$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/679d2f56-b451-3eeb-99fb-c0566f2fefa6.roa File: 679d2f56-b451-3eeb-99fb-c0566f2fefa6.roa (raw, json) Hash identifier: Zit3nT+DNQ3eCC08ZokoxVEyEm4Gk8L0dFH7eiNMik8= Subject key identifier: 13:45:81:E8:54:8C:D2:D0:D8:E6:EF:E3:56:17:4E:01:F3:71:69:A2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD2003F6532D2563E439440 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/679d2f56-b451-3eeb-99fb-c0566f2fefa6.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.214.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d2:00:3f:65:32:d2:56:3e:43:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=7434fe8b-8d9a-42ae-b8c3-e2f348c1daff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:76:8a:99:b7:b3:26:70:9b:2b:fc:5f:d9:f0: ed:85:02:7a:58:01:90:2b:0f:81:30:91:5c:39:06: 40:fa:26:f9:f3:b6:9d:66:32:21:e6:85:52:49:a9: da:5e:fb:d5:d9:c6:98:d1:82:c2:69:95:f8:11:57: 1c:06:04:a1:d4:82:26:ac:22:3f:61:dd:85:10:6f: b6:96:d3:49:88:cb:86:38:6d:1e:1c:91:39:c5:b5: 49:e4:c9:9e:89:28:ab:5e:99:07:76:56:a0:50:fb: 9c:cf:b1:61:9b:55:f9:75:fe:ac:0d:80:43:f7:e2: 41:cf:8e:bc:a6:56:c5:44:65:50:ad:b5:b3:55:ae: 9e:89:9e:7c:64:5c:72:6e:d9:bf:8f:d8:81:ca:31: 50:e6:cf:a1:d4:ce:c7:9e:45:14:9e:a3:74:4d:16: 2c:fa:dd:9c:77:db:a9:af:b9:9f:14:48:c7:eb:b5: c3:2d:4e:0c:f8:f9:69:ae:bf:6c:c2:2a:33:82:a8: 7a:50:be:7f:a6:55:28:84:70:48:e7:d8:97:33:c1: df:79:51:a8:11:1f:d7:22:33:a3:a5:5f:70:c3:11: 57:ab:3f:0c:de:b9:28:03:d5:b7:d6:8d:96:14:c7: 11:bc:68:35:32:ce:d4:ad:7f:0f:07:e8:a2:f8:5f: 67:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:45:81:E8:54:8C:D2:D0:D8:E6:EF:E3:56:17:4E:01:F3:71:69:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/679d2f56-b451-3eeb-99fb-c0566f2fefa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:81:e7:e7:2a:97:55:9a:0c:fa:80:05:e1:67:7f:07:8b:65: 05:49:91:50:68:35:4d:d5:a0:42:0e:4a:66:74:c5:57:18:4f: 83:fa:ff:05:58:ef:ba:e3:07:3f:1c:8d:b1:a3:14:dc:64:cf: d1:b3:db:88:d7:41:ca:92:3a:42:b3:77:bd:fe:58:aa:94:e6: 4f:70:78:67:e9:c1:f2:69:a6:e0:a3:23:ad:46:04:5a:ab:8f: 65:ec:45:a0:79:4e:4a:8f:e8:1d:ea:9f:5c:92:71:2a:ba:59: bd:9f:c9:4e:5e:55:23:5b:ca:2e:b8:cd:0c:80:af:92:2e:1d: 0e:5a:9a:e5:14:dc:ab:99:7f:84:5d:4e:0c:04:19:03:86:c5: e1:15:c5:c7:c3:3b:a1:26:24:42:79:2c:98:2b:92:76:47:69: 36:5f:fc:a2:b6:f7:f4:e8:76:0f:31:5a:3a:d0:1b:8a:47:d0: 58:a2:b0:af:96:3a:93:6c:f3:cb:70:2e:52:42:ee:80:c4:b3: 8a:37:a0:46:5a:43:3b:69:fa:5f:e3:07:77:bd:66:38:61:f5: ff:f3:fd:36:0d:6f:c1:99:04:89:2f:19:5c:5d:25:84:dc:65: 66:96:be:18:1f:47:03:5e:56:9e:64:77:1a:2d:92:ff:59:b2: 7c:e7:83:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0gA/ZTLSVj5DlEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk NzQzNGZlOGItOGQ5YS00MmFlLWI4YzMtZTJmMzQ4YzFkYWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnaKmbezJnCbK/xf2fDthQJ6WAGQKw+BMJFc OQZA+ib587adZjIh5oVSSanaXvvV2caY0YLCaZX4EVccBgSh1IImrCI/Yd2FEG+2 ltNJiMuGOG0eHJE5xbVJ5MmeiSirXpkHdlagUPucz7Fhm1X5df6sDYBD9+JBz468 plbFRGVQrbWzVa6eiZ58ZFxybtm/j9iByjFQ5s+h1M7HnkUUnqN0TRYs+t2cd9up r7mfFEjH67XDLU4M+Plprr9swiozgqh6UL5/plUohHBI59iXM8HfeVGoER/XIjOj pV9wwxFXqz8M3rkoA9W31o2WFMcRvGg1Ms7UrX8PB+ii+F9nDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNFgehUjNLQ2Obv41YXTgHzcWmiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjc5ZDJmNTYtYjQ1MS0z ZWViLTk5ZmItYzA1NjZmMmZlZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ZUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGB5+cql1WaDPqABeFnfweLZQVJkVBoNU3VoEIOSmZ0xVcYT4P6/wVY 77rjBz8cjbGjFNxkz9Gz24jXQcqSOkKzd73+WKqU5k9weGfpwfJppuCjI61GBFqr j2XsRaB5TkqP6B3qn1yScSq6Wb2fyU5eVSNbyi64zQyAr5IuHQ5amuUU3KuZf4Rd TgwEGQOGxeEVxcfDO6EmJEJ5LJgrknZHaTZf/KK29/Todg8xWjrQG4pH0FiisK+W OpNs88twLlJC7oDEs4o3oEZaQztp+l/jB3e9Zjhh9f/z/TYNb8GZBIkvGVxdJYTc ZWaWvhgfRwNeVp5kdxotkv9Zsnzngx0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:29:52 2025 by rpki-client