$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7bd16bb6-7b80-3326-9ebf-d3e07efc40fc.roa File: 7bd16bb6-7b80-3326-9ebf-d3e07efc40fc.roa (raw, json) Hash identifier: 4yO8cZAaBvFw9c8Oh0lf83EpaRHYjnPw74m9GElEmMU= Subject key identifier: 57:AF:EB:D0:78:6D:CF:C7:4B:27:8B:F8:DF:50:B0:68:57:4E:B2:E2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B328C488ABFC2A743C44D4E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7bd16bb6-7b80-3326-9ebf-d3e07efc40fc.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.209.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:48:8a:bf:c2:a7:43:c4:4d:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=c3f402a8-fa25-4482-a277-80ce66e86776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fa:89:67:9c:c6:1e:d2:3a:54:69:6b:fa:8b: 36:16:91:d2:f5:79:a0:74:88:49:df:2d:24:77:08: 4b:71:9f:71:78:89:a0:bf:91:95:e3:b1:4b:47:90: 44:2b:df:83:9b:67:bc:cc:d5:fb:39:bf:99:a5:6d: 73:9e:1d:bd:c2:8d:d4:4c:24:97:8b:75:4b:c9:c4: de:5a:ee:ef:3e:a0:b3:e2:0e:de:3a:57:21:66:f3: 7b:bd:f0:3b:ab:97:89:a1:c4:70:fe:90:9c:a9:87: b0:8d:65:88:66:08:fd:9d:ae:d1:9c:01:46:43:85: 13:09:75:c3:9a:a5:ae:93:b0:e4:e2:9f:31:96:e9: 20:6d:f1:cf:0f:c9:f2:4d:cf:a6:fc:5d:93:07:68: 5b:7a:4d:52:9a:5e:f9:ab:ab:eb:82:d8:b5:b9:6e: c5:6f:fe:05:63:e9:6c:25:8e:ec:31:19:77:8c:ee: b3:07:29:2d:b3:b6:d3:cc:97:a1:86:91:d0:9a:a1: 6e:64:49:76:4c:39:de:98:9d:80:de:4e:98:ad:9f: 45:b9:b5:f1:e9:17:2a:da:4a:38:76:25:54:34:8d: 37:94:ff:42:23:09:93:f8:83:94:b0:fd:62:c2:8b: 98:9c:fe:a7:18:c4:20:0e:7a:06:7b:4e:f7:d2:22: 5d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AF:EB:D0:78:6D:CF:C7:4B:27:8B:F8:DF:50:B0:68:57:4E:B2:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7bd16bb6-7b80-3326-9ebf-d3e07efc40fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:c3:f9:5f:3c:77:b8:f2:31:1f:c6:62:3c:17:f5:e3:54:c0: 60:c8:be:6b:e4:48:51:08:fc:60:47:fe:2a:dc:c6:d9:3b:02: 2e:87:a7:ad:e1:5e:a4:cb:01:8a:cb:cb:73:2a:d9:42:6c:5c: aa:19:8d:62:90:d8:f9:5d:ab:c9:40:05:79:8a:31:3e:9c:f1: 34:be:22:0e:c3:3a:61:7d:08:f8:5e:2a:e3:6c:b4:ba:26:a6: 88:ed:88:0c:4c:c4:51:d9:ef:50:59:53:9e:69:63:7e:ac:39: 1d:e3:a6:9c:83:93:be:b7:b7:f7:62:3c:bc:42:fd:84:01:be: ad:32:75:b4:02:00:92:c3:7e:8e:88:73:1c:b4:19:45:c4:bc: d7:73:f2:68:a7:01:29:b6:31:49:52:38:02:4f:30:2e:02:35: f7:68:56:49:b2:1b:24:15:fa:01:86:d6:0a:ae:43:37:ce:81: 83:d6:c4:ba:de:a4:b8:db:71:62:76:b6:6a:09:3d:d7:47:b2: c1:d3:f9:1f:18:84:13:ff:0a:f5:76:95:76:b6:33:e4:41:25: d4:6b:78:4e:78:b9:fe:cb:79:83:24:f1:4d:3f:41:a6:51:d2: 63:e5:f2:86:35:e5:49:34:ea:55:6d:e3:f1:dc:97:35:45:c7: 1e:89:7c:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjEiKv8KnQ8RNTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk YzNmNDAyYTgtZmEyNS00NDgyLWEyNzctODBjZTY2ZTg2Nzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PqJZ5zGHtI6VGlr+os2FpHS9XmgdIhJ3y0k dwhLcZ9xeImgv5GV47FLR5BEK9+Dm2e8zNX7Ob+ZpW1znh29wo3UTCSXi3VLycTe Wu7vPqCz4g7eOlchZvN7vfA7q5eJocRw/pCcqYewjWWIZgj9na7RnAFGQ4UTCXXD mqWuk7Dk4p8xlukgbfHPD8nyTc+m/F2TB2hbek1Sml75q6vrgti1uW7Fb/4FY+ls JY7sMRl3jO6zBykts7bTzJehhpHQmqFuZEl2TDnemJ2A3k6YrZ9FubXx6Rcq2ko4 diVUNI03lP9CIwmT+IOUsP1iwouYnP6nGMQgDnoGe0730iJdZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFev69B4bc/HSyeL+N9QsGhXTrLiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2JkMTZiYjYtN2I4MC0z MzI2LTllYmYtZDNlMDdlZmM0MGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9GjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbD+V88d7jyMR/GYjwX9eNUwGDIvmvkSFEI/GBH/ircxtk7Ai6Hp63h XqTLAYrLy3Mq2UJsXKoZjWKQ2Pldq8lABXmKMT6c8TS+Ig7DOmF9CPheKuNstLom pojtiAxMxFHZ71BZU55pY36sOR3jppyDk763t/diPLxC/YQBvq0ydbQCAJLDfo6I cxy0GUXEvNdz8minASm2MUlSOAJPMC4CNfdoVkmyGyQV+gGG1gquQzfOgYPWxLre pLjbcWJ2tmoJPddHssHT+R8YhBP/CvV2lXa2M+RBJdRreE54uf7LeYMk8U0/QaZR 0mPl8oY15Uk06lVt4/HclzVFxx6JfDE= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:41 2025 by rpki-client