$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e3a3273-5100-3cca-aa8e-cbfb0a174d6a.roa File: 2e3a3273-5100-3cca-aa8e-cbfb0a174d6a.roa (raw, json) Hash identifier: maf0ZG8lXOIHdvVSHBWBbuM7BBXauIGba9m4hDKNqNw= Subject key identifier: 57:E7:C3:F5:54:60:5A:D2:8E:B7:93:CE:E4:14:E5:55:B3:F1:51:54 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583CA42CA726EDD0A89862C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e3a3273-5100-3cca-aa8e-cbfb0a174d6a.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.207.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:a4:2c:a7:26:ed:d0:a8:98:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=b0171f7f-e02e-48d3-9b30-184666f0b7dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:82:b1:07:20:e2:61:ee:d0:ad:21:b9:0d:c5: 52:0a:c6:a2:08:22:00:fd:27:ee:a8:b7:19:2a:91: 0d:68:d9:53:99:e2:58:01:dc:c9:7a:60:6d:db:e0: 46:ee:24:f4:4a:be:b7:be:af:e8:93:a4:fb:9b:a7: ea:ce:d8:02:49:7e:35:cf:fc:bb:50:5c:71:58:c3: 3a:aa:19:6c:0c:d8:df:9a:b7:b0:75:26:a0:1f:63: 65:46:72:6c:ef:f8:26:01:2e:7a:5f:9c:8c:46:86: 73:7a:8b:45:ad:e5:8d:3b:21:3a:78:08:e6:94:d6: 2a:46:f8:de:5e:d5:8b:6f:e7:29:95:e9:44:e8:82: 97:d8:75:fe:27:73:e2:4d:cf:6d:c5:7c:59:ed:7c: 84:93:25:58:a4:63:e8:bf:c6:85:55:48:ef:1f:12: cf:80:44:eb:8c:33:65:6e:2f:45:51:c1:a6:1a:48: 38:3b:8d:4f:3a:15:56:77:60:69:94:2d:d1:f5:e2: e3:6a:07:91:92:43:b5:dc:fc:b0:20:6b:60:98:b3: 70:77:f6:53:fb:96:c4:90:d3:a1:5e:6d:51:4d:49: b6:0c:91:eb:be:f1:70:80:1d:a3:84:ec:1b:01:8d: d1:20:2f:f3:f0:8a:20:4e:30:08:3e:c9:6a:ce:ec: db:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E7:C3:F5:54:60:5A:D2:8E:B7:93:CE:E4:14:E5:55:B3:F1:51:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e3a3273-5100-3cca-aa8e-cbfb0a174d6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:3e:ab:bd:f7:63:c9:51:9d:70:46:93:d0:33:4b:49:f2:b6: 6b:27:5b:f3:58:10:fc:cd:cf:4b:19:7e:57:55:5f:2b:b3:94: 1d:d5:4f:e6:21:7d:f3:55:f3:f4:f6:dd:63:8b:a5:60:ff:6c: 49:74:c4:72:ba:57:8e:1e:17:43:cd:ec:5c:40:ec:ec:05:77: f0:c2:35:94:98:5a:16:ff:01:8b:34:b3:f7:b7:b7:11:0f:1c: 65:95:27:0f:a3:f4:87:73:fe:99:67:db:68:1a:a6:19:91:9d: 0a:7a:90:cc:68:bb:47:ba:f3:03:f7:09:15:aa:55:ea:83:c5: b7:77:fd:3b:48:bf:9b:1c:ce:d5:af:b5:65:9f:de:4e:ea:5c: a3:c6:68:9f:aa:2e:fb:5d:fc:ad:f0:9f:7a:14:e4:79:df:a1: 19:3b:f6:5a:e8:e4:5d:09:78:d0:66:12:f5:5b:96:c3:68:98: 85:fb:86:da:e4:be:1f:e9:79:b3:b9:38:63:12:f6:81:d2:e4: 62:03:ad:b4:c0:f2:a7:e8:b5:96:c5:a9:57:da:61:2d:f2:10: bf:ca:99:42:c4:cb:9d:ba:6c:39:32:8e:5a:99:3f:29:75:e2: cc:93:da:5f:e3:d4:ee:73:62:bd:44:3d:2b:b0:6e:a3:ba:1c: f3:f9:82:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPKQspybt0KiYYsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk YjAxNzFmN2YtZTAyZS00OGQzLTliMzAtMTg0NjY2ZjBiN2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYKxByDiYe7QrSG5DcVSCsaiCCIA/SfuqLcZ KpENaNlTmeJYAdzJemBt2+BG7iT0Sr63vq/ok6T7m6fqztgCSX41z/y7UFxxWMM6 qhlsDNjfmrewdSagH2NlRnJs7/gmAS56X5yMRoZzeotFreWNOyE6eAjmlNYqRvje XtWLb+cplelE6IKX2HX+J3PiTc9txXxZ7XyEkyVYpGPov8aFVUjvHxLPgETrjDNl bi9FUcGmGkg4O41POhVWd2BplC3R9eLjageRkkO13PywIGtgmLNwd/ZT+5bEkNOh Xm1RTUm2DJHrvvFwgB2jhOwbAY3RIC/z8IogTjAIPslqzuzbSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfnw/VUYFrSjreTzuQU5VWz8VFUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmUzYTMyNzMtNTEwMC0z Y2NhLWFhOGUtY2JmYjBhMTc0ZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8+sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8+q733Y8lRnXBGk9AzS0nytmsnW/NYEPzNz0sZfldVXyuzlB3VT+Yh ffNV8/T23WOLpWD/bEl0xHK6V44eF0PN7FxA7OwFd/DCNZSYWhb/AYs0s/e3txEP HGWVJw+j9Idz/pln22gaphmRnQp6kMxou0e68wP3CRWqVeqDxbd3/TtIv5scztWv tWWf3k7qXKPGaJ+qLvtd/K3wn3oU5HnfoRk79lro5F0JeNBmEvVblsNomIX7htrk vh/pebO5OGMS9oHS5GIDrbTA8qfotZbFqVfaYS3yEL/KmULEy526bDkyjlqZPyl1 4syT2l/j1O5zYr1EPSuwbqO6HPP5glU= -----END CERTIFICATE-----Generated at Mon Oct 20 04:58:20 2025 by rpki-client