$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/909e6753-c3d4-36a2-9048-b11aaf40d7be.roa File: 909e6753-c3d4-36a2-9048-b11aaf40d7be.roa (raw, json) Hash identifier: QgotKO7SFl06rNMMR0fXi/Kv7WaOpzaxB5QNv1nc2Ng= Subject key identifier: 6F:F9:5E:DF:AB:0C:4E:96:77:FC:34:B4:E9:B3:B2:FA:89:D8:3A:B7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B074D0E8CEA67ECF3461380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/909e6753-c3d4-36a2-9048-b11aaf40d7be.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.209.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:4d:0e:8c:ea:67:ec:f3:46:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=2db8df91-ccb1-4c7f-985f-2f930c7bf6af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:17:26:72:6e:e4:56:b4:47:e7:7f:ea:f8:6a: ab:bf:76:91:b8:b4:a1:be:5a:f5:e5:f9:0c:0c:de: db:21:cf:c9:e8:ff:07:19:83:a4:f4:32:eb:a1:4b: d3:47:21:1b:84:02:af:ab:de:d1:2c:16:69:aa:76: dc:ac:5d:dd:21:97:76:75:35:c7:6f:83:12:55:fd: 3a:9d:3d:d0:48:b5:17:42:00:82:f8:11:31:9f:d3: e7:af:88:8e:88:61:1f:b5:63:8b:ad:b1:1c:33:77: 5c:f2:40:29:87:01:7d:36:d6:8c:05:60:e2:b9:0a: f8:a9:5f:de:40:89:5a:d0:d6:31:60:e0:d7:46:f9: a5:75:25:f5:c2:4a:4c:34:f2:8c:cd:40:21:9b:e2: 31:c4:da:cc:64:9f:e6:4b:5f:72:fd:06:d9:bb:99: ef:19:f5:12:b1:71:6c:86:ec:67:f5:89:6d:55:e4: 7c:b5:99:58:51:d1:b5:2b:8c:0b:02:47:7e:ac:2d: 9b:45:e7:8d:74:b1:da:01:71:62:98:81:ef:e4:ff: 4f:23:fe:0d:38:4e:e9:c2:62:9e:63:3a:20:35:a7: 7f:82:96:51:dd:37:3c:4f:fa:c6:d2:a9:ff:4a:d3: ba:13:c5:97:ff:46:fa:32:0f:67:8c:59:1b:da:ea: 11:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F9:5E:DF:AB:0C:4E:96:77:FC:34:B4:E9:B3:B2:FA:89:D8:3A:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/909e6753-c3d4-36a2-9048-b11aaf40d7be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:86:47:d5:f4:7c:e7:d3:52:e7:e5:d0:5f:b5:51:30:c4:cf: 53:61:46:8f:01:7d:69:c2:bb:eb:26:3b:86:f1:97:d0:cb:f3: a5:c4:13:17:5d:22:b8:d3:99:8a:d7:ce:67:f7:56:ed:95:eb: 77:78:3d:c9:8f:0c:6a:24:cb:42:1f:a4:c9:70:ae:56:b9:c4: 1a:93:08:b3:82:4d:0b:51:98:e6:9b:df:45:05:c8:6c:cd:54: 69:08:45:07:7b:de:53:23:fd:f1:99:53:08:e2:23:34:21:3b: 69:0e:32:d4:63:de:ae:c3:4d:8f:22:95:af:04:55:9c:da:06: d1:6a:b8:32:05:cb:5f:0a:f3:0e:2e:1e:ae:d5:a8:d8:db:17: 35:83:77:50:68:2a:f7:6b:1a:7a:8a:3d:ba:9a:14:70:d4:27: 18:fa:e8:bd:b8:0c:6b:52:dc:fd:c1:a5:f3:55:2d:28:b8:05: 2f:22:de:07:3c:4f:e0:18:05:0e:8b:fc:c4:ac:9f:7a:8e:d3: f2:de:8c:37:79:b6:43:07:d8:3c:d9:6d:9b:0e:c6:86:68:ca: f2:df:ac:20:45:37:a1:a3:33:4c:42:e5:c1:4d:2f:17:40:59: 5d:7f:01:b7:38:1d:c2:8c:a3:43:8c:e1:c9:bc:f5:5a:1b:d3: 9a:a3:f0:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB00OjOpn7PNGE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MmRiOGRmOTEtY2NiMS00YzdmLTk4NWYtMmY5MzBjN2JmNmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhcmcm7kVrRH53/q+Gqrv3aRuLShvlr15fkM DN7bIc/J6P8HGYOk9DLroUvTRyEbhAKvq97RLBZpqnbcrF3dIZd2dTXHb4MSVf06 nT3QSLUXQgCC+BExn9Pnr4iOiGEftWOLrbEcM3dc8kAphwF9NtaMBWDiuQr4qV/e QIla0NYxYODXRvmldSX1wkpMNPKMzUAhm+IxxNrMZJ/mS19y/QbZu5nvGfUSsXFs huxn9YltVeR8tZlYUdG1K4wLAkd+rC2bReeNdLHaAXFimIHv5P9PI/4NOE7pwmKe YzogNad/gpZR3Tc8T/rG0qn/StO6E8WX/0b6Mg9njFkb2uoRVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/5Xt+rDE6Wd/w0tOmzsvqJ2Dq3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTA5ZTY3NTMtYzNkNC0z NmEyLTkwNDgtYjExYWFmNDBkN2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9FWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuGR9X0fOfTUufl0F+1UTDEz1NhRo8BfWnCu+smO4bxl9DL86XEExdd IrjTmYrXzmf3Vu2V63d4PcmPDGoky0IfpMlwrla5xBqTCLOCTQtRmOab30UFyGzN VGkIRQd73lMj/fGZUwjiIzQhO2kOMtRj3q7DTY8ila8EVZzaBtFquDIFy18K8w4u Hq7VqNjbFzWDd1BoKvdrGnqKPbqaFHDUJxj66L24DGtS3P3BpfNVLSi4BS8i3gc8 T+AYBQ6L/MSsn3qO0/LejDd5tkMH2DzZbZsOxoZoyvLfrCBFN6GjM0xC5cFNLxdA WV1/Abc4HcKMo0OM4cm89Vob05qj8Mc= -----END CERTIFICATE-----Generated at Mon Oct 20 02:32:06 2025 by rpki-client