$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/976d46e9-2aa4-38ef-98b1-a5986e3fa725.roa File: 976d46e9-2aa4-38ef-98b1-a5986e3fa725.roa (raw, json) Hash identifier: ecekScwnz2u52gG+6fato7Q/M0iP6ajr6h6BIRGR3qA= Subject key identifier: 68:08:1F:B5:86:F0:A6:36:00:4A:4F:A2:FF:B9:B4:6A:D7:E8:66:96 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2FC1AD89C49AEB67A95E5180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/976d46e9-2aa4-38ef-98b1-a5986e3fa725.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 3786 IP address blocks: 23.201.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:ad:89:c4:9a:eb:67:a9:5e:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=bda7e54c-cfc9-4078-adff-c6bf59bd66d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:62:64:53:79:0b:fd:ce:bf:cd:75:8d:29:84: 43:06:73:4d:df:49:11:55:eb:31:6d:db:e8:1f:cc: 4c:00:ee:84:aa:31:d9:ad:fb:63:34:f3:7e:cb:47: 49:23:d1:ea:89:90:56:e3:6e:7e:17:c1:e5:b8:03: 66:17:38:45:bf:32:0d:49:aa:10:73:6d:e1:69:04: 0a:e9:8d:eb:b7:54:a3:57:69:24:7b:a4:fb:82:c5: 0c:3c:00:99:7d:c0:73:5a:33:57:9d:c5:c6:c5:4c: 0c:71:ca:d1:3a:57:fa:fa:4b:8c:c1:d3:0d:ad:b7: 6c:4d:8b:e1:61:0b:f2:0e:ed:f3:d5:9b:80:ae:79: 16:75:d4:76:24:25:1b:1f:ec:59:97:d0:1a:3f:31: 4e:54:3c:f6:09:8d:18:62:e6:19:51:5f:9b:44:69: 2d:4e:ab:db:04:fc:2a:69:56:f3:dd:b9:67:bf:4d: 1e:bb:91:bf:8d:1e:a6:5a:d7:f1:4b:71:96:41:b0: 12:99:e4:79:ff:f8:b1:43:c7:29:6d:30:95:d0:f5: 7a:54:fc:51:3b:15:4f:18:10:c7:f1:c1:83:57:5a: b4:8c:13:b9:aa:f3:76:f5:9a:83:5f:67:8b:c8:43: e0:31:38:7b:d5:e4:8b:41:44:eb:ce:f2:ab:d7:9d: 12:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:08:1F:B5:86:F0:A6:36:00:4A:4F:A2:FF:B9:B4:6A:D7:E8:66:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/976d46e9-2aa4-38ef-98b1-a5986e3fa725.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:0a:cd:7a:37:4a:10:9a:cd:68:2d:79:d4:07:9e:5c:55:e1: b1:5e:b5:81:53:0f:6c:eb:b4:7b:b3:94:14:e6:5a:90:5a:5c: da:00:29:5e:dc:b6:ba:12:ba:91:79:8f:43:2a:fd:ab:c9:67: 40:8e:58:b2:16:1d:4c:27:9a:7a:0e:a0:2a:7f:ca:4b:23:f2: fc:39:5e:76:6a:66:9e:1f:4f:fa:a5:74:95:b4:d8:34:18:55: f2:48:10:cb:fd:23:56:48:97:18:f5:5e:e8:b7:38:c3:bd:b3: d2:08:79:88:4d:73:41:5a:40:6b:d8:bf:f4:f0:c5:87:33:6a: d6:70:c5:39:c2:e8:3d:ab:f8:95:56:e4:6a:81:42:cd:21:d1: a0:29:5f:41:11:91:93:83:0c:92:f0:7f:ea:c6:f1:b9:0c:4d: 2d:fc:0c:a1:ed:7f:8b:a2:52:c6:9b:ec:ee:42:b3:f6:f8:71: 55:61:df:a2:ac:df:1f:99:d9:eb:d9:1f:b0:03:fa:0e:9a:ab: c6:c6:f2:b3:15:9f:13:94:e6:56:d5:b3:06:aa:ef:7c:62:b4: da:81:29:05:d7:2d:25:16:2a:c6:ff:e2:70:cc:b3:e8:f9:f0: 38:6c:d7:12:ff:6f:cc:dc:78:78:f5:34:a8:24:e3:98:1c:bd: 62:14:62:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwa2JxJrrZ6leUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk YmRhN2U1NGMtY2ZjOS00MDc4LWFkZmYtYzZiZjU5YmQ2NmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWJkU3kL/c6/zXWNKYRDBnNN30kRVesxbdvo H8xMAO6EqjHZrftjNPN+y0dJI9HqiZBW425+F8HluANmFzhFvzINSaoQc23haQQK 6Y3rt1SjV2kke6T7gsUMPACZfcBzWjNXncXGxUwMccrROlf6+kuMwdMNrbdsTYvh YQvyDu3z1ZuArnkWddR2JCUbH+xZl9AaPzFOVDz2CY0YYuYZUV+bRGktTqvbBPwq aVbz3blnv00eu5G/jR6mWtfxS3GWQbASmeR5//ixQ8cpbTCV0PV6VPxROxVPGBDH 8cGDV1q0jBO5qvN29ZqDX2eLyEPgMTh71eSLQUTrzvKr150SGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgIH7WG8KY2AEpPov+5tGrX6GaWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTc2ZDQ2ZTktMmFhNC0z OGVmLTk4YjEtYTU5ODZlM2ZhNzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8k6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0KzXo3ShCazWgtedQHnlxV4bFetYFTD2zrtHuzlBTmWpBaXNoAKV7c troSupF5j0Mq/avJZ0COWLIWHUwnmnoOoCp/yksj8vw5XnZqZp4fT/qldJW02DQY VfJIEMv9I1ZIlxj1Xui3OMO9s9IIeYhNc0FaQGvYv/TwxYczatZwxTnC6D2r+JVW 5GqBQs0h0aApX0ERkZODDJLwf+rG8bkMTS38DKHtf4uiUsab7O5Cs/b4cVVh36Ks 3x+Z2evZH7AD+g6aq8bG8rMVnxOU5lbVswaq73xitNqBKQXXLSUWKsb/4nDMs+j5 8Dhs1xL/b8zceHj1NKgk45gcvWIUYuo= -----END CERTIFICATE-----Generated at Wed Oct 22 02:44:27 2025 by rpki-client