$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c4eb6de-c2e5-3933-b80e-2579c1d02ae3.roa File: 9c4eb6de-c2e5-3933-b80e-2579c1d02ae3.roa (raw, json) Hash identifier: P19bQ3IzZOknlq/2eoPm2kMndDIxAwRt7WYR3lYBpOg= Subject key identifier: CA:39:4F:D5:68:A9:7C:D2:A0:D9:DA:39:3E:DC:47:FB:83:4D:37:5D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B075C791054CE5C9424EB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c4eb6de-c2e5-3933-b80e-2579c1d02ae3.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.211.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:5c:79:10:54:ce:5c:94:24:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=2632d2af-03cf-4727-bea4-c357028edd1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fd:81:fe:54:34:39:fc:b4:01:2c:16:94:aa: c4:d3:2e:9e:15:6c:4e:94:59:40:4c:3b:79:6f:0e: 47:47:74:04:47:0a:ae:b3:ba:9c:d6:82:29:54:5c: 80:3f:01:17:bc:78:13:45:18:00:f5:bc:a9:22:c0: 79:c5:7e:d1:c6:25:59:a2:68:a7:40:1e:2d:fe:71: 75:b4:5e:70:a9:8b:32:a5:f9:24:1a:42:f3:7a:e4: 86:bd:85:79:d3:47:97:ff:9c:bf:b1:82:92:fd:fb: 7e:f2:ea:52:35:47:4f:dd:33:c0:20:e5:01:9f:2c: e8:b8:d6:44:5f:b8:0c:d9:4c:86:86:c3:ad:38:60: 71:61:4e:a7:42:6d:5a:30:b6:51:69:5f:eb:00:3d: ff:c2:27:56:74:6b:02:8f:a7:88:40:45:21:7d:e8: 55:fc:23:de:88:f0:96:c1:14:90:aa:ea:dc:e8:80: c1:bd:b3:9d:d9:a2:99:5e:b0:15:fb:e7:8f:f2:36: ea:82:42:6a:e9:d0:92:95:a8:6a:1e:41:b1:cb:3c: 9a:f4:d2:57:0f:e2:0b:ec:3f:e7:23:d3:41:3a:c4: c0:82:22:ef:39:7f:41:e8:44:eb:0b:ac:bf:96:e1: 4a:40:9a:d1:ec:71:cd:8a:fa:86:f6:70:ee:48:14: 3a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:39:4F:D5:68:A9:7C:D2:A0:D9:DA:39:3E:DC:47:FB:83:4D:37:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c4eb6de-c2e5-3933-b80e-2579c1d02ae3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:8e:f7:97:97:66:a8:e7:d8:73:2a:b7:d5:51:2a:4f:45:38: c5:67:60:79:09:04:e9:42:92:7c:d1:1c:4a:02:e0:b7:64:1c: 9b:e4:3e:47:81:61:0d:82:b6:14:04:9a:80:25:0d:7a:4a:70: 99:60:80:33:51:3e:1f:20:40:3d:09:64:1d:39:5d:90:c3:83: e4:b7:da:da:4f:a9:88:b0:7b:31:80:3b:8b:27:9c:12:6b:87: bc:6b:a9:cf:26:c3:1c:80:f6:57:0c:2b:55:8d:a4:40:5f:f3: f4:2f:d3:1a:d1:af:37:07:cc:69:85:c4:dc:0a:7b:8c:5d:60: 91:c5:4b:c0:58:e0:08:8e:36:8b:05:16:26:c7:25:7f:ee:e3: a3:2f:bd:30:5b:30:ff:97:c7:e5:46:f3:e6:8b:4c:58:27:fe: 16:2e:8c:98:78:02:17:c7:6a:02:30:9e:a0:fd:a4:b3:e2:1e: f0:01:5e:48:6b:5a:b7:42:a9:04:db:5d:60:fc:02:c8:c4:a9: 03:eb:14:ed:44:bc:99:b9:cd:d4:4a:8a:57:af:7a:f3:1e:d6: 68:e3:b3:2d:9e:3c:e2:51:0f:40:d2:d6:8e:e0:07:e1:8d:c9: c4:3d:4f:a0:f8:60:2e:55:8a:5d:e1:ad:d7:e5:dc:62:b4:7f: ef:e3:1e:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1x5EFTOXJQk64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MjYzMmQyYWYtMDNjZi00NzI3LWJlYTQtYzM1NzAyOGVkZDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/2B/lQ0Ofy0ASwWlKrE0y6eFWxOlFlATDt5 bw5HR3QERwqus7qc1oIpVFyAPwEXvHgTRRgA9bypIsB5xX7RxiVZominQB4t/nF1 tF5wqYsypfkkGkLzeuSGvYV500eX/5y/sYKS/ft+8upSNUdP3TPAIOUBnyzouNZE X7gM2UyGhsOtOGBxYU6nQm1aMLZRaV/rAD3/widWdGsCj6eIQEUhfehV/CPeiPCW wRSQqurc6IDBvbOd2aKZXrAV++eP8jbqgkJq6dCSlahqHkGxyzya9NJXD+IL7D/n I9NBOsTAgiLvOX9B6ETrC6y/luFKQJrR7HHNivqG9nDuSBQ6HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMo5T9VoqXzSoNnaOT7cR/uDTTddMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWM0ZWI2ZGUtYzJlNS0z OTMzLWI4MGUtMjU3OWMxZDAyYWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9N3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeO95eXZqjn2HMqt9VRKk9FOMVnYHkJBOlCknzRHEoC4LdkHJvkPkeB YQ2CthQEmoAlDXpKcJlggDNRPh8gQD0JZB05XZDDg+S32tpPqYiwezGAO4snnBJr h7xrqc8mwxyA9lcMK1WNpEBf8/Qv0xrRrzcHzGmFxNwKe4xdYJHFS8BY4AiONosF FibHJX/u46MvvTBbMP+Xx+VG8+aLTFgn/hYujJh4AhfHagIwnqD9pLPiHvABXkhr WrdCqQTbXWD8AsjEqQPrFO1EvJm5zdRKilevevMe1mjjsy2ePOJRD0DS1o7gB+GN ycQ9T6D4YC5Vil3hrdfl3GK0f+/jHoM= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:59 2025 by rpki-client