$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8fbaa027-d7f6-3f07-813a-4869928c083c.roa File: 8fbaa027-d7f6-3f07-813a-4869928c083c.roa (raw, json) Hash identifier: B62uMOQrVQDveJx5seXGdQ9XnYHI/owvEYZsd+4JQ3U= Subject key identifier: C2:FB:C8:93:CA:3F:98:96:2A:FF:3F:4D:EC:A4:86:8A:FA:DC:34:E1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC76C9D4534556A9C831480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8fbaa027-d7f6-3f07-813a-4869928c083c.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.220.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:6c:9d:45:34:55:6a:9c:83:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=29d116fb-0964-44d7-bc37-e75fe770cd47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:24:8c:4c:9c:d7:37:7d:7e:b3:15:4a:b9:85: 58:78:8c:99:0d:74:3a:8c:44:7e:c7:82:e7:f6:fe: 64:74:c2:51:24:d5:73:a4:38:88:fb:87:1c:6b:94: 6e:e5:8c:29:43:b9:70:8d:72:75:5a:b8:20:2e:05: 40:17:eb:4e:ed:47:31:61:ed:c6:c1:42:16:ad:58: b1:ce:1e:af:29:3d:17:23:fb:0e:6a:7c:95:4e:e6: bb:f4:a7:d1:cb:4a:0a:38:f4:b8:f6:26:0d:ff:6c: 78:b6:41:aa:80:60:1c:8b:4c:d1:77:1f:d5:b5:30: 36:f1:28:14:57:09:16:c3:51:ff:cc:89:83:5d:0f: 65:e7:d6:c0:8a:98:91:4d:03:cf:85:86:d5:eb:d7: d5:66:53:13:55:92:08:66:ea:9b:5c:d7:9c:1c:7f: f6:41:86:69:f1:13:60:99:c0:0c:1e:01:df:1b:33: cf:19:a3:f0:ca:f6:dd:80:c9:30:e3:59:02:88:f7: bd:27:98:d7:20:55:3e:07:de:da:a8:21:6f:db:cf: bc:7c:b6:3c:d4:b9:a1:cc:b1:8c:f8:ca:3c:17:90: 08:cd:00:90:a9:21:55:42:aa:02:36:75:be:7d:b3: a5:08:6b:a9:95:37:26:9f:e8:86:6e:cd:85:2d:b6: 47:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:FB:C8:93:CA:3F:98:96:2A:FF:3F:4D:EC:A4:86:8A:FA:DC:34:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8fbaa027-d7f6-3f07-813a-4869928c083c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:db:b9:a1:9c:c6:54:20:1e:49:51:59:22:10:93:58:5b:2a: a2:0c:e4:f0:9c:e4:92:d4:00:e2:9d:4b:78:44:8e:02:48:37: c1:69:d3:82:2a:b4:a3:3c:7c:01:54:84:1f:95:50:6d:43:bb: a1:ca:56:06:02:8a:a0:4b:7a:cb:97:11:91:6b:88:d9:9e:63: f7:91:2c:b6:1a:e9:0d:15:19:51:88:21:97:2d:27:d2:8c:1b: af:e7:25:48:f3:1f:b2:e9:3d:d0:8f:39:e6:02:71:17:a9:03: a7:75:7e:52:f1:e0:c7:5d:26:81:77:a9:07:70:00:c0:17:28: ea:fe:d7:e4:25:f6:35:bc:64:df:e7:5e:ab:9e:a1:03:23:01: a3:1d:f0:36:57:be:90:49:76:4d:c2:8e:12:37:88:0f:d0:1b: 53:12:18:6f:90:ae:6a:28:28:1e:cb:e8:8b:2f:10:0b:cf:4c: 0c:76:30:e4:31:a6:99:02:fb:7c:af:12:60:71:1d:40:0d:c0: c9:29:5b:5a:82:62:bd:7d:1a:15:94:b1:e0:65:a2:1f:f3:56: 0f:0d:ce:2b:99:11:29:63:39:3d:48:80:d0:dd:1b:d6:52:06: 9e:4f:a8:04:e2:d9:38:2e:00:d3:0f:36:7c:dc:f5:0d:3f:d4: 29:c5:2b:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2ydRTRVapyDFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MjlkMTE2ZmItMDk2NC00NGQ3LWJjMzctZTc1ZmU3NzBjZDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiSMTJzXN31+sxVKuYVYeIyZDXQ6jER+x4Ln 9v5kdMJRJNVzpDiI+4cca5Ru5YwpQ7lwjXJ1WrggLgVAF+tO7UcxYe3GwUIWrVix zh6vKT0XI/sOanyVTua79KfRy0oKOPS49iYN/2x4tkGqgGAci0zRdx/VtTA28SgU VwkWw1H/zImDXQ9l59bAipiRTQPPhYbV69fVZlMTVZIIZuqbXNecHH/2QYZp8RNg mcAMHgHfGzPPGaPwyvbdgMkw41kCiPe9J5jXIFU+B97aqCFv28+8fLY81LmhzLGM +Mo8F5AIzQCQqSFVQqoCNnW+fbOlCGuplTcmn+iGbs2FLbZHFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFML7yJPKP5iWKv8/Teykhor63DThMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGZiYWEwMjctZDdmNi0z ZjA3LTgxM2EtNDg2OTkyOGMwODNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9zPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrbuaGcxlQgHklRWSIQk1hbKqIM5PCc5JLUAOKdS3hEjgJIN8Fp04Iq tKM8fAFUhB+VUG1Du6HKVgYCiqBLesuXEZFriNmeY/eRLLYa6Q0VGVGIIZctJ9KM G6/nJUjzH7LpPdCPOeYCcRepA6d1flLx4MddJoF3qQdwAMAXKOr+1+Ql9jW8ZN/n XqueoQMjAaMd8DZXvpBJdk3CjhI3iA/QG1MSGG+QrmooKB7L6IsvEAvPTAx2MOQx ppkC+3yvEmBxHUANwMkpW1qCYr19GhWUseBloh/zVg8NziuZESljOT1IgNDdG9ZS Bp5PqATi2TguANMPNnzc9Q0/1CnFK2Y= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:27 2025 by rpki-client