$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f7c120c9-38bd-3a17-bed6-5511b18c5d12.roa File: f7c120c9-38bd-3a17-bed6-5511b18c5d12.roa (raw, json) Hash identifier: KgpOsD59QQR1wLSQsFzycpcs2hnZZ+Im9D1p5/evq9E= Subject key identifier: 6E:F9:6A:54:53:93:0C:76:78:B4:36:CD:E4:8F:3C:75:82:42:A8:20 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2CF6FE7039789E4E7E0122E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f7c120c9-38bd-3a17-bed6-5511b18c5d12.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.61.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:fe:70:39:78:9e:4e:7e:01:22:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=2670d1ff-e193-4403-896c-85642312b5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6d:d4:39:94:af:33:5e:85:5a:98:91:69:72: 22:ab:81:b4:13:c9:d6:f9:ac:70:ed:52:15:c7:88: e7:e8:bb:c5:d9:6b:0c:2c:2e:30:4f:57:03:5c:50: cc:0e:3f:a0:c6:8d:ff:a4:e0:84:f7:e0:34:bd:d4: bc:fc:3c:0d:3d:2d:d1:a7:89:84:c2:54:ec:9d:02: 93:6d:a0:a7:49:62:b2:7f:a7:26:06:64:da:df:db: 11:34:36:11:7f:3b:40:38:61:d1:4e:85:13:82:45: 20:39:52:a0:0d:9c:30:f2:9e:e2:fa:ee:af:ec:dc: e7:3c:83:e2:bf:28:2f:ff:81:4c:10:f9:65:7d:f5: 9a:1a:ac:f2:6f:29:06:1c:e6:08:39:2f:31:a9:1e: 16:01:7e:53:8f:da:a0:da:10:f1:cf:c0:1a:b6:d5: 5f:df:2e:c0:27:9a:61:6e:e5:26:04:d7:f1:9b:b9: 24:84:c1:48:ff:6b:fb:3d:55:52:5f:de:73:49:db: 57:5b:bb:45:a7:e9:7c:72:5f:5f:39:ce:25:bf:34: 82:d5:59:8f:40:8a:98:ec:86:24:63:b3:e7:33:30: f7:21:d8:e1:a0:90:a4:1e:4a:69:56:59:bf:b0:22: e3:4a:c5:5f:71:55:a4:6b:12:6f:ae:04:01:d9:47: 4c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F9:6A:54:53:93:0C:76:78:B4:36:CD:E4:8F:3C:75:82:42:A8:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f7c120c9-38bd-3a17-bed6-5511b18c5d12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.61.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:28:9b:c0:35:6e:49:34:57:6d:a6:0a:98:52:56:08:60:de: ef:66:ba:fe:7b:3b:c5:ce:c5:cc:4a:1d:2b:ff:a0:7d:9b:e6: 4b:9a:e8:c9:3d:72:6e:c0:2a:bc:82:f9:91:8a:97:10:18:56: 9b:10:a0:30:3c:5a:ac:24:61:4d:a8:d2:5a:f5:c5:00:0c:a8: 76:16:85:4f:6e:05:92:2e:0e:6b:7d:2f:73:d9:1a:14:ae:ec: 7a:e4:49:b5:c8:b6:14:38:8d:89:f4:9f:a6:9c:64:e1:13:6c: 36:60:dd:8f:47:da:de:f7:45:37:60:81:2e:f4:3b:13:e2:03: 30:af:bc:5a:b6:0f:0c:e3:48:a0:50:70:76:31:46:6e:4c:24: b3:7e:74:b1:63:4d:49:6f:44:51:55:7b:00:3b:dd:06:2d:43: 39:c9:93:5c:57:d1:82:df:2f:2d:cc:b9:d8:41:f0:eb:2c:7d: 4a:ef:33:e5:e2:2c:90:4c:ab:45:5e:7a:ac:04:0f:da:25:06: 5f:da:e6:8d:39:5c:9f:23:59:86:2b:3f:dc:8d:93:c4:fb:b9: 80:33:06:56:7b:fb:55:ca:91:41:7e:29:63:b2:0b:ab:f2:8d: e8:4d:16:e0:14:6b:b8:b4:fc:7a:f5:81:7d:04:ba:ae:3d:57: 9e:62:82:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9v5wOXieTn4BIuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk MjY3MGQxZmYtZTE5My00NDAzLTg5NmMtODU2NDIzMTJiNWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgG3UOZSvM16FWpiRaXIiq4G0E8nW+axw7VIV x4jn6LvF2WsMLC4wT1cDXFDMDj+gxo3/pOCE9+A0vdS8/DwNPS3Rp4mEwlTsnQKT baCnSWKyf6cmBmTa39sRNDYRfztAOGHRToUTgkUgOVKgDZww8p7i+u6v7NznPIPi vygv/4FMEPllffWaGqzybykGHOYIOS8xqR4WAX5Tj9qg2hDxz8AattVf3y7AJ5ph buUmBNfxm7kkhMFI/2v7PVVSX95zSdtXW7tFp+l8cl9fOc4lvzSC1VmPQIqY7IYk Y7PnMzD3IdjhoJCkHkppVlm/sCLjSsVfcVWkaxJvrgQB2UdM6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG75alRTkwx2eLQ2zeSPPHWCQqggMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjdjMTIwYzktMzhiZC0z YTE3LWJlZDYtNTUxMWIxOGM1ZDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFz3LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIom8A1bkk0V22mCphSVghg3u9muv57O8XOxcxKHSv/oH2b5kua6Mk9 cm7AKryC+ZGKlxAYVpsQoDA8WqwkYU2o0lr1xQAMqHYWhU9uBZIuDmt9L3PZGhSu 7HrkSbXIthQ4jYn0n6acZOETbDZg3Y9H2t73RTdggS70OxPiAzCvvFq2DwzjSKBQ cHYxRm5MJLN+dLFjTUlvRFFVewA73QYtQznJk1xX0YLfLy3MudhB8OssfUrvM+Xi LJBMq0VeeqwED9olBl/a5o05XJ8jWYYrP9yNk8T7uYAzBlZ7+1XKkUF+KWOyC6vy jehNFuAUa7i0/Hr1gX0Euq49V55igkk= -----END CERTIFICATE-----Generated at Wed Nov 5 00:58:35 2025 by rpki-client