$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf1f79b3-8b6d-3e89-88e9-d0be1f20666c.roa File: bf1f79b3-8b6d-3e89-88e9-d0be1f20666c.roa (raw, json) Hash identifier: 9fgUlobjgS8MYdM1MiSvp1/bOHjNVYYPeCEnzvmeoUo= Subject key identifier: 7C:68:1A:14:02:D5:B6:1F:08:6A:FC:01:6D:71:AA:EF:97:F3:17:4F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BBE4057F8E2C367ECE8120680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf1f79b3-8b6d-3e89-88e9-d0be1f20666c.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 16625 IP address blocks: 23.206.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:57:f8:e2:c3:67:ec:e8:12:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=47cc0c5b-2863-4917-98f6-387f88e369e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bd:34:5f:75:ef:ac:75:9f:a8:56:46:a3:d5: 98:b8:8e:0e:72:cf:e8:db:4c:68:ec:c2:67:cb:69: ac:b2:9e:6a:53:6b:a4:62:ab:c3:20:59:03:62:ff: b0:fc:56:22:c4:18:a5:3c:f6:9a:b3:c4:5e:34:ca: e5:dd:06:66:0a:71:d5:6b:6c:41:6c:99:9a:f6:11: 15:8f:0c:fa:c9:13:95:ac:a1:84:d1:44:b3:95:33: b1:22:90:4d:13:8d:17:ea:e2:3c:3e:1d:af:0b:2b: aa:f6:13:8d:9d:35:c6:6f:15:54:0b:c0:b7:f6:27: b2:ac:6f:3f:d5:84:8d:31:98:68:ad:4d:cf:97:27: 05:b1:20:7e:c4:6c:8d:df:80:a7:ff:ef:9c:a1:54: dc:a0:87:11:b6:73:ac:fc:bf:e0:1a:1c:db:5c:b0: cb:f1:32:5a:a4:7d:69:35:2e:ec:53:91:f6:e8:ca: 1b:8d:c3:4e:30:9e:36:69:d0:bc:a7:ed:c1:e0:2b: 00:cd:4f:c3:71:7e:4b:b9:75:95:93:59:f8:6a:cb: 53:de:fb:7c:2e:4a:b5:b6:5b:25:88:76:8b:76:9d: a0:ef:ee:25:a0:63:aa:05:be:67:c8:e1:68:fc:2a: 13:13:c8:3b:86:2b:af:ac:d3:82:e3:f9:23:f9:df: 48:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:68:1A:14:02:D5:B6:1F:08:6A:FC:01:6D:71:AA:EF:97:F3:17:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf1f79b3-8b6d-3e89-88e9-d0be1f20666c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:f7:89:2e:d2:dc:a6:ed:b7:0d:4f:ae:1c:6d:8a:a7:ad:4e: 9d:dc:f2:16:f9:ed:89:e0:67:d9:d1:fe:68:a0:df:fb:4c:f7: 65:4a:7b:07:cf:4d:1c:e1:46:b6:ce:0c:9f:d0:b9:6d:be:8d: e6:a2:28:38:b0:4f:59:f2:8c:39:72:b8:4d:38:26:2a:cc:b5: fb:d1:a6:c3:a5:c8:77:4e:34:b8:d0:67:a4:6d:fd:ce:9d:81: 18:62:91:2d:6f:ae:fa:c1:ff:8a:37:46:8d:6f:b4:0d:a0:91: 1f:b1:56:4b:fb:d1:10:02:d5:0f:0c:c4:58:4e:71:cf:b6:2d: 62:85:44:19:d7:0c:9c:01:fb:85:d7:51:1b:21:c0:01:b4:b3: 76:85:ab:e5:2a:1d:24:cf:17:b3:ab:c4:4c:25:d2:c7:60:0a: 70:f0:01:ff:39:83:08:0b:9e:11:03:c0:f0:9d:ed:e3:d2:d8: b5:ad:f6:d7:01:84:a9:7b:da:10:79:d8:4f:a0:a9:a1:82:84: e9:9b:d8:b3:a8:45:0c:b7:57:62:83:c0:cc:4d:24:74:d8:a9: b9:1e:f7:b2:26:a1:a5:c0:f6:85:36:88:22:35:0f:77:a3:b4: 33:63:60:81:13:9a:4d:7c:ad:a0:0a:04:91:04:73:0d:77:14: 03:db:ff:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFf44sNn7OgSBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NDdjYzBjNWItMjg2My00OTE3LTk4ZjYtMzg3Zjg4ZTM2OWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb00X3XvrHWfqFZGo9WYuI4Ocs/o20xo7MJn y2mssp5qU2ukYqvDIFkDYv+w/FYixBilPPaas8ReNMrl3QZmCnHVa2xBbJma9hEV jwz6yROVrKGE0USzlTOxIpBNE40X6uI8Ph2vCyuq9hONnTXGbxVUC8C39ieyrG8/ 1YSNMZhorU3PlycFsSB+xGyN34Cn/++coVTcoIcRtnOs/L/gGhzbXLDL8TJapH1p NS7sU5H26MobjcNOMJ42adC8p+3B4CsAzU/DcX5LuXWVk1n4astT3vt8Lkq1tlsl iHaLdp2g7+4loGOqBb5nyOFo/CoTE8g7hiuvrNOC4/kj+d9IrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxoGhQC1bYfCGr8AW1xqu+X8xdPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmYxZjc5YjMtOGI2ZC0z ZTg5LTg4ZTktZDBiZTFmMjA2NjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF85YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADb3iS7S3Kbttw1PrhxtiqetTp3c8hb57YngZ9nR/mig3/tM92VKewfP TRzhRrbODJ/QuW2+jeaiKDiwT1nyjDlyuE04JirMtfvRpsOlyHdONLjQZ6Rt/c6d gRhikS1vrvrB/4o3Ro1vtA2gkR+xVkv70RAC1Q8MxFhOcc+2LWKFRBnXDJwB+4XX URshwAG0s3aFq+UqHSTPF7OrxEwl0sdgCnDwAf85gwgLnhEDwPCd7ePS2LWt9tcB hKl72hB52E+gqaGChOmb2LOoRQy3V2KDwMxNJHTYqbke97ImoaXA9oU2iCI1D3ej tDNjYIETmk18raAKBJEEcw13FAPb/7E= -----END CERTIFICATE-----Generated at Tue Nov 4 20:56:17 2025 by rpki-client