$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ba80cb3-2051-35fa-bbfd-5d4b508010fd.roa File: 3ba80cb3-2051-35fa-bbfd-5d4b508010fd.roa (raw, json) Hash identifier: CL69rc5aFexzES9HvSzr3UX9ZNHIS1LanyVb95pW0BM= Subject key identifier: 49:C8:C5:84:73:7F:3D:45:63:65:88:5B:E7:DD:1C:D1:86:04:B9:0E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD204B623F36113C2359EF0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ba80cb3-2051-35fa-bbfd-5d4b508010fd.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.216.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d2:04:b6:23:f3:61:13:c2:35:9e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=56d3e165-6a03-4d61-9208-1acd77163f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b8:1e:c9:04:83:d6:ab:10:fd:07:ae:0c:6d: 2c:8d:81:50:f0:e9:01:b6:16:34:e9:51:b2:e5:30: 1e:e0:7e:e2:2f:3b:0b:5a:4f:b1:87:75:29:fd:b7: 7a:08:37:06:ca:d8:38:5e:28:0c:3f:94:86:46:dc: 23:5f:c3:c0:12:da:a5:8b:69:18:2d:9c:ab:ae:b1: 9c:d2:bd:f9:5b:a4:5d:ac:b5:cd:4e:b3:3b:c2:e0: e3:be:5b:19:3c:2f:40:54:7b:e7:9e:ce:cd:f4:88: 40:46:0d:46:b8:3a:6f:dc:25:ea:97:17:cd:98:4d: 0b:c1:4d:16:4f:cd:43:e3:08:40:47:34:61:6c:d6: 50:49:a6:7d:aa:31:28:bb:bb:ec:0b:04:ca:78:72: 90:2c:2d:c5:2c:5c:40:3d:46:14:b6:7d:dd:32:f3: 4b:92:bb:b9:10:03:bd:f8:55:a3:e5:76:40:10:8f: 23:50:0a:cf:20:49:2a:30:f6:e7:ba:48:76:ec:26: 50:5a:02:1a:8f:d4:02:9e:8e:f9:99:05:c1:0f:85: 13:0f:4d:5b:f9:de:8d:aa:aa:e3:30:ac:64:aa:d1: 93:77:b7:8d:6b:d7:2f:ba:1c:96:72:b2:ab:dc:94: 45:c4:12:25:61:5f:bc:27:3d:f8:b7:5e:13:78:bf: fd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C8:C5:84:73:7F:3D:45:63:65:88:5B:E7:DD:1C:D1:86:04:B9:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ba80cb3-2051-35fa-bbfd-5d4b508010fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.216.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:08:cb:44:b8:60:de:54:1d:02:3a:69:c8:f3:00:10:34:37: f4:db:ea:c7:af:40:c6:c5:dc:51:cd:a0:30:33:87:62:15:57: a1:61:c4:3c:aa:9c:17:ed:49:65:7f:ac:a3:36:0e:56:ab:bc: ed:18:bc:5c:af:ba:e3:ed:3f:81:b6:70:d1:1d:af:bb:af:86: 97:20:5f:f4:42:f9:26:8e:ef:60:bd:37:96:26:aa:a0:fc:16: 03:c7:c3:18:d6:04:a5:b0:44:9a:8b:4d:1e:1b:49:3b:be:f1: 16:ed:c2:da:4f:ee:1d:fb:17:69:95:15:56:92:d7:3a:ae:cf: e4:04:2a:c1:52:d9:2b:b5:5a:44:2a:a2:c8:1d:ad:19:f1:07: 94:44:56:02:84:ad:33:35:a5:23:8f:60:93:ee:f0:7a:94:cc: 26:83:74:1c:fd:bb:26:97:a9:99:86:53:6d:da:4c:95:c8:ab: 5c:9b:d4:15:4e:d7:91:21:c1:32:20:33:ca:d9:d7:d2:57:53: 04:2f:70:06:e6:23:62:51:1a:3e:fb:ce:69:ad:f6:f4:00:5b: fe:1f:13:b3:70:29:47:9b:b4:bd:ea:03:a2:e9:60:2c:e3:45: 55:ce:12:67:3f:f5:79:c6:51:bb:c9:42:5a:19:00:52:0c:8c: 85:c2:1e:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0gS2I/NhE8I1nvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk NTZkM2UxNjUtNmEwMy00ZDYxLTkyMDgtMWFjZDc3MTYzZjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7geyQSD1qsQ/QeuDG0sjYFQ8OkBthY06VGy 5TAe4H7iLzsLWk+xh3Up/bd6CDcGytg4XigMP5SGRtwjX8PAEtqli2kYLZyrrrGc 0r35W6RdrLXNTrM7wuDjvlsZPC9AVHvnns7N9IhARg1GuDpv3CXqlxfNmE0LwU0W T81D4whARzRhbNZQSaZ9qjEou7vsCwTKeHKQLC3FLFxAPUYUtn3dMvNLkru5EAO9 +FWj5XZAEI8jUArPIEkqMPbnukh27CZQWgIaj9QCno75mQXBD4UTD01b+d6Nqqrj MKxkqtGTd7eNa9cvuhyWcrKr3JRFxBIlYV+8Jz34t14TeL/9ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnIxYRzfz1FY2WIW+fdHNGGBLkOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2JhODBjYjMtMjA1MS0z NWZhLWJiZmQtNWQ0YjUwODAxMGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9iFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgIy0S4YN5UHQI6acjzABA0N/Tb6sevQMbF3FHNoDAzh2IVV6FhxDyq nBftSWV/rKM2DlarvO0YvFyvuuPtP4G2cNEdr7uvhpcgX/RC+SaO72C9N5YmqqD8 FgPHwxjWBKWwRJqLTR4bSTu+8RbtwtpP7h37F2mVFVaS1zquz+QEKsFS2Su1WkQq osgdrRnxB5REVgKErTM1pSOPYJPu8HqUzCaDdBz9uyaXqZmGU23aTJXIq1yb1BVO 15EhwTIgM8rZ19JXUwQvcAbmI2JRGj77zmmt9vQAW/4fE7NwKUebtL3qA6LpYCzj RVXOEmc/9XnGUbvJQloZAFIMjIXCHq8= -----END CERTIFICATE-----Generated at Mon Oct 20 05:04:41 2025 by rpki-client