$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78413d32-fccc-3f69-a5fd-801f624ac186.roa File: 78413d32-fccc-3f69-a5fd-801f624ac186.roa (raw, json) Hash identifier: s9WMCdRpvmkf7nZDO13QttoFRQhZiD1+kQ3HkC+1WkA= Subject key identifier: 78:9F:F4:5B:36:C0:1D:0E:E4:CA:BD:69:97:82:0C:B2:CF:F7:03:4D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B8BE21A06B4E63B7129D90480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78413d32-fccc-3f69-a5fd-801f624ac186.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 20940 IP address blocks: 23.207.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:1a:06:b4:e6:3b:71:29:d9:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=e379a0c6-2b50-483d-b746-8fa4d89cbedf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1b:e0:ba:c3:0f:54:af:39:ea:16:57:de:c4: 3b:5b:8d:28:66:e9:1b:fc:7e:1f:90:4d:d1:1d:fd: 8f:eb:44:1e:e7:a6:4e:71:37:ac:0a:f4:d6:f1:9c: 6a:2b:8d:be:ba:6a:1d:99:c2:f1:52:6f:75:5c:fe: fc:2f:b1:6f:2d:94:24:18:db:03:16:d7:d5:cd:52: 29:1a:b1:b7:61:5b:3c:ff:da:ba:54:9a:4c:36:89: c2:16:6f:29:18:35:c9:58:b2:aa:8f:7e:73:da:bd: b4:af:40:f8:32:1d:a7:f3:e4:2b:d4:ae:e4:4f:8c: fe:bf:aa:40:a9:a4:af:e6:92:c7:8c:26:09:53:c8: 43:4b:7d:74:dc:86:bf:97:74:ff:37:c5:66:18:c3: 04:4b:b6:f4:ca:72:7e:37:29:8e:63:14:ca:89:96: 77:1a:0c:92:51:f3:8a:2d:65:9b:53:2a:fa:22:8b: 49:b5:b5:89:f1:ae:6b:01:3f:2f:55:36:f1:73:c7: 43:0c:04:ee:f0:54:50:26:d5:81:c1:ea:e2:4a:66: 95:99:cb:08:0c:6c:1b:86:9a:ed:b4:06:f0:cd:ba: 45:40:0d:9b:c7:c5:20:3d:06:be:29:f0:5f:be:23: cd:85:f4:d9:14:2d:e8:ae:ea:e1:38:40:bb:a6:72: b8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:9F:F4:5B:36:C0:1D:0E:E4:CA:BD:69:97:82:0C:B2:CF:F7:03:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78413d32-fccc-3f69-a5fd-801f624ac186.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:86:08:8c:8f:ab:f0:b8:9c:b4:a3:c5:cc:c0:84:88:aa:bc: 5a:27:b1:cd:b3:41:45:52:55:84:cc:d1:de:ec:91:d0:04:75: cb:a7:c3:e9:8e:ad:64:83:6a:99:82:95:45:fb:d9:1a:2d:c2: 5c:01:de:98:34:ed:4b:e0:6b:c8:14:1d:b0:86:7b:44:30:6d: d7:61:f5:82:be:3e:be:16:da:5a:9a:23:a3:67:26:e4:f8:bd: 8c:73:47:d2:67:c8:45:b2:b4:e6:67:e5:ee:17:e2:f8:d8:46: 60:be:e4:6f:6c:57:ac:61:d8:80:8a:98:e1:1e:0f:90:e9:ef: 96:a3:af:c3:f8:be:b6:2f:1d:bb:9b:92:be:25:42:b0:e7:a1: f7:a1:b1:04:d8:55:71:1b:8c:b6:44:bd:9c:81:2a:0b:1c:fa: 01:2c:4e:ad:00:a0:10:23:1a:aa:71:6d:8c:d6:65:4a:b1:27: a2:b5:67:b0:72:41:d3:05:e6:18:19:d5:ea:ab:6b:92:64:a6: 49:37:17:04:60:2c:12:d5:11:56:df:db:f8:ea:dd:03:bf:93: 0f:67:7c:6d:57:b3:37:05:b2:84:78:6b:cb:92:50:2c:ca:d1: ae:32:cf:31:43:ad:b6:7d:1c:3e:cb:9a:d3:8e:42:51:12:f2: f1:64:12:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4hoGtOY7cSnZBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk ZTM3OWEwYzYtMmI1MC00ODNkLWI3NDYtOGZhNGQ4OWNiZWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhvgusMPVK856hZX3sQ7W40oZukb/H4fkE3R Hf2P60Qe56ZOcTesCvTW8ZxqK42+umodmcLxUm91XP78L7FvLZQkGNsDFtfVzVIp GrG3YVs8/9q6VJpMNonCFm8pGDXJWLKqj35z2r20r0D4Mh2n8+Qr1K7kT4z+v6pA qaSv5pLHjCYJU8hDS3103Ia/l3T/N8VmGMMES7b0ynJ+NymOYxTKiZZ3GgySUfOK LWWbUyr6IotJtbWJ8a5rAT8vVTbxc8dDDATu8FRQJtWBweriSmaVmcsIDGwbhprt tAbwzbpFQA2bx8UgPQa+KfBfviPNhfTZFC3orurhOEC7pnK4+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHif9Fs2wB0O5Mq9aZeCDLLP9wNNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzg0MTNkMzItZmNjYy0z ZjY5LWE1ZmQtODAxZjYyNGFjMTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8/JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSGCIyPq/C4nLSjxczAhIiqvFonsc2zQUVSVYTM0d7skdAEdcunw+mO rWSDapmClUX72RotwlwB3pg07Uvga8gUHbCGe0Qwbddh9YK+Pr4W2lqaI6NnJuT4 vYxzR9JnyEWytOZn5e4X4vjYRmC+5G9sV6xh2ICKmOEeD5Dp75ajr8P4vrYvHbub kr4lQrDnofehsQTYVXEbjLZEvZyBKgsc+gEsTq0AoBAjGqpxbYzWZUqxJ6K1Z7By QdMF5hgZ1eqra5Jkpkk3FwRgLBLVEVbf2/jq3QO/kw9nfG1XszcFsoR4a8uSUCzK 0a4yzzFDrbZ9HD7LmtOOQlES8vFkEjI= -----END CERTIFICATE-----Generated at Mon Oct 20 00:28:04 2025 by rpki-client