$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfa15586-c307-3365-891b-1732536c563e.roa File: bfa15586-c307-3365-891b-1732536c563e.roa (raw, json) Hash identifier: C2DlQFWjul5vlxiv+08V1FidUZTznw5G+7M2s0tzohk= Subject key identifier: C3:4A:DC:AA:E5:B1:A3:FB:8B:6D:AA:23:A0:41:12:B7:C8:11:BC:3A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B434C89E1882BBEC81D65D110 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfa15586-c307-3365-891b-1732536c563e.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.195.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:89:e1:88:2b:be:c8:1d:65:d1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=18960ff2-3cfd-49af-b806-f22ee6789665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ff:f2:eb:34:da:45:b1:8f:1c:35:4d:34:bd: 2a:d7:e4:00:9d:4b:88:67:2f:ab:2a:ba:9a:e7:d9: 7b:eb:96:ef:46:67:3a:8c:c7:cb:d1:55:fa:f3:85: 5b:b5:9c:f1:ea:53:3a:b3:17:d7:2c:03:8a:b9:cb: b1:76:6d:51:02:32:bd:b3:89:be:66:c9:85:88:6d: 4a:80:c0:a6:58:57:14:f0:83:93:a6:2c:f3:f7:9d: 36:b5:b3:07:f0:ac:52:13:d1:c3:97:90:ed:b5:d2: b6:f8:51:f7:62:bf:e8:1c:6b:27:66:86:40:ab:77: 7e:ef:a1:b1:3a:90:ba:7d:d9:7d:9d:01:6f:da:7f: e0:7d:83:c9:71:fd:30:58:e6:e7:41:ee:e8:90:bb: dc:42:e8:d2:a0:a7:e9:82:a2:94:1a:c8:49:49:1b: 3b:84:fc:82:ae:81:a8:cc:02:3d:22:49:04:4b:cb: 14:49:fc:2b:9b:b0:18:16:7a:02:a1:b1:19:f8:e6: 49:cc:df:1a:fc:08:b6:56:bf:08:d0:94:eb:6a:c0: 63:5e:2f:ba:62:02:b7:ab:59:46:c6:76:ea:07:cb: a1:05:e3:43:5e:58:02:62:5e:af:70:d8:86:50:46: ab:25:db:eb:c1:26:e6:24:fe:2c:5e:93:d8:a8:fa: 3b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4A:DC:AA:E5:B1:A3:FB:8B:6D:AA:23:A0:41:12:B7:C8:11:BC:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfa15586-c307-3365-891b-1732536c563e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:7b:04:da:29:4c:dd:27:f5:88:fa:47:85:21:f3:e2:ff:c2: 2d:7b:f9:67:d9:27:da:72:63:4f:66:02:2a:0b:fa:11:82:6a: e2:50:42:c0:16:6a:d9:b0:b4:3f:17:8b:c1:7d:5d:e2:65:78: 66:35:70:b0:ac:23:40:78:95:25:76:59:97:72:70:28:8d:db: 32:7d:e8:f9:33:8f:fb:58:e2:a4:a2:bf:e0:08:db:0f:62:e4: ad:08:01:5c:a4:0a:a8:51:7e:68:18:a8:11:18:c7:33:48:e2: 98:e0:58:ed:63:ab:aa:75:9f:71:aa:6e:f3:32:fe:81:7d:30: 10:e3:82:c8:38:39:ec:05:07:d2:aa:18:4b:5d:1a:60:d2:de: ca:d6:36:a6:09:02:a2:b2:c1:1b:50:8d:51:f0:aa:e3:eb:ca: 22:f4:84:a2:f8:af:e7:55:b7:2e:9f:ba:28:02:df:bc:84:84: 3f:25:e5:28:50:d0:b2:10:b5:87:00:c2:2d:15:d9:24:40:70: 5b:21:6f:31:5b:48:36:40:2b:35:d9:72:56:4c:bf:59:89:1f: bd:ab:dc:75:a1:cb:93:87:42:65:00:d0:8d:11:b8:7d:06:c9: 21:d1:7c:a6:15:91:e1:40:34:ce:c8:29:93:24:9d:fd:c5:83: ca:31:58:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTInhiCu+yB1l0RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MTg5NjBmZjItM2NmZC00OWFmLWI4MDYtZjIyZWU2Nzg5NjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf/y6zTaRbGPHDVNNL0q1+QAnUuIZy+rKrqa 59l765bvRmc6jMfL0VX684VbtZzx6lM6sxfXLAOKucuxdm1RAjK9s4m+ZsmFiG1K gMCmWFcU8IOTpizz9502tbMH8KxSE9HDl5DttdK2+FH3Yr/oHGsnZoZAq3d+76Gx OpC6fdl9nQFv2n/gfYPJcf0wWObnQe7okLvcQujSoKfpgqKUGshJSRs7hPyCroGo zAI9IkkES8sUSfwrm7AYFnoCobEZ+OZJzN8a/Ai2Vr8I0JTrasBjXi+6YgK3q1lG xnbqB8uhBeNDXlgCYl6vcNiGUEarJdvrwSbmJP4sXpPYqPo73wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNK3KrlsaP7i22qI6BBErfIEbw6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmZhMTU1ODYtYzMwNy0z MzY1LTg5MWItMTczMjUzNmM1NjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8NiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADR7BNopTN0n9Yj6R4Uh8+L/wi17+WfZJ9pyY09mAioL+hGCauJQQsAW atmwtD8Xi8F9XeJleGY1cLCsI0B4lSV2WZdycCiN2zJ96Pkzj/tY4qSiv+AI2w9i 5K0IAVykCqhRfmgYqBEYxzNI4pjgWO1jq6p1n3GqbvMy/oF9MBDjgsg4OewFB9Kq GEtdGmDS3srWNqYJAqKywRtQjVHwquPryiL0hKL4r+dVty6fuigC37yEhD8l5ShQ 0LIQtYcAwi0V2SRAcFshbzFbSDZAKzXZclZMv1mJH72r3HWhy5OHQmUA0I0RuH0G ySHRfKYVkeFANM7IKZMknf3Fg8oxWCI= -----END CERTIFICATE-----Generated at Tue Nov 4 22:24:11 2025 by rpki-client