$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6b5367a-04a9-3947-8c40-e5463697c37d.roa File: a6b5367a-04a9-3947-8c40-e5463697c37d.roa (raw, json) Hash identifier: Y/TVmrI6im/Ai3eARV5R5Lq3t7LiXvnJTw/HOGtUhSg= Subject key identifier: 79:3B:31:55:AF:24:F2:CB:12:F8:E4:48:5C:57:3C:A3:9D:1E:A5:DB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD20253C19E77529EAA7040 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6b5367a-04a9-3947-8c40-e5463697c37d.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.215.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d2:02:53:c1:9e:77:52:9e:aa:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=ca04aadb-b196-44b5-a869-b69199658135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9c:16:7f:48:dd:bb:41:72:f9:1b:50:cb:ea: 5c:33:bc:67:d2:35:4c:a8:00:12:1b:70:df:9a:3d: 3a:d1:ad:02:25:e6:93:8c:bb:6a:00:cc:db:95:19: 02:82:95:95:e1:d0:a0:5d:6e:51:cc:b7:f4:93:28: ad:89:df:90:bf:fb:98:5b:88:d1:2c:28:7b:ca:2d: f1:4f:a8:35:62:16:df:7a:b0:62:9c:81:37:4a:4c: aa:97:85:02:86:9a:da:2c:04:51:63:85:6e:76:67: 37:47:a3:bb:53:3b:06:72:c3:b7:05:84:30:5e:01: b9:16:00:b8:a8:04:eb:ab:94:33:ec:39:02:56:bb: 47:d7:3a:03:34:ea:d5:8e:2b:b1:9d:8c:95:bd:40: e8:c5:14:ab:47:ed:6c:25:8f:32:0a:fe:97:b3:67: 01:f6:49:1e:2b:98:c2:b0:9a:24:b5:af:ff:c1:1e: b3:f1:7e:fa:42:39:58:d0:30:a1:f5:c8:50:66:df: fd:e8:e2:12:6a:e9:03:f1:0f:72:ac:dc:85:b9:4c: 82:77:1e:f4:53:dd:ca:af:cc:0d:90:ac:ba:fa:f3: ca:9e:4f:02:60:f2:dd:9f:03:7f:91:6a:be:76:4b: 7f:6c:c8:89:5f:6f:7b:a3:2b:70:2c:e2:7c:d1:70: 89:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3B:31:55:AF:24:F2:CB:12:F8:E4:48:5C:57:3C:A3:9D:1E:A5:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6b5367a-04a9-3947-8c40-e5463697c37d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:28:3a:20:c2:58:16:b0:eb:c4:9e:58:7c:e3:7b:c5:6e:b5: 3c:e5:b8:57:33:c1:05:7c:63:e9:02:b9:2d:99:dc:6c:77:ac: e0:5e:dc:36:7e:13:61:cf:99:53:e8:e6:20:63:81:c6:de:64: 7b:54:de:ba:38:b2:d8:99:55:b2:57:31:04:2d:d7:ab:03:a2: 80:3e:a5:b7:0f:76:8a:2b:77:63:32:22:00:43:c4:eb:44:a4: 89:4c:2d:7d:7e:75:0d:4e:7f:6d:f9:7c:23:8e:87:e4:12:49: 38:ce:7a:eb:d6:e7:ee:7f:8d:31:c6:97:e6:b4:0a:7b:c2:c2: ec:d9:59:8d:bb:41:32:e5:c5:b5:bb:50:56:03:4f:3a:34:3e: bb:ff:33:26:a7:c8:31:f2:bb:c1:b3:38:f6:ca:70:7b:12:a3: 7e:e8:de:86:5a:92:35:3c:6b:af:cd:3a:be:ed:c0:0f:ba:d4: b2:19:4a:72:a5:19:8d:d0:3a:8e:7a:03:e5:7d:81:7f:62:cf: 9b:0d:cd:71:71:5a:c9:08:33:90:81:70:70:8e:55:57:1a:67: 0b:e8:05:c5:9b:f8:5e:ef:11:b6:66:59:11:35:9f:4c:7f:f1: fb:02:21:bb:ab:2f:79:ac:86:b0:d7:03:34:b1:ab:98:ad:1f: cd:81:fb:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0gJTwZ53Up6qcEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk Y2EwNGFhZGItYjE5Ni00NGI1LWE4NjktYjY5MTk5NjU4MTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5wWf0jdu0Fy+RtQy+pcM7xn0jVMqAASG3Df mj060a0CJeaTjLtqAMzblRkCgpWV4dCgXW5RzLf0kyitid+Qv/uYW4jRLCh7yi3x T6g1YhbferBinIE3Skyql4UChpraLARRY4Vudmc3R6O7UzsGcsO3BYQwXgG5FgC4 qATrq5Qz7DkCVrtH1zoDNOrVjiuxnYyVvUDoxRSrR+1sJY8yCv6Xs2cB9kkeK5jC sJokta//wR6z8X76QjlY0DCh9chQZt/96OISaukD8Q9yrNyFuUyCdx70U93Kr8wN kKy6+vPKnk8CYPLdnwN/kWq+dkt/bMiJX297oytwLOJ80XCJpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHk7MVWvJPLLEvjkSFxXPKOdHqXbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTZiNTM2N2EtMDRhOS0z OTQ3LThjNDAtZTU0NjM2OTdjMzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9doMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcoOiDCWBaw68SeWHzje8VutTzluFczwQV8Y+kCuS2Z3Gx3rOBe3DZ+ E2HPmVPo5iBjgcbeZHtU3ro4stiZVbJXMQQt16sDooA+pbcPdoord2MyIgBDxOtE pIlMLX1+dQ1Of235fCOOh+QSSTjOeuvW5+5/jTHGl+a0CnvCwuzZWY27QTLlxbW7 UFYDTzo0Prv/MyanyDHyu8GzOPbKcHsSo37o3oZakjU8a6/NOr7twA+61LIZSnKl GY3QOo56A+V9gX9iz5sNzXFxWskIM5CBcHCOVVcaZwvoBcWb+F7vEbZmWRE1n0x/ 8fsCIburL3mshrDXAzSxq5itH82B+8Q= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:13 2025 by rpki-client