$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e401c48-1247-3258-b93e-f0dadab88317.roa File: 0e401c48-1247-3258-b93e-f0dadab88317.roa (raw, json) Hash identifier: d21dEhhpV06RyGxJbeVA0fq/9LskSOOF5X9y6cG2KI4= Subject key identifier: D2:D6:49:D1:DB:23:57:6C:AA:F7:BA:95:6C:A5:7C:A2:51:80:0E:EA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B0760A7B611D5A814C38880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e401c48-1247-3258-b93e-f0dadab88317.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.213.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:60:a7:b6:11:d5:a8:14:c3:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=a26ad5b2-e7a6-4b2b-a8fe-576d0d8d7b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:35:fd:3f:d4:3e:ba:bd:49:0c:bb:f2:c3:cc: 13:c4:de:8e:72:da:10:53:fe:68:7f:c8:98:29:07: d0:ab:7f:d3:ea:5b:c8:9c:30:18:51:e8:02:09:63: 42:99:22:23:7b:63:80:40:d0:27:07:ff:2f:56:c8: ac:21:17:b5:c0:4d:03:55:39:15:e4:14:8d:2c:be: 72:8c:b3:a1:af:4b:ee:36:3e:1e:8d:28:ce:64:9e: f9:ce:53:13:79:2e:e4:8b:ce:63:ca:44:21:35:a1: c7:53:ad:21:df:52:ce:8c:f7:bb:52:46:0d:05:6e: ac:2b:8c:5e:0a:62:35:bc:14:e5:52:ec:45:51:56: 23:f2:bf:15:64:cd:25:7a:29:d6:07:9b:55:61:62: 0f:ab:b3:35:67:e6:55:ab:a9:b3:97:75:24:8d:2f: 7c:3a:67:c7:82:3a:ed:70:53:fa:c0:1e:ad:b8:e7: ca:fc:1b:0d:55:d6:0c:58:9d:f1:2e:ed:e0:e3:9d: 4c:d5:cb:6f:27:8d:24:54:58:d0:3b:69:02:2b:3f: 21:11:bb:43:a4:cb:36:c9:bb:d6:ec:3c:a6:5e:98: 28:ed:e7:1c:98:04:08:c2:a8:7d:a8:08:e5:c6:d7: 72:75:39:73:72:a6:85:5e:fd:e3:5b:3c:55:59:2f: b0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D6:49:D1:DB:23:57:6C:AA:F7:BA:95:6C:A5:7C:A2:51:80:0E:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e401c48-1247-3258-b93e-f0dadab88317.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:83:fc:2d:30:6e:7e:0d:d5:f6:7a:ff:a1:9a:e7:c7:3b:0a: 8f:90:95:0d:2f:fb:9f:c8:c3:56:ec:38:ad:69:a8:1b:ea:b8: ca:2e:7b:3a:2a:37:47:56:b4:1b:3f:51:04:a5:70:db:eb:53: 88:61:28:c4:82:fa:b7:11:c4:62:4d:91:47:91:b8:17:c3:52: c6:3b:92:3e:04:cd:c8:64:7f:ec:32:82:75:01:f2:9b:c0:8d: 11:33:f8:51:2b:99:8e:aa:95:34:2d:45:ba:32:61:e2:04:b6: 29:1e:d4:99:db:ed:63:ea:d3:a3:d9:e8:c7:96:00:15:ee:75: 10:6c:76:c4:ba:c9:0b:bb:20:b7:0a:f1:4d:3a:73:41:92:41: 85:93:11:5b:ca:db:d9:01:fe:13:fe:b0:03:e8:70:3a:82:44: 65:42:0c:66:44:ee:d0:7b:0d:31:44:99:74:2f:cf:54:71:f2: b0:e9:c8:5d:cb:6c:26:e7:e8:b1:a4:06:81:f2:0d:38:5d:58: e3:20:c8:ea:8c:78:1f:3f:b7:ab:82:e5:32:34:34:d0:18:03: f7:61:d2:5d:92:bc:8f:ca:74:12:10:95:32:93:86:61:cd:ac: f4:30:62:bd:4d:db:68:cd:fb:74:80:11:e8:b2:8f:35:bd:00: 4f:6a:4b:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB2CnthHVqBTDiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk YTI2YWQ1YjItZTdhNi00YjJiLWE4ZmUtNTc2ZDBkOGQ3YjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojX9P9Q+ur1JDLvyw8wTxN6OctoQU/5of8iY KQfQq3/T6lvInDAYUegCCWNCmSIje2OAQNAnB/8vVsisIRe1wE0DVTkV5BSNLL5y jLOhr0vuNj4ejSjOZJ75zlMTeS7ki85jykQhNaHHU60h31LOjPe7UkYNBW6sK4xe CmI1vBTlUuxFUVYj8r8VZM0leinWB5tVYWIPq7M1Z+ZVq6mzl3UkjS98OmfHgjrt cFP6wB6tuOfK/BsNVdYMWJ3xLu3g451M1ctvJ40kVFjQO2kCKz8hEbtDpMs2ybvW 7DymXpgo7eccmAQIwqh9qAjlxtdydTlzcqaFXv3jWzxVWS+wRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLWSdHbI1dsqve6lWylfKJRgA7qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGU0MDFjNDgtMTI0Ny0z MjU4LWI5M2UtZjBkYWRhYjg4MzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9WIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqD/C0wbn4N1fZ6/6Ga58c7Co+QlQ0v+5/Iw1bsOK1pqBvquMouezoq N0dWtBs/UQSlcNvrU4hhKMSC+rcRxGJNkUeRuBfDUsY7kj4Ezchkf+wygnUB8pvA jREz+FErmY6qlTQtRboyYeIEtike1Jnb7WPq06PZ6MeWABXudRBsdsS6yQu7ILcK 8U06c0GSQYWTEVvK29kB/hP+sAPocDqCRGVCDGZE7tB7DTFEmXQvz1Rx8rDpyF3L bCbn6LGkBoHyDThdWOMgyOqMeB8/t6uC5TI0NNAYA/dh0l2SvI/KdBIQlTKThmHN rPQwYr1N22jN+3SAEeiyjzW9AE9qS9o= -----END CERTIFICATE-----Generated at Mon Oct 20 02:42:20 2025 by rpki-client