$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97a80dd9-e751-3335-a490-a9fcb3d1c4cf.roa File: 97a80dd9-e751-3335-a490-a9fcb3d1c4cf.roa (raw, json) Hash identifier: 7u+stMyhyEgfznhozYQhOnCkOn9n8a96Y9j3EkKoBNY= Subject key identifier: CD:8E:4D:50:3A:D2:F2:B8:D8:11:71:CE:E5:88:75:46:1A:C3:E1:00 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B07551CBC69F7344B7E4100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97a80dd9-e751-3335-a490-a9fcb3d1c4cf.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.213.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:55:1c:bc:69:f7:34:4b:7e:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=808ee0f9-c0a4-4490-9f1c-3fe1e72a429a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cc:7d:df:90:5d:df:8d:e1:9f:e4:76:84:db: 3f:5c:9c:94:eb:06:22:23:e8:83:35:4b:26:48:c3: 11:8e:1e:4c:8f:83:cc:bf:6a:c8:03:de:5b:ec:89: 03:d8:3b:1d:25:83:13:b6:fa:99:9f:4d:6c:a9:d0: ea:dc:49:8c:d4:5c:c8:1c:a7:b3:7b:3b:27:82:38: a3:e4:2f:d3:48:3e:eb:a1:3a:75:3f:2d:84:2d:38: d4:63:e7:7a:96:e6:a5:78:bc:eb:39:74:60:2b:eb: 1c:62:49:21:60:b9:43:70:49:93:d5:12:01:16:65: a6:58:fe:fc:86:52:b7:ca:78:3b:16:63:06:67:b5: 01:af:d2:e8:f0:83:a2:11:b0:63:c9:9c:6a:e7:d0: 29:66:3b:d9:5b:83:15:03:e8:2c:41:b3:be:44:a0: e6:76:76:a7:23:67:1f:7c:30:9a:f2:eb:29:0a:aa: bd:22:6b:2f:a8:8a:12:ad:d0:9f:e1:fb:12:b9:14: 7d:a9:ae:66:4a:c1:05:c2:3f:29:bf:e0:59:ca:ce: ab:90:1e:60:13:23:dd:2f:7d:f4:ea:0f:68:47:3c: f1:c9:4d:51:d7:6a:ef:9a:ae:87:55:07:ea:8c:3b: ae:e6:d4:29:e2:ec:d9:a8:7d:34:b8:5f:a3:ee:51: 24:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8E:4D:50:3A:D2:F2:B8:D8:11:71:CE:E5:88:75:46:1A:C3:E1:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97a80dd9-e751-3335-a490-a9fcb3d1c4cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:21:a1:de:9c:19:66:e3:8a:83:fe:1b:97:f9:34:2e:36:d4: 35:14:cc:16:33:64:a4:ac:6a:26:0b:41:60:c4:0d:df:b8:12: aa:70:f7:f1:af:a6:58:7d:b5:76:31:f1:10:6b:62:a5:93:93: cf:9c:99:d3:63:61:1f:62:ce:54:70:f9:e8:be:a1:3e:9b:0a: a8:6b:e0:a5:cc:55:46:1a:3a:7c:66:97:fa:3e:fb:4c:20:e1: 9e:1e:fc:21:fb:b7:5c:9d:68:7e:67:0b:3b:f0:fe:17:59:2a: 1c:a8:00:7f:00:c5:62:57:87:0b:c7:33:4c:2b:ad:e2:e3:89: d0:0f:a3:13:c8:5c:27:fb:e7:fb:0c:e0:bd:39:4f:70:94:55: ca:8d:43:c7:40:48:e9:c3:e9:be:d8:55:7e:0a:b7:13:43:31: 78:31:79:16:54:2a:c1:38:5a:03:a7:c7:d8:14:96:c7:90:cc: c4:8f:1c:be:97:c8:2f:37:b1:15:a3:e6:72:b5:2d:b6:4f:16: 5d:62:52:98:1f:8a:a3:f9:f9:5e:1e:bd:19:55:6d:da:4f:f9: f9:90:88:49:07:49:00:15:80:0d:86:f4:d7:a6:4f:86:7b:94: fd:f4:f0:ec:f9:b5:bb:6c:44:0f:8a:de:a4:16:60:13:93:02: 56:8f:ed:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1UcvGn3NEt+QQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ODA4ZWUwZjktYzBhNC00NDkwLTlmMWMtM2ZlMWU3MmE0MjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcx935Bd343hn+R2hNs/XJyU6wYiI+iDNUsm SMMRjh5Mj4PMv2rIA95b7IkD2DsdJYMTtvqZn01sqdDq3EmM1FzIHKezezsngjij 5C/TSD7roTp1Py2ELTjUY+d6lualeLzrOXRgK+scYkkhYLlDcEmT1RIBFmWmWP78 hlK3yng7FmMGZ7UBr9Lo8IOiEbBjyZxq59ApZjvZW4MVA+gsQbO+RKDmdnanI2cf fDCa8uspCqq9ImsvqIoSrdCf4fsSuRR9qa5mSsEFwj8pv+BZys6rkB5gEyPdL330 6g9oRzzxyU1R12rvmq6HVQfqjDuu5tQp4uzZqH00uF+j7lEkcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2OTVA60vK42BFxzuWIdUYaw+EAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTdhODBkZDktZTc1MS0z MzM1LWE0OTAtYTlmY2IzZDFjNGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9UcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMhod6cGWbjioP+G5f5NC421DUUzBYzZKSsaiYLQWDEDd+4Eqpw9/Gv plh9tXYx8RBrYqWTk8+cmdNjYR9izlRw+ei+oT6bCqhr4KXMVUYaOnxml/o++0wg 4Z4e/CH7t1ydaH5nCzvw/hdZKhyoAH8AxWJXhwvHM0wrreLjidAPoxPIXCf75/sM 4L05T3CUVcqNQ8dASOnD6b7YVX4KtxNDMXgxeRZUKsE4WgOnx9gUlseQzMSPHL6X yC83sRWj5nK1LbZPFl1iUpgfiqP5+V4evRlVbdpP+fmQiEkHSQAVgA2G9NemT4Z7 lP308Oz5tbtsRA+K3qQWYBOTAlaP7XU= -----END CERTIFICATE-----Generated at Mon Oct 20 00:28:13 2025 by rpki-client