$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf453dc6-328a-3fb8-afca-a2387c2e7d47.roa File: cf453dc6-328a-3fb8-afca-a2387c2e7d47.roa (raw, json) Hash identifier: Ja1R/HokqLIYxfLyvx40mJ+L8Wrm9bn7K+XnQqPVx2A= Subject key identifier: 79:FE:D4:E6:8D:AD:DE:1D:D2:44:47:D3:1D:CA:33:08:3C:CB:BB:DF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA5023C0A597F19EE302C0180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf453dc6-328a-3fb8-afca-a2387c2e7d47.roa Signing time: Sun 26 Oct 2025 01:00:31 +0000 ROA not before: Sun 26 Oct 2025 01:00:31 +0000 ROA not after: Sat 24 Jan 2026 02:00:31 +0000 asID: 16625 IP address blocks: 23.223.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a5:02:3c:0a:59:7f:19:ee:30:2c:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 26 01:00:31 2025 GMT Not After : Jan 24 02:00:31 2026 GMT Subject: CN=8615aef1-e5b6-4f89-8972-44c06025f3fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c8:0d:50:58:05:61:10:ce:5c:57:65:7e:8c: 5d:38:dc:64:47:98:40:f1:3b:92:c2:0a:71:e5:94: f6:b3:f9:a6:01:01:fa:87:ef:e1:d4:0c:9e:a3:90: 27:e4:a5:80:85:69:57:b8:3d:c1:33:7a:68:f4:38: 67:1f:9e:f0:96:91:10:43:af:dd:6f:a7:eb:7e:94: 84:b6:98:c9:b5:1f:7f:87:7f:a5:21:b9:3e:07:29: 8b:f1:22:50:58:34:cd:30:68:d1:ce:fe:ec:8b:4e: ef:90:37:e2:da:59:c8:a6:3d:ec:57:ff:fa:ff:e3: f4:99:53:9b:f8:d4:b0:50:80:2f:6c:84:b8:ba:0d: fd:82:54:15:7c:44:b5:32:9a:d5:32:b9:a2:6d:d6: 55:fa:dc:f0:06:03:19:a2:63:3e:ad:5e:93:3c:89: cf:32:58:cd:33:0e:bb:b2:1f:a1:cb:87:4c:4c:33: 73:fc:35:6f:7d:b1:c7:6d:73:55:4e:53:20:17:4f: 45:79:29:ba:35:5b:83:3b:11:ec:f5:88:62:6b:cd: 23:e0:9c:5f:d9:b6:46:22:c3:cc:9b:95:6f:49:74: 8e:d2:5e:7f:80:87:d9:ba:46:c4:85:8c:af:d4:ec: 43:b0:da:58:5a:a3:00:12:da:2f:1d:da:be:ad:65: cf:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FE:D4:E6:8D:AD:DE:1D:D2:44:47:D3:1D:CA:33:08:3C:CB:BB:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf453dc6-328a-3fb8-afca-a2387c2e7d47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:31:f8:f2:42:32:c8:7a:3a:bf:0a:f7:72:de:2a:28:8b:ae: e5:51:16:b6:df:10:25:66:2f:eb:f2:9b:da:b2:eb:12:72:c6: b8:28:f5:b6:4e:b0:3b:16:3d:ad:2b:78:20:6d:a2:94:16:72: e5:7d:db:85:73:9f:57:92:9a:34:12:f8:16:88:79:f3:5e:61: c8:3c:66:d7:68:a8:3e:9b:c5:92:3f:12:4f:e7:9c:96:a0:b7: 1d:fa:0e:0f:0e:38:d7:12:b2:71:c9:00:1a:ad:75:2d:0f:2f: 1e:67:dd:c8:08:58:3e:a4:95:90:47:17:ab:84:6c:bc:f8:93: 6a:63:87:2c:17:d5:50:a2:3c:38:b8:0d:d3:9e:ec:3d:4b:b9: 3b:9b:d9:62:5c:2b:51:02:4a:ac:0d:be:ba:f1:78:c1:9d:14: c0:ec:2b:7a:3c:98:64:03:6c:54:1f:4f:39:7f:07:b0:84:37: 62:28:14:6e:f2:cc:e5:f6:e4:ef:8e:5c:25:7d:b4:54:ea:33: d9:b2:fc:18:02:39:16:19:3a:57:a7:84:63:8a:52:4e:38:8d: 6a:97:1e:a4:17:8d:99:44:84:7e:1f:d6:16:47:66:d4:8e:a2: f4:06:75:20:e0:0e:d7:fc:c1:54:6b:02:87:3f:d1:26:89:8e: bb:d5:e9:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEulAjwKWX8Z7jAsAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNjAxMDAzMVoXDTI2MDEyNDAyMDAzMVowLzEtMCsGA1UEAxMk ODYxNWFlZjEtZTViNi00Zjg5LTg5NzItNDRjMDYwMjVmM2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosgNUFgFYRDOXFdlfoxdONxkR5hA8TuSwgpx 5ZT2s/mmAQH6h+/h1Ayeo5An5KWAhWlXuD3BM3po9DhnH57wlpEQQ6/db6frfpSE tpjJtR9/h3+lIbk+BymL8SJQWDTNMGjRzv7si07vkDfi2lnIpj3sV//6/+P0mVOb +NSwUIAvbIS4ug39glQVfES1MprVMrmibdZV+tzwBgMZomM+rV6TPInPMljNMw67 sh+hy4dMTDNz/DVvfbHHbXNVTlMgF09FeSm6NVuDOxHs9Yhia80j4Jxf2bZGIsPM m5VvSXSO0l5/gIfZukbEhYyv1OxDsNpYWqMAEtovHdq+rWXPcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHn+1OaNrd4d0kRH0x3KMwg8y7vfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2Y0NTNkYzYtMzI4YS0z ZmI4LWFmY2EtYTIzODdjMmU3ZDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9/EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwx+PJCMsh6Or8K93LeKiiLruVRFrbfECVmL+vym9qy6xJyxrgo9bZO sDsWPa0reCBtopQWcuV924Vzn1eSmjQS+BaIefNeYcg8ZtdoqD6bxZI/Ek/nnJag tx36Dg8OONcSsnHJABqtdS0PLx5n3cgIWD6klZBHF6uEbLz4k2pjhywX1VCiPDi4 DdOe7D1LuTub2WJcK1ECSqwNvrrxeMGdFMDsK3o8mGQDbFQfTzl/B7CEN2IoFG7y zOX25O+OXCV9tFTqM9my/BgCORYZOlenhGOKUk44jWqXHqQXjZlEhH4f1hZHZtSO ovQGdSDgDtf8wVRrAoc/0SaJjrvV6T0= -----END CERTIFICATE-----Generated at Tue Nov 4 22:42:33 2025 by rpki-client