33VEYL uHmaZK+N6ktw3VUFNS5Mgde99Ixk05zJ0Pc2SyTySie0sers/O4hd84FgcvYOhha U7hdb8bO3iOugArhzwsZ9N7NHyL9VsmZzW/Y14BsAebcvmboIrp33W1T0iqaWu0T P5qdI4xzbyWdu6jXrgRNe23MUYed35OdOd/oAirGMHmhi+Un9qBIHm4tvU2UJTWu gNhjIy1kyr2fXu/KuSO5ZhoCJuhjlwQ= -----END CERTIFICATE-----Generated at Wed Nov 5 00:18:13 2025 by rpki-client