$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6247ebac-38f0-39ca-9a49-76333099a32a.roa File: 6247ebac-38f0-39ca-9a49-76333099a32a.roa (raw, json) Hash identifier: XGnV4q9tEfrM6AfbKODcSrVXFxwsXZWcSghISKdluRA= Subject key identifier: 42:9D:F1:2C:26:13:71:EF:F4:D6:63:D5:16:5A:43:15:BE:C2:7B:9D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B0750FEDAC5DAF591587820 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6247ebac-38f0-39ca-9a49-76333099a32a.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.211.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:50:fe:da:c5:da:f5:91:58:78:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=e6b4e237-bde4-4c67-a5bc-75bdab1fca4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b2:4a:a3:fe:43:9c:f8:af:5a:aa:93:41:d6: 16:d0:51:a4:8b:bc:11:93:3b:f1:e8:c6:bb:6c:f1: 77:69:a2:e4:25:91:89:6d:cc:7d:e6:a3:17:55:1c: e2:7e:ff:da:ff:57:6b:e3:c0:d5:c4:ae:e0:41:18: 31:61:fe:ee:71:dc:31:16:63:d5:6c:00:6e:8e:44: 66:51:c5:84:b9:11:df:53:9a:9f:51:0b:15:35:97: c5:cf:a7:b9:6a:26:18:83:b0:23:a5:69:a7:9f:19: 5e:66:61:1e:ea:14:e8:cb:67:b8:4b:da:e5:91:4f: f4:74:b2:45:d9:cd:e6:ae:f9:b0:10:7a:48:b2:47: b7:73:e8:28:bf:af:2a:7a:4a:1c:0c:4d:02:5e:73: 4e:6c:45:9b:3d:8b:6a:d6:d9:c8:f1:2f:46:16:94: ef:7a:47:38:fc:5a:c8:29:6f:58:4d:76:e9:85:61: f4:e4:9d:27:fb:6a:ee:2a:c0:b9:68:97:a9:b2:70: 0b:44:43:29:40:e1:4c:39:90:f1:1b:03:a0:6d:2c: c5:2c:a6:1b:0c:6d:fd:23:ad:a8:8b:b2:95:65:17: f5:b6:68:16:51:a9:48:64:a9:53:9a:cf:a2:c1:a4: 38:cd:96:74:06:bb:56:97:c9:f5:e0:99:9f:ae:b2: 9c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9D:F1:2C:26:13:71:EF:F4:D6:63:D5:16:5A:43:15:BE:C2:7B:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6247ebac-38f0-39ca-9a49-76333099a32a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:6b:9f:80:84:68:87:70:c1:3f:3c:09:fa:f9:69:34:47:49: 8e:c4:ab:77:c1:ed:4f:01:86:76:b3:02:34:2d:a8:57:4a:a4: eb:04:df:03:3b:db:f0:c9:57:96:82:c0:78:d7:56:0d:6b:22: f4:ad:82:3f:d3:90:59:b8:41:4e:61:93:fb:5d:5a:df:4a:67: 9b:97:22:17:fd:22:b1:e2:b8:07:7e:f7:b5:ee:ad:a3:89:86: db:d7:a0:95:d3:36:17:6b:c9:7a:cc:60:60:c6:b1:93:b9:62: eb:77:42:3e:7c:c3:09:c7:c0:ce:79:f9:40:7e:4c:47:0d:5c: 23:66:89:9c:3e:d0:ac:6e:9c:06:85:52:e0:f9:73:d3:eb:f2: 95:8a:56:a6:81:25:f6:1d:90:31:d2:2a:9f:01:c5:66:4d:d2: e3:a8:4b:49:ec:e9:43:a1:4e:4b:a0:0e:f2:0c:a5:94:fb:05: 30:cc:93:d5:50:cc:74:fd:9f:b3:21:c2:de:c3:68:bf:5d:36: 24:6f:b9:67:54:45:e5:88:d3:cf:1b:35:a8:6c:ac:a0:1e:9d: c0:bb:f0:07:46:ac:03:57:7f:7f:0c:54:ba:d3:6b:c6:72:19: b9:2e:87:1c:dd:e9:32:b2:41:f1:84:e4:3f:0e:26:ec:f8:4e: 49:86:7a:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1D+2sXa9ZFYeCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZTZiNGUyMzctYmRlNC00YzY3LWE1YmMtNzViZGFiMWZjYTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27JKo/5DnPivWqqTQdYW0FGki7wRkzvx6Ma7 bPF3aaLkJZGJbcx95qMXVRzifv/a/1dr48DVxK7gQRgxYf7ucdwxFmPVbABujkRm UcWEuRHfU5qfUQsVNZfFz6e5aiYYg7AjpWmnnxleZmEe6hToy2e4S9rlkU/0dLJF 2c3mrvmwEHpIske3c+gov68qekocDE0CXnNObEWbPYtq1tnI8S9GFpTvekc4/FrI KW9YTXbphWH05J0n+2ruKsC5aJepsnALREMpQOFMOZDxGwOgbSzFLKYbDG39I62o i7KVZRf1tmgWUalIZKlTms+iwaQ4zZZ0BrtWl8n14JmfrrKcHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKd8SwmE3Hv9NZj1RZaQxW+wnudMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjI0N2ViYWMtMzhmMC0z OWNhLTlhNDktNzYzMzMwOTlhMzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9OwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVrn4CEaIdwwT88Cfr5aTRHSY7Eq3fB7U8BhnazAjQtqFdKpOsE3wM7 2/DJV5aCwHjXVg1rIvStgj/TkFm4QU5hk/tdWt9KZ5uXIhf9IrHiuAd+97XuraOJ htvXoJXTNhdryXrMYGDGsZO5Yut3Qj58wwnHwM55+UB+TEcNXCNmiZw+0KxunAaF UuD5c9Pr8pWKVqaBJfYdkDHSKp8BxWZN0uOoS0ns6UOhTkugDvIMpZT7BTDMk9VQ zHT9n7Mhwt7DaL9dNiRvuWdUReWI088bNahsrKAencC78AdGrANXf38MVLrTa8Zy Gbkuhxzd6TKyQfGE5D8OJuz4TkmGerg= -----END CERTIFICATE-----Generated at Mon Oct 20 00:22:52 2025 by rpki-client