$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7da2d404-3d2a-3f91-945a-890dfa73775b.roa File: 7da2d404-3d2a-3f91-945a-890dfa73775b.roa (raw, json) Hash identifier: urzQqP4dksFjamFRoB670cdxinNao5Q5JgZIjGYVX68= Subject key identifier: 27:2B:47:27:B0:27:9B:D7:A4:1C:4D:3E:86:94:42:73:49:47:20:06 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD206C7460600B6AE0A1F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7da2d404-3d2a-3f91-945a-890dfa73775b.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.217.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d2:06:c7:46:06:00:b6:ae:0a:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=bce7dbdc-cded-4ae6-adb6-2d1334e75e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c7:26:36:a3:a7:a9:ef:e9:c0:83:5e:f4:3d: 4a:16:0d:ce:51:f2:cf:3d:54:b1:a1:d7:ae:7c:83: 5d:9e:2c:3f:88:ac:96:1c:66:31:23:5d:89:c9:dd: 41:01:11:76:f5:35:43:97:04:16:64:1d:4c:d9:27: 79:68:d9:44:bb:68:b0:2e:78:d4:6a:ed:52:81:da: fd:ee:f2:90:6f:87:e1:6e:78:11:f5:b4:ff:6b:11: 28:fb:a4:5f:99:0e:7d:d1:95:77:99:25:91:7b:4f: 81:fb:69:7d:76:66:8c:1b:47:1e:4e:93:3a:e1:1b: cf:4b:7c:7d:4f:eb:a7:17:f7:a5:d4:e9:b2:50:ce: 24:67:1e:2f:ba:2a:fd:f6:44:79:fc:c0:42:4a:fe: 8d:11:b6:3a:63:98:eb:74:5a:ba:e3:13:76:93:fc: 1e:1d:64:d8:ad:56:a5:a3:eb:99:d2:b6:a6:bd:dc: 60:e5:d3:d2:ae:b0:9d:c2:95:02:28:70:a6:bb:c8: bd:90:fd:8e:2c:7c:53:c3:c3:de:ae:4d:2f:53:e1: 6f:28:37:08:77:e1:95:7b:9f:b5:5c:43:da:64:78: 57:07:d9:3c:7a:4d:66:46:81:35:f7:b6:ae:ba:74: ae:0f:a9:6e:b2:2e:ff:4d:20:5c:c6:ea:e3:35:27: 94:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2B:47:27:B0:27:9B:D7:A4:1C:4D:3E:86:94:42:73:49:47:20:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7da2d404-3d2a-3f91-945a-890dfa73775b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:f1:ea:52:46:37:70:8a:19:0a:0e:61:99:60:bb:07:46:01: 3b:72:24:25:0f:79:3f:6e:97:f2:c8:9c:3c:b2:7e:2b:49:5e: 7a:c0:f3:8e:a7:f8:d9:d6:e1:11:9a:bc:19:77:9a:39:4b:fa: 21:ef:bd:c3:0f:d2:d8:31:e4:74:5e:a6:1e:11:59:0e:a7:1c: 07:25:4a:ee:4b:1b:9d:d1:b0:19:4f:aa:30:b3:f4:4e:b8:34: 50:77:62:40:3c:5e:f5:17:63:8a:9b:a6:7b:d9:69:0b:af:e5: d7:1d:d2:3f:c6:35:8f:a5:09:86:3a:4d:8f:95:a1:b5:07:d3: e3:5e:7f:19:fa:79:b4:f9:33:57:6e:39:c0:ed:dd:fd:79:fb: 1d:95:c2:af:99:c6:bf:0a:f9:ef:0a:77:09:9e:f4:7b:51:43: 3f:36:dd:f6:3e:22:db:b7:24:ad:4e:b5:c0:cc:88:dd:bd:92: 8b:69:95:bb:e4:22:87:9e:26:bb:dc:54:05:ce:26:ac:6d:d6: bc:01:f2:f9:f2:f1:91:5c:c3:0e:95:5f:c7:75:ab:0c:5f:81: dd:35:a0:27:7e:4c:04:3f:02:64:e4:df:5d:7d:1a:c3:2d:f5: b4:66:50:ea:f2:f7:fa:80:1a:82:0c:34:09:f2:47:c5:cb:fc: b0:1c:00:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0gbHRgYAtq4KHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk YmNlN2RiZGMtY2RlZC00YWU2LWFkYjYtMmQxMzM0ZTc1ZTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjscmNqOnqe/pwINe9D1KFg3OUfLPPVSxodeu fINdniw/iKyWHGYxI12Jyd1BARF29TVDlwQWZB1M2Sd5aNlEu2iwLnjUau1Sgdr9 7vKQb4fhbngR9bT/axEo+6RfmQ590ZV3mSWRe0+B+2l9dmaMG0ceTpM64RvPS3x9 T+unF/el1OmyUM4kZx4vuir99kR5/MBCSv6NEbY6Y5jrdFq64xN2k/weHWTYrVal o+uZ0ramvdxg5dPSrrCdwpUCKHCmu8i9kP2OLHxTw8Perk0vU+FvKDcId+GVe5+1 XEPaZHhXB9k8ek1mRoE197auunSuD6lusi7/TSBcxurjNSeUywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcrRyewJ5vXpBxNPoaUQnNJRyAGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2RhMmQ0MDQtM2QyYS0z ZjkxLTk0NWEtODkwZGZhNzM3NzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9nQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDx6lJGN3CKGQoOYZlguwdGATtyJCUPeT9ul/LInDyyfitJXnrA846n +NnW4RGavBl3mjlL+iHvvcMP0tgx5HReph4RWQ6nHAclSu5LG53RsBlPqjCz9E64 NFB3YkA8XvUXY4qbpnvZaQuv5dcd0j/GNY+lCYY6TY+VobUH0+Nefxn6ebT5M1du OcDt3f15+x2Vwq+Zxr8K+e8Kdwme9HtRQz823fY+Itu3JK1OtcDMiN29kotplbvk IoeeJrvcVAXOJqxt1rwB8vny8ZFcww6VX8d1qwxfgd01oCd+TAQ/AmTk3119GsMt 9bRmUOry9/qAGoIMNAnyR8XL/LAcAOk= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:48 2025 by rpki-client