$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c98e20b-ae4b-3d82-923c-68c5b2dad3b8.roa File: 5c98e20b-ae4b-3d82-923c-68c5b2dad3b8.roa (raw, json) Hash identifier: IEhAIqzj1dHHiXpUSfN6HG2L/vFkR6BqtrsEDqbYYrQ= Subject key identifier: 01:A8:A9:D8:25:F3:EE:0B:1B:6D:03:7F:88:28:90:EE:50:CA:88:34 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B075C517F99162944155580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c98e20b-ae4b-3d82-923c-68c5b2dad3b8.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.211.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:5c:51:7f:99:16:29:44:15:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=5e4dabb0-2a6d-4eaa-8c55-749be01d5199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:af:cd:4e:69:27:e5:50:77:12:a2:1e:f9:40: f5:85:51:6c:d5:e2:0b:aa:f9:4e:f3:f6:92:ad:d0: 35:e8:73:fc:b9:f3:00:00:3d:df:60:af:9d:68:a8: d8:b6:4d:dc:dc:41:45:a3:96:c7:9b:20:3c:42:76: 9f:22:5b:e2:03:be:e6:fa:9c:2e:fc:c4:ad:fd:a3: 46:64:62:12:ea:d7:61:e5:3c:ae:cb:bd:49:89:8f: c2:90:cb:18:e0:69:d5:dd:9c:85:7d:9a:85:bf:fb: 9b:f7:29:10:0d:5c:a5:11:2a:f2:48:42:a6:51:27: b1:02:d2:a2:90:dc:55:3f:e4:03:a9:44:59:a9:af: c7:60:69:a2:e3:e4:ca:12:a2:57:5e:be:51:13:56: c8:50:d6:1a:fb:59:0c:51:cb:46:a3:d9:ed:df:14: 78:ae:d4:28:ef:1b:c1:64:ae:05:4b:65:69:61:9f: 8b:c1:ba:94:04:ce:ef:cc:98:d2:4c:d3:f0:6f:34: 63:bb:79:9c:62:9f:d9:d4:f2:1a:1a:9f:34:2a:eb: 8b:e3:f1:0c:84:9a:66:40:a8:e1:97:08:99:99:15: ad:9e:37:d0:5d:98:cf:69:4e:a9:03:fb:8a:0a:b8: 6f:7a:60:2a:8e:85:14:45:e2:3c:75:88:b0:e7:4e: 81:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A8:A9:D8:25:F3:EE:0B:1B:6D:03:7F:88:28:90:EE:50:CA:88:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c98e20b-ae4b-3d82-923c-68c5b2dad3b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:04:1c:ca:4e:7a:23:b7:06:0f:2a:f3:0f:bf:6f:1a:9a:16: f7:70:7e:bd:32:d0:39:05:b0:6d:ec:e7:ff:11:c0:65:89:bb: 6e:9b:ab:6a:c1:ae:ce:60:a6:d8:73:2c:c4:7c:a0:5f:2e:1e: ba:7f:37:c3:61:ac:c0:82:35:5a:4f:56:31:7c:f0:66:ff:f4: 8c:7e:65:07:82:16:8a:12:19:fa:7c:b5:38:59:d6:10:3d:97: 4c:81:06:fe:d4:a0:62:fe:4d:27:93:b3:eb:e9:95:51:57:dd: 45:9c:3a:35:16:63:23:58:cf:0d:6f:c6:6f:c0:7a:f1:30:11: 06:65:d8:8f:3e:75:30:2f:de:58:71:59:30:3d:be:ea:cf:1e: d9:b0:2b:9a:b6:42:d0:f0:f3:da:de:c3:b7:47:56:3e:55:ec: 18:02:db:b3:f4:4b:ec:14:5c:18:2f:e3:16:79:aa:98:dc:e2: f3:c5:a2:62:cb:5e:83:84:93:82:30:58:08:06:f1:cd:39:b2: 0c:c7:21:18:4d:b2:76:70:0e:97:bc:ad:63:e8:86:9f:bd:91: 0b:23:a7:17:8c:f4:d1:08:e1:29:01:31:a7:3c:1d:fb:0f:85: 68:5b:0d:6d:22:dc:eb:d1:6a:94:f0:58:e9:50:72:14:bf:a2: 62:b7:40:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1xRf5kWKUQVVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NWU0ZGFiYjAtMmE2ZC00ZWFhLThjNTUtNzQ5YmUwMWQ1MTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAya/NTmkn5VB3EqIe+UD1hVFs1eILqvlO8/aS rdA16HP8ufMAAD3fYK+daKjYtk3c3EFFo5bHmyA8QnafIlviA77m+pwu/MSt/aNG ZGIS6tdh5Tyuy71JiY/CkMsY4GnV3ZyFfZqFv/ub9ykQDVylESrySEKmUSexAtKi kNxVP+QDqURZqa/HYGmi4+TKEqJXXr5RE1bIUNYa+1kMUctGo9nt3xR4rtQo7xvB ZK4FS2VpYZ+LwbqUBM7vzJjSTNPwbzRju3mcYp/Z1PIaGp80KuuL4/EMhJpmQKjh lwiZmRWtnjfQXZjPaU6pA/uKCrhvemAqjoUUReI8dYiw506BaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGoqdgl8+4LG20Df4gokO5Qyog0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWM5OGUyMGItYWU0Yi0z ZDgyLTkyM2MtNjhjNWIyZGFkM2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9N1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAEHMpOeiO3Bg8q8w+/bxqaFvdwfr0y0DkFsG3s5/8RwGWJu26bq2rB rs5gpthzLMR8oF8uHrp/N8NhrMCCNVpPVjF88Gb/9Ix+ZQeCFooSGfp8tThZ1hA9 l0yBBv7UoGL+TSeTs+vplVFX3UWcOjUWYyNYzw1vxm/AevEwEQZl2I8+dTAv3lhx WTA9vurPHtmwK5q2QtDw89rew7dHVj5V7BgC27P0S+wUXBgv4xZ5qpjc4vPFomLL XoOEk4IwWAgG8c05sgzHIRhNsnZwDpe8rWPohp+9kQsjpxeM9NEI4SkBMac8HfsP hWhbDW0i3OvRapTwWOlQchS/omK3QIQ= -----END CERTIFICATE-----Generated at Mon Oct 20 10:08:33 2025 by rpki-client