$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0cf7d183-2ba0-3050-95f0-c8a79c67876e.roa File: 0cf7d183-2ba0-3050-95f0-c8a79c67876e.roa (raw, json) Hash identifier: ysePvBAVGWw0bc0H61gjttvXthHw+gkHFUSs2ohrDtM= Subject key identifier: 0F:44:63:BA:01:0A:3A:5A:33:E6:36:90:81:DF:A6:DB:69:D1:95:EE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B328C47DCB1A680203B91DF20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0cf7d183-2ba0-3050-95f0-c8a79c67876e.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.207.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:47:dc:b1:a6:80:20:3b:91:df:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=690acea3-dfb8-47f8-a1e0-e716fad0d5bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:65:19:a4:36:cf:bb:f1:de:9b:92:fb:78:16: e2:f7:4e:72:3b:18:8a:99:aa:af:63:c1:47:b9:51: 43:68:63:24:39:de:63:c1:60:03:46:ab:24:c9:d5: f2:2d:3d:65:ac:3a:7c:02:e2:99:e3:94:82:f5:67: d4:9a:8a:2f:d2:9d:ee:31:19:a3:5a:ce:a6:f2:87: 8c:b2:fa:d9:26:f5:1c:c3:e8:52:ad:d6:5c:59:1d: 52:bd:4f:a3:78:06:60:4a:8d:1c:8b:77:d9:e9:8a: 65:22:3a:84:1c:03:24:2e:2a:42:75:52:0f:72:7c: 7b:f7:2c:a3:fa:76:d3:62:7b:f3:34:66:12:95:9d: b4:e1:3a:09:00:b5:ee:d9:8f:35:fb:56:bf:3e:38: ef:9f:e1:19:85:a0:83:0f:80:84:87:18:be:cd:0f: a4:6a:10:fb:2b:03:57:98:00:c7:23:a0:2a:68:0b: 8f:ef:b0:bd:ba:1c:93:94:ac:6e:28:df:dd:6e:13: 4d:12:89:09:fd:38:62:6d:e9:f8:75:25:46:8b:8f: 79:14:d8:84:b3:a5:c5:e3:09:05:c8:16:b6:aa:c6: bb:9b:f7:f9:a3:8e:f3:42:9f:9c:90:fa:e3:f9:b3: 0b:19:b3:4c:90:1a:3f:36:3d:c3:e1:f5:82:ab:b3: 5d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:44:63:BA:01:0A:3A:5A:33:E6:36:90:81:DF:A6:DB:69:D1:95:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0cf7d183-2ba0-3050-95f0-c8a79c67876e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:4f:80:91:40:2b:63:1b:7a:23:5a:67:8d:b4:c7:15:45:39: 6d:58:81:20:8b:18:30:c3:7b:10:ff:81:b3:f8:27:66:1f:db: 12:a1:b0:fc:71:b6:15:03:75:1e:02:a3:11:d7:e4:4c:d0:c6: 0e:84:f1:34:ac:8d:d3:45:87:29:2e:a0:b2:ed:1b:9f:a4:1f: eb:63:07:84:3b:9b:51:8f:2a:3e:53:7f:f8:24:ba:45:dc:22: 1f:f8:29:dc:c0:1d:94:18:f8:de:c1:cd:8d:8a:b9:da:13:a8: 2c:7b:6c:e9:96:bc:78:d7:9d:5b:3a:4a:eb:43:a2:13:59:d2: e0:4e:ea:d2:c6:c8:c3:38:ce:65:4e:71:89:0d:ab:76:b0:73: e5:97:6e:5a:5d:9a:3e:ae:b8:66:bc:1a:80:98:12:e5:b9:1e: bc:b1:46:71:6e:1b:ca:89:f5:df:7a:46:f2:38:41:78:b6:b0: f2:ad:7c:0f:62:5f:21:28:43:4e:e6:bf:4e:46:06:9e:55:13: 1a:cb:d8:b9:d0:bf:18:3c:ee:cf:02:a7:dc:bf:76:32:8a:cb: 23:c7:d9:e0:41:c6:b8:e4:93:23:ee:bf:1e:c3:9b:f1:5a:aa: 5f:61:ba:78:24:b4:28:bd:01:ce:da:93:5f:ec:d8:2e:3b:3e: 1f:11:92:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjEfcsaaAIDuR3yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk NjkwYWNlYTMtZGZiOC00N2Y4LWExZTAtZTcxNmZhZDBkNWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmUZpDbPu/Hem5L7eBbi905yOxiKmaqvY8FH uVFDaGMkOd5jwWADRqskydXyLT1lrDp8AuKZ45SC9WfUmoov0p3uMRmjWs6m8oeM svrZJvUcw+hSrdZcWR1SvU+jeAZgSo0ci3fZ6YplIjqEHAMkLipCdVIPcnx79yyj +nbTYnvzNGYSlZ204ToJALXu2Y81+1a/Pjjvn+EZhaCDD4CEhxi+zQ+kahD7KwNX mADHI6AqaAuP77C9uhyTlKxuKN/dbhNNEokJ/Thiben4dSVGi495FNiEs6XF4wkF yBa2qsa7m/f5o47zQp+ckPrj+bMLGbNMkBo/Nj3D4fWCq7NdgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9EY7oBCjpaM+Y2kIHfpttp0ZXuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGNmN2QxODMtMmJhMC0z MDUwLTk1ZjAtYzhhNzljNjc4NzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8/rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5PgJFAK2MbeiNaZ420xxVFOW1YgSCLGDDDexD/gbP4J2Yf2xKhsPxx thUDdR4CoxHX5EzQxg6E8TSsjdNFhykuoLLtG5+kH+tjB4Q7m1GPKj5Tf/gkukXc Ih/4KdzAHZQY+N7BzY2KudoTqCx7bOmWvHjXnVs6SutDohNZ0uBO6tLGyMM4zmVO cYkNq3awc+WXblpdmj6uuGa8GoCYEuW5HryxRnFuG8qJ9d96RvI4QXi2sPKtfA9i XyEoQ07mv05GBp5VExrL2LnQvxg87s8Cp9y/djKKyyPH2eBBxrjkkyPuvx7Dm/Fa ql9hungktCi9Ac7ak1/s2C47Ph8Rkmk= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:13 2025 by rpki-client