$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/159e4457-77c8-33cc-aee0-d68cdf3707ca.roa File: 159e4457-77c8-33cc-aee0-d68cdf3707ca.roa (raw, json) Hash identifier: vBIJjmAyF6x6xhjEJkYXIcYnrElB5atWiaSWCNNIVJQ= Subject key identifier: D4:4F:DF:1B:9D:8D:4E:1C:A7:39:B6:73:D2:1C:59:BF:71:64:B8:18 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B075AD940F0F97143400480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/159e4457-77c8-33cc-aee0-d68cdf3707ca.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.210.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:5a:d9:40:f0:f9:71:43:40:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=3b4c3fa7-0ede-4f6e-8019-436e0bda72e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a8:da:52:23:8f:84:2b:79:bf:f4:68:9f:11: 2f:3f:95:09:08:cc:e8:9b:36:c0:ea:80:3a:fa:de: e8:e9:c9:ca:f6:ae:37:56:17:5d:d8:80:7d:3e:6a: f0:69:50:67:19:13:52:be:92:ff:b2:07:08:cb:9b: 9c:51:8b:c0:0a:b5:0e:6e:d9:0f:28:39:f0:45:c8: d7:d9:cb:7e:4f:3b:e0:43:42:75:69:49:37:d6:75: 17:3c:c7:49:8d:6e:28:c5:72:a9:59:04:12:ae:75: dc:14:14:cb:45:49:ff:ca:84:5c:51:69:78:90:59: f2:20:16:46:95:af:26:ad:bd:fb:9d:ee:1c:e1:42: 4b:b3:b5:9e:6d:68:2a:3d:5e:d0:0a:86:b3:44:d1: a7:c7:44:00:82:4d:71:88:2a:ec:f6:dd:34:10:a3: 6f:b6:5a:03:05:64:89:3b:4d:df:09:f3:b5:75:08: 71:1d:54:33:35:ca:dc:71:a6:3b:a2:ef:d6:b3:be: c7:ed:bc:16:02:e9:cd:e0:2c:63:5b:28:fc:a2:39: e0:cf:f1:51:7f:0b:ad:1a:ac:da:98:ee:ef:7a:b5: cf:a4:65:68:be:87:5c:ac:2c:f2:80:0a:e0:ed:8f: 80:02:7b:cc:6f:41:8a:35:59:59:51:33:22:02:45: 4f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4F:DF:1B:9D:8D:4E:1C:A7:39:B6:73:D2:1C:59:BF:71:64:B8:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/159e4457-77c8-33cc-aee0-d68cdf3707ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:8a:46:a5:c2:d7:7c:3e:c0:5b:35:27:74:bc:9f:38:42:55: 3b:d6:11:c7:0e:eb:9f:66:39:e9:41:c6:22:95:09:9e:38:7d: 88:c7:6c:c1:4e:e6:1e:f7:c2:8b:8c:52:5b:d8:09:89:69:cc: ac:ee:60:be:1f:ae:98:45:40:cd:db:82:4f:1c:dd:d2:10:f1: ee:8f:30:92:12:e7:cd:07:cf:dc:42:a8:b7:72:63:b0:47:b2: 0b:01:d1:3f:53:12:77:c5:83:83:c2:95:31:54:b5:d5:3c:96: b4:fa:75:e0:ef:96:44:0a:43:a9:e3:f0:2e:e9:52:03:b8:04: fb:5d:d6:d3:4b:bb:3f:ed:3c:b9:df:96:a5:39:14:87:dc:54: 5b:9d:78:8c:07:93:06:fb:74:d8:ac:ea:8e:a8:75:e0:54:39: 4c:59:e5:68:25:14:bd:ac:39:a5:73:06:5d:f5:4a:c9:e2:d5: 77:ba:a1:2b:e9:67:a2:5a:da:5e:74:f2:41:3d:68:33:d5:c0: 9c:0e:81:9a:cd:b1:ae:eb:28:82:cf:66:53:68:ab:4c:4c:31: 15:37:65:f6:61:d4:9e:f3:6e:aa:bd:97:13:6b:0c:79:45:82: 4b:cd:0a:e1:0b:56:48:db:3b:54:4b:10:de:24:43:cf:bd:0e: 4f:f4:8d:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1rZQPD5cUNABIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk M2I0YzNmYTctMGVkZS00ZjZlLTgwMTktNDM2ZTBiZGE3MmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6jaUiOPhCt5v/RonxEvP5UJCMzomzbA6oA6 +t7o6cnK9q43Vhdd2IB9PmrwaVBnGRNSvpL/sgcIy5ucUYvACrUObtkPKDnwRcjX 2ct+TzvgQ0J1aUk31nUXPMdJjW4oxXKpWQQSrnXcFBTLRUn/yoRcUWl4kFnyIBZG la8mrb37ne4c4UJLs7WebWgqPV7QCoazRNGnx0QAgk1xiCrs9t00EKNvtloDBWSJ O03fCfO1dQhxHVQzNcrccaY7ou/Ws77H7bwWAunN4CxjWyj8ojngz/FRfwutGqza mO7verXPpGVovodcrCzygArg7Y+AAnvMb0GKNVlZUTMiAkVPOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRP3xudjU4cpzm2c9IcWb9xZLgYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTU5ZTQ0NTctNzdjOC0z M2NjLWFlZTAtZDY4Y2RmMzcwN2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9L0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuKRqXC13w+wFs1J3S8nzhCVTvWEccO659mOelBxiKVCZ44fYjHbMFO 5h73wouMUlvYCYlpzKzuYL4frphFQM3bgk8c3dIQ8e6PMJIS580Hz9xCqLdyY7BH sgsB0T9TEnfFg4PClTFUtdU8lrT6deDvlkQKQ6nj8C7pUgO4BPtd1tNLuz/tPLnf lqU5FIfcVFudeIwHkwb7dNis6o6odeBUOUxZ5WglFL2sOaVzBl31Ssni1Xe6oSvp Z6Ja2l508kE9aDPVwJwOgZrNsa7rKILPZlNoq0xMMRU3ZfZh1J7zbqq9lxNrDHlF gkvNCuELVkjbO1RLEN4kQ8+9Dk/0jS8= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:03 2025 by rpki-client