$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78f60d9d-9df6-38dc-b136-55c8bec1748a.roa File: 78f60d9d-9df6-38dc-b136-55c8bec1748a.roa (raw, json) Hash identifier: 2tGrspg+5UOPc4vEwWcJx22O3o6vghuuunetlTj3vPY= Subject key identifier: 03:70:2F:A1:D5:5A:F5:43:88:1E:92:C8:03:F7:3D:83:B9:19:F1:40 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B075022CCD2A7D9EA316E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78f60d9d-9df6-38dc-b136-55c8bec1748a.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.210.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:50:22:cc:d2:a7:d9:ea:31:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=70bff72e-911b-4650-9a88-4ca294071557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c3:86:d0:0b:4e:23:c2:7d:8b:7a:07:01:c7: 5d:48:82:ea:58:e6:2e:b1:e1:e8:dd:68:b1:79:2d: 6b:ad:44:0b:72:49:3e:90:5c:75:cb:28:41:fe:28: 4d:96:56:58:95:f9:04:b8:88:5f:bc:96:c2:1a:dd: 68:c1:b4:da:e1:6e:81:35:06:b7:37:ba:22:18:7a: f2:7e:60:31:84:82:81:20:ac:d4:8c:8f:19:b8:29: dd:35:64:68:1b:09:ea:2f:40:ab:44:d8:48:68:4b: c4:c9:85:4b:b1:d9:39:17:6d:46:9f:21:82:77:32: 76:f6:b2:56:86:a0:45:e2:df:ef:b6:0d:8d:13:13: e7:80:5e:2b:a4:23:5d:18:d3:48:7f:d0:39:b9:b6: 6e:1d:77:09:e6:f7:dc:11:e6:70:c2:45:19:5f:df: c6:46:1b:b1:c2:d9:e8:21:be:fb:d5:d4:f9:57:21: 16:b1:3a:54:0b:e4:e9:c7:13:7b:68:f9:9a:b1:e6: 1e:cf:1d:c6:ff:7a:0a:e1:4d:09:e7:06:bc:41:19: 01:50:f5:f1:02:a9:f5:33:7a:7e:ee:1a:02:58:17: 43:e1:1c:5f:13:73:11:55:8b:33:35:28:e9:8f:01: bb:fb:b0:58:a9:6b:3e:1c:c3:57:fd:b5:1d:d7:2a: cf:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:70:2F:A1:D5:5A:F5:43:88:1E:92:C8:03:F7:3D:83:B9:19:F1:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78f60d9d-9df6-38dc-b136-55c8bec1748a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:59:fc:56:24:4b:01:92:af:cd:e8:a7:bd:d8:61:cd:84:c2: cf:98:a4:10:40:bb:42:84:25:ce:c6:06:d7:5d:fd:17:bb:3a: 0e:d8:58:7b:7f:6f:dc:9d:1a:e8:b0:4c:04:dc:6f:53:13:a4: ae:74:e0:7e:76:65:71:9b:d6:02:60:54:c5:e4:29:0a:55:3a: da:5f:9e:71:a5:ea:28:24:41:64:72:c5:fa:71:d5:95:9c:cc: 3a:ee:10:40:9b:55:86:a8:62:b8:08:2b:8f:71:2f:de:05:cc: ce:50:dd:4a:3a:e5:b1:a3:5c:e3:47:48:2b:2e:1c:9b:82:6a: fe:02:38:df:4e:b7:a7:36:fe:70:b0:bc:04:a1:87:4b:3d:1b: c7:a5:72:27:7a:e0:af:80:c7:9c:fd:99:fc:77:ad:17:22:42: f2:7a:b5:46:30:a2:3a:c8:4d:59:e7:c6:11:2c:1b:0c:25:c5: bc:9b:da:9d:25:e8:1f:34:0f:ee:1d:6d:21:15:b5:b5:5e:a0: 8e:32:2e:68:59:8f:a5:1a:45:17:1d:e1:8d:07:2b:d6:90:06: 30:e3:bb:90:83:87:2a:9b:38:34:f7:81:ad:02:0c:18:9b:e9: 85:53:98:33:24:a8:53:d5:34:3a:8a:b9:b7:69:f7:b2:32:71: 51:6f:78:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1AizNKn2eoxboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NzBiZmY3MmUtOTExYi00NjUwLTlhODgtNGNhMjk0MDcxNTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MOG0AtOI8J9i3oHAcddSILqWOYuseHo3Wix eS1rrUQLckk+kFx1yyhB/ihNllZYlfkEuIhfvJbCGt1owbTa4W6BNQa3N7oiGHry fmAxhIKBIKzUjI8ZuCndNWRoGwnqL0CrRNhIaEvEyYVLsdk5F21GnyGCdzJ29rJW hqBF4t/vtg2NExPngF4rpCNdGNNIf9A5ubZuHXcJ5vfcEeZwwkUZX9/GRhuxwtno Ib771dT5VyEWsTpUC+TpxxN7aPmaseYezx3G/3oK4U0J5wa8QRkBUPXxAqn1M3p+ 7hoCWBdD4RxfE3MRVYszNSjpjwG7+7BYqWs+HMNX/bUd1yrPnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANwL6HVWvVDiB6SyAP3PYO5GfFAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzhmNjBkOWQtOWRmNi0z OGRjLWIxMzYtNTVjOGJlYzE3NDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9LXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpZ/FYkSwGSr83op73YYc2Ews+YpBBAu0KEJc7GBtdd/Re7Og7YWHt/ b9ydGuiwTATcb1MTpK504H52ZXGb1gJgVMXkKQpVOtpfnnGl6igkQWRyxfpx1ZWc zDruEECbVYaoYrgIK49xL94FzM5Q3Uo65bGjXONHSCsuHJuCav4CON9Ot6c2/nCw vAShh0s9G8elcid64K+Ax5z9mfx3rRciQvJ6tUYwojrITVnnxhEsGwwlxbyb2p0l 6B80D+4dbSEVtbVeoI4yLmhZj6UaRRcd4Y0HK9aQBjDju5CDhyqbODT3ga0CDBib 6YVTmDMkqFPVNDqKubdp97IycVFveME= -----END CERTIFICATE-----Generated at Mon Oct 20 02:36:37 2025 by rpki-client