$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ba38731-e254-3980-ade3-0f1947ffc32a.roa File: 1ba38731-e254-3980-ade3-0f1947ffc32a.roa (raw, json) Hash identifier: 8lDUkIiI/a9/9yR+mKQv0x2xt3mjxc8u+lbJk9ZTw3I= Subject key identifier: 5B:4F:E4:5E:FD:E5:B2:FF:4F:D6:6E:96:F9:0F:43:B6:5D:53:96:CC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B79BCC243F219BE9ABFEFD060 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ba38731-e254-3980-ade3-0f1947ffc32a.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 20940 IP address blocks: 23.207.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:c2:43:f2:19:be:9a:bf:ef:d0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=997f387f-2cc1-4fae-80b4-f7b5f2c75dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3e:7b:8d:55:db:3f:60:60:3c:d9:3e:a9:59: 4a:c6:cd:63:5d:3e:42:d6:ed:1d:68:fb:ab:a4:a0: 4c:29:b2:99:bb:d7:8a:d9:f9:4a:8c:ec:8b:a9:26: 7c:9b:f6:7c:3e:bf:77:0e:80:c3:d1:81:87:38:aa: 34:62:bf:de:6d:b9:11:de:30:21:32:f4:75:30:b8: e7:11:e0:81:44:68:a8:9e:79:63:34:0b:49:31:0a: 99:88:21:a0:f3:4d:4d:e0:51:52:d3:22:8c:8e:88: 65:69:50:f2:3d:56:f4:56:47:19:c3:1b:09:51:37: 89:44:eb:00:b8:af:79:4a:50:c6:51:b1:b5:ff:76: 39:13:25:2c:0e:3c:01:28:4d:25:99:bf:92:bb:33: 83:1e:c7:21:c8:e1:a8:f9:b7:ac:8d:80:70:65:a5: 29:bc:09:4c:80:1c:5f:b6:0c:7f:a2:cc:87:47:85: f9:c3:c6:8b:cc:4d:d8:98:aa:a0:c5:5d:9f:cb:7f: 98:71:4c:28:1a:60:b6:e7:b0:18:ad:da:61:3d:56: b7:46:b3:4b:72:ac:e8:46:9f:d2:61:71:ac:d6:69: 12:a9:18:da:b2:2e:5c:ba:d7:3e:1e:3d:3c:fb:04: e5:ae:60:f8:b8:5e:c9:7e:1f:ef:56:66:3c:0a:eb: f8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4F:E4:5E:FD:E5:B2:FF:4F:D6:6E:96:F9:0F:43:B6:5D:53:96:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ba38731-e254-3980-ade3-0f1947ffc32a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:5f:aa:d1:8b:50:06:18:a8:bb:e7:8d:b6:b7:cd:b1:b4:94: 63:06:b2:3b:84:d6:9c:24:6b:a0:bd:fe:f1:c5:49:17:dc:a3: 6c:d3:6d:41:77:b1:02:19:f0:f1:10:f9:13:d2:bc:5f:8c:1b: 9d:af:15:fd:58:f3:95:21:15:6b:57:22:60:c8:77:a6:68:1c: 60:17:9f:1d:0c:a5:09:da:9e:57:22:2b:25:74:7d:93:d6:97: f8:37:d0:93:5e:eb:a9:3a:d8:f5:54:d7:aa:b7:3a:6d:df:0d: e6:4b:8d:35:5e:20:7b:73:39:79:65:7c:33:d5:3d:d2:b2:be: c7:c4:09:85:ca:0b:33:c1:11:42:3a:a2:b0:97:97:cd:6b:85: f6:f2:10:33:b6:d1:de:b0:15:4f:58:0e:8b:b7:11:98:0e:dc: 28:cd:c9:c4:8f:4e:93:ed:72:89:72:79:f1:02:61:5c:27:8a: b7:84:39:5a:b8:79:ed:01:91:09:5f:c9:ae:96:5d:3c:ff:08: 35:23:3f:ef:d1:a1:8c:4f:52:7c:7b:ac:3d:f2:d9:34:8d:3d: 39:53:88:bd:03:0c:8d:0b:9c:57:01:6b:70:55:9c:d6:5a:17: f7:bc:c6:6f:f9:5e:90:a7:36:d2:b9:65:f3:44:96:90:f2:13: b2:05:5f:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vMJD8hm+mr/v0GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk OTk3ZjM4N2YtMmNjMS00ZmFlLTgwYjQtZjdiNWYyYzc1ZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj57jVXbP2BgPNk+qVlKxs1jXT5C1u0daPur pKBMKbKZu9eK2flKjOyLqSZ8m/Z8Pr93DoDD0YGHOKo0Yr/ebbkR3jAhMvR1MLjn EeCBRGionnljNAtJMQqZiCGg801N4FFS0yKMjohlaVDyPVb0VkcZwxsJUTeJROsA uK95SlDGUbG1/3Y5EyUsDjwBKE0lmb+SuzODHschyOGo+besjYBwZaUpvAlMgBxf tgx/osyHR4X5w8aLzE3YmKqgxV2fy3+YcUwoGmC257AYrdphPVa3RrNLcqzoRp/S YXGs1mkSqRjasi5cutc+Hj08+wTlrmD4uF7Jfh/vVmY8Cuv4MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtP5F795bL/T9ZulvkPQ7ZdU5bMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWJhMzg3MzEtZTI1NC0z OTgwLWFkZTMtMGYxOTQ3ZmZjMzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8/hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZfqtGLUAYYqLvnjba3zbG0lGMGsjuE1pwka6C9/vHFSRfco2zTbUF3 sQIZ8PEQ+RPSvF+MG52vFf1Y85UhFWtXImDId6ZoHGAXnx0MpQnanlciKyV0fZPW l/g30JNe66k62PVU16q3Om3fDeZLjTVeIHtzOXllfDPVPdKyvsfECYXKCzPBEUI6 orCXl81rhfbyEDO20d6wFU9YDou3EZgO3CjNycSPTpPtcolyefECYVwnireEOVq4 ee0BkQlfya6WXTz/CDUjP+/RoYxPUnx7rD3y2TSNPTlTiL0DDI0LnFcBa3BVnNZa F/e8xm/5XpCnNtK5ZfNElpDyE7IFX6o= -----END CERTIFICATE-----Generated at Mon Oct 20 02:39:49 2025 by rpki-client