$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71aee59f-7deb-3380-8a9e-a24b510c47c3.roa File: 71aee59f-7deb-3380-8a9e-a24b510c47c3.roa (raw, json) Hash identifier: jnFnL7MvHSr0OSH+lrviL6IuRhgJV2vCQkm4PXnx/P8= Subject key identifier: FC:47:E3:1B:A7:14:D6:D2:B8:01:A3:7F:E4:4C:41:E7:D6:89:8C:F7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583CA2B4F7429D1BB5494AA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71aee59f-7deb-3380-8a9e-a24b510c47c3.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.206.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:a2:b4:f7:42:9d:1b:b5:49:4a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=6ab5e028-62da-4831-8164-e8e5caf465b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:59:17:e5:b2:76:4c:9c:e9:d5:11:d8:62:d7: 6a:3f:3c:85:39:44:89:f1:3a:2e:2a:22:2d:c7:7c: ed:d7:2d:fc:41:f6:2a:9e:81:8d:8a:4e:52:91:7e: 89:c4:1e:df:e9:83:dd:92:92:0d:42:cb:f0:97:17: 5c:8f:a5:68:4c:14:2e:f1:ec:c7:5a:a1:81:19:3b: c0:9a:12:d0:3f:86:4c:ee:12:d2:ca:32:ea:5b:93: 68:45:c4:66:f8:50:5a:f8:97:21:a2:72:f9:92:9e: 4b:9b:5f:28:bc:fe:4b:51:33:9b:a4:47:4d:6a:36: 82:81:5f:55:fd:9a:f8:2e:cb:14:90:b7:8d:da:21: 2d:75:e2:c3:8f:12:56:5b:58:61:77:ea:e8:93:12: 97:22:3e:b8:77:94:f0:01:8a:02:01:0c:cf:3d:0d: 83:63:10:64:ad:3a:c0:4a:f3:7d:5e:d4:ad:10:02: 10:b6:b7:8b:41:c4:d5:d1:2b:f5:fa:7a:43:80:1d: d9:92:7e:c4:b9:96:af:31:a8:9b:c3:82:b6:f7:6c: 36:75:ad:be:a4:09:b8:ca:02:6c:24:d2:c0:b6:d2: ac:83:20:b2:19:b4:91:c4:31:4d:fe:2a:41:95:fa: 62:1e:34:39:ff:2e:44:20:be:a7:31:bd:03:a9:29: 1d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:47:E3:1B:A7:14:D6:D2:B8:01:A3:7F:E4:4C:41:E7:D6:89:8C:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71aee59f-7deb-3380-8a9e-a24b510c47c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:fb:18:16:bd:a6:25:ab:d5:7a:26:4b:dc:f4:70:5f:90:cd: d9:a0:e2:54:9e:a7:5d:ab:18:5e:a9:54:88:c1:ac:76:c7:9e: 25:0d:91:50:4a:f2:38:ca:16:9c:72:52:9c:30:7c:14:0a:c5: 42:30:91:93:08:a4:0d:cd:a5:f6:3b:d5:45:3a:07:3c:df:d8: 3f:9e:b3:6d:f2:55:42:84:5a:b9:eb:ad:9a:ac:c3:eb:79:d0: cb:b9:fb:04:67:b5:b5:8c:02:36:55:3e:ec:7d:ad:0a:36:23: e6:02:8d:ab:82:c9:16:20:b4:e9:e3:ab:55:9a:d8:06:f9:19: 7d:97:6b:aa:5b:dc:05:18:22:29:76:ca:13:94:4c:b9:67:71: 9e:10:7a:c4:dd:6f:87:79:1b:33:8f:a9:9e:de:39:66:69:ad: 27:ff:9e:68:e6:83:26:f2:95:ef:c5:94:5a:75:b7:82:76:1d: 86:a7:a7:9b:42:69:1a:2c:dc:f0:a2:45:ac:48:1d:63:c8:8f: f9:5f:8a:04:80:ae:21:51:7b:19:1c:64:4e:33:21:d6:87:61: d0:fd:aa:70:6a:6c:84:c3:96:84:45:00:1b:d9:f8:42:e7:3f: 95:c9:bd:a7:14:d6:f0:0f:ab:95:21:8e:cf:10:9c:74:83:da: c8:0e:a4:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPKK090KdG7VJSqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NmFiNWUwMjgtNjJkYS00ODMxLTgxNjQtZThlNWNhZjQ2NWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilkX5bJ2TJzp1RHYYtdqPzyFOUSJ8TouKiIt x3zt1y38QfYqnoGNik5SkX6JxB7f6YPdkpINQsvwlxdcj6VoTBQu8ezHWqGBGTvA mhLQP4ZM7hLSyjLqW5NoRcRm+FBa+JchonL5kp5Lm18ovP5LUTObpEdNajaCgV9V /Zr4LssUkLeN2iEtdeLDjxJWW1hhd+rokxKXIj64d5TwAYoCAQzPPQ2DYxBkrTrA SvN9XtStEAIQtreLQcTV0Sv1+npDgB3Zkn7EuZavMaibw4K292w2da2+pAm4ygJs JNLAttKsgyCyGbSRxDFN/ipBlfpiHjQ5/y5EIL6nMb0DqSkdxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxH4xunFNbSuAGjf+RMQefWiYz3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzFhZWU1OWYtN2RlYi0z MzgwLThhOWUtYTI0YjUxMGM0N2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF87GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABD7GBa9piWr1XomS9z0cF+Qzdmg4lSep12rGF6pVIjBrHbHniUNkVBK 8jjKFpxyUpwwfBQKxUIwkZMIpA3NpfY71UU6Bzzf2D+es23yVUKEWrnrrZqsw+t5 0Mu5+wRntbWMAjZVPux9rQo2I+YCjauCyRYgtOnjq1Wa2Ab5GX2Xa6pb3AUYIil2 yhOUTLlncZ4QesTdb4d5GzOPqZ7eOWZprSf/nmjmgybyle/FlFp1t4J2HYanp5tC aRos3PCiRaxIHWPIj/lfigSAriFRexkcZE4zIdaHYdD9qnBqbITDloRFABvZ+ELn P5XJvacU1vAPq5Uhjs8QnHSD2sgOpKM= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:37 2025 by rpki-client