$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfd37442-bad7-35b6-aa7c-627747025ed5.roa File: bfd37442-bad7-35b6-aa7c-627747025ed5.roa (raw, json) Hash identifier: slNR3+MSt5oQydzFc3fI1qLdyAxb0CSx9nR4wVi9OwY= Subject key identifier: 66:ED:15:5A:0B:B0:21:F5:64:80:44:CE:B7:C1:2D:37:D0:8F:5B:78 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BAA97AE097AB32AA95FAE6FC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfd37442-bad7-35b6-aa7c-627747025ed5.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 16625 IP address blocks: 23.199.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:ae:09:7a:b3:2a:a9:5f:ae:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=c52ef91c-58f1-48bf-b09e-d60d23ddab8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a5:07:ae:32:a1:95:76:10:ea:e2:82:4a:8f: 75:f8:07:8c:3f:5c:f1:d5:53:80:f5:13:c8:e6:47: e4:69:39:e9:6f:04:c4:8a:f5:f1:4c:32:55:fc:76: a3:0d:3c:d3:1f:bf:16:25:e1:31:f2:bc:30:a9:4d: bd:56:b0:ef:5c:a6:82:62:15:59:5b:b4:d4:47:52: 0b:d1:69:03:4e:f1:31:55:69:ff:e5:30:72:61:44: bd:ad:d3:61:03:11:39:06:57:a1:d6:78:b8:b3:f4: c0:81:5b:60:12:f7:ef:76:28:b4:c0:9c:c8:1f:7a: a8:aa:a4:63:2b:69:8c:ed:32:17:2e:34:a6:13:70: 76:e8:ef:b5:10:26:b8:cd:ac:41:e2:f2:6c:ac:11: 79:84:cd:b5:dd:7e:aa:d2:62:1d:9c:42:57:6c:a1: dd:34:ac:84:2b:90:32:e8:91:67:f1:dc:ae:6b:ed: c5:c2:de:d6:dd:00:19:e1:62:df:44:ad:93:5b:18: f9:f4:ff:ca:da:eb:7a:2d:29:1b:29:f0:73:62:5a: dd:38:e6:4f:59:34:b0:df:cd:d5:e9:25:d6:c3:c8: 02:e4:a9:16:2b:d2:f1:67:a9:52:7b:ad:35:f3:c7: bb:e8:39:ea:df:77:48:0f:1f:80:0d:62:46:9e:43: d7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:ED:15:5A:0B:B0:21:F5:64:80:44:CE:B7:C1:2D:37:D0:8F:5B:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfd37442-bad7-35b6-aa7c-627747025ed5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:84:f0:91:99:d6:b9:e7:54:65:39:3d:38:85:88:36:ac:69: 7f:be:c7:d8:67:bf:65:c5:c9:8f:0a:41:a0:bd:c6:4f:47:78: 33:f0:d9:60:fc:1b:0d:9c:06:f0:34:af:4b:cb:5f:5c:09:72: 19:25:ac:38:30:45:9e:e7:87:33:06:0f:22:01:30:ef:67:ff: 5a:49:ae:b9:87:5a:14:a9:d7:40:cd:82:55:d2:a1:27:09:05: 25:6e:cf:76:b9:24:1b:2f:74:69:ac:80:1e:9b:5b:e0:1e:81: ea:ad:3b:00:da:85:1d:db:82:66:c3:73:1f:11:c6:78:e0:d9: 22:08:ba:d8:f6:9e:16:1e:3d:21:2a:c0:fd:1b:de:0e:bf:07: 29:d9:dc:28:7e:c0:86:3d:53:6a:58:02:97:5b:18:38:cc:cc: c7:9d:a6:29:f0:9a:38:d6:05:39:f5:a7:59:ef:f6:90:a0:b9: 51:c4:23:29:69:01:66:5e:aa:ea:4e:02:fe:4f:29:47:1e:e5: b9:99:04:f6:ab:b2:02:b4:62:ba:74:ad:2f:16:c0:1e:17:e9: e3:3f:e8:d8:0d:df:19:f0:c8:0a:c9:d2:d5:9d:64:05:74:77: 5b:51:31:89:2f:ef:ed:9a:60:f1:5d:6c:b9:bb:49:81:4c:ce: c4:8d:c7:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql64JerMqqV+ub8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk YzUyZWY5MWMtNThmMS00OGJmLWIwOWUtZDYwZDIzZGRhYjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKUHrjKhlXYQ6uKCSo91+AeMP1zx1VOA9RPI 5kfkaTnpbwTEivXxTDJV/HajDTzTH78WJeEx8rwwqU29VrDvXKaCYhVZW7TUR1IL 0WkDTvExVWn/5TByYUS9rdNhAxE5Bleh1ni4s/TAgVtgEvfvdii0wJzIH3qoqqRj K2mM7TIXLjSmE3B26O+1ECa4zaxB4vJsrBF5hM213X6q0mIdnEJXbKHdNKyEK5Ay 6JFn8dyua+3Fwt7W3QAZ4WLfRK2TWxj59P/K2ut6LSkbKfBzYlrdOOZPWTSw383V 6SXWw8gC5KkWK9LxZ6lSe60188e76Dnq33dIDx+ADWJGnkPXfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbtFVoLsCH1ZIBEzrfBLTfQj1t4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmZkMzc0NDItYmFkNy0z NWI2LWFhN2MtNjI3NzQ3MDI1ZWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8dcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOE8JGZ1rnnVGU5PTiFiDasaX++x9hnv2XFyY8KQaC9xk9HeDPw2WD8 Gw2cBvA0r0vLX1wJchklrDgwRZ7nhzMGDyIBMO9n/1pJrrmHWhSp10DNglXSoScJ BSVuz3a5JBsvdGmsgB6bW+AegeqtOwDahR3bgmbDcx8Rxnjg2SIIutj2nhYePSEq wP0b3g6/BynZ3Ch+wIY9U2pYApdbGDjMzMedpinwmjjWBTn1p1nv9pCguVHEIylp AWZequpOAv5PKUce5bmZBParsgK0Yrp0rS8WwB4X6eM/6NgN3xnwyArJ0tWdZAV0 d1tRMYkv7+2aYPFdbLm7SYFMzsSNx4w= -----END CERTIFICATE-----Generated at Tue Nov 4 22:42:59 2025 by rpki-client