$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7bb03b1-7428-34b7-be13-700d9df820d7.roa File: a7bb03b1-7428-34b7-be13-700d9df820d7.roa (raw, json) Hash identifier: kZBHX3RntjTGG3zxsbYA2ZyLM5zhS06p2HKz3oKM6ZQ= Subject key identifier: 0F:FF:68:2D:7D:BF:D3:75:47:0F:3E:E8:A8:2B:FA:8D:D3:6F:E6:F8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD203095FAD50CE8325FC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7bb03b1-7428-34b7-be13-700d9df820d7.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.215.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d2:03:09:5f:ad:50:ce:83:25:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=ea03cb6d-481a-4e1c-8bff-c79a7435fdac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:24:0a:2a:ec:14:2f:60:55:76:fd:4f:ed:01: 8c:a8:08:d4:5e:a5:05:de:ac:7e:30:c8:87:09:e8: 0a:1c:fa:0c:d2:91:d4:d7:d4:c6:3a:fa:a5:da:b5: 13:5f:4f:9b:66:e6:ef:fb:8b:d1:5e:10:7d:15:d6: 5f:06:c8:c2:b1:b8:49:22:3a:6c:78:5a:75:0e:49: 6a:a4:bf:dd:21:a2:1b:67:e0:7b:3e:44:5e:2b:95: d3:06:ca:fc:44:bc:be:c9:8e:4c:49:26:84:1b:79: c1:36:f4:0a:03:0d:57:54:c3:57:e2:94:25:62:bf: a1:13:a2:b8:04:b0:5f:e3:35:a4:c6:fa:7c:ee:a1: 0f:61:8f:7b:fe:3e:37:8c:8f:8a:6e:dc:d8:32:e7: d3:34:e7:9e:87:99:6c:f3:8e:8d:66:1f:2b:22:a7: 0a:f6:90:3d:e7:1b:25:80:05:31:7b:a7:37:de:4e: 24:9f:6f:4e:ed:6b:df:d8:66:c5:08:39:7a:75:f0: 97:26:6d:01:50:64:03:97:d9:3f:8e:c0:ca:bd:c6: 78:96:e9:86:b3:a7:70:e2:d4:41:aa:59:df:82:34: 9a:48:3a:e9:72:de:7f:39:4c:70:8e:02:22:09:40: 44:89:38:61:0d:b3:1c:16:56:61:46:13:d2:a5:c5: 24:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:FF:68:2D:7D:BF:D3:75:47:0F:3E:E8:A8:2B:FA:8D:D3:6F:E6:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7bb03b1-7428-34b7-be13-700d9df820d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:69:ce:c4:75:39:7f:0c:3a:cf:f2:69:0e:54:b2:b3:01:5a: 44:dd:9b:99:36:dd:24:d4:02:a0:df:88:b7:28:ee:d9:f4:3e: c8:50:85:e9:21:30:60:7c:96:22:2b:31:ab:9e:19:15:ca:74: aa:aa:49:f5:90:82:45:5b:14:7a:d0:43:ee:28:09:2d:6f:0a: e3:62:07:d1:5a:94:a6:d4:42:1c:54:66:b4:9b:68:95:e8:dd: aa:c6:8d:ad:8b:49:a0:8e:e8:62:d9:36:da:1e:be:05:48:f4: e1:14:b8:32:e7:c5:06:34:9f:74:66:04:13:57:b0:ff:7d:6d: bc:95:92:68:50:e8:1f:2f:54:0d:26:d7:be:9b:6f:ee:e5:f2: e7:a5:6c:a0:be:54:be:f8:2b:b9:84:ee:65:70:69:5d:46:11: 95:af:ec:01:aa:4d:b5:c7:7a:b5:23:db:82:c9:f4:d2:51:04: 3f:67:58:28:fe:3c:5a:2e:61:c6:d0:57:96:6b:32:59:02:d8: fb:72:c9:24:ff:7f:a3:c4:57:ee:63:d6:8b:f9:ac:b6:78:76: c1:f0:13:99:ee:13:5e:10:ae:3e:cd:27:71:b3:15:88:0f:0f: 62:13:aa:4a:d3:b7:df:18:18:2e:f2:8e:8c:b2:0e:14:e7:cf: 13:e4:c3:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0gMJX61QzoMl/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk ZWEwM2NiNmQtNDgxYS00ZTFjLThiZmYtYzc5YTc0MzVmZGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyQKKuwUL2BVdv1P7QGMqAjUXqUF3qx+MMiH CegKHPoM0pHU19TGOvql2rUTX0+bZubv+4vRXhB9FdZfBsjCsbhJIjpseFp1Dklq pL/dIaIbZ+B7PkReK5XTBsr8RLy+yY5MSSaEG3nBNvQKAw1XVMNX4pQlYr+hE6K4 BLBf4zWkxvp87qEPYY97/j43jI+KbtzYMufTNOeeh5ls846NZh8rIqcK9pA95xsl gAUxe6c33k4kn29O7Wvf2GbFCDl6dfCXJm0BUGQDl9k/jsDKvcZ4lumGs6dw4tRB qlnfgjSaSDrpct5/OUxwjgIiCUBEiThhDbMcFlZhRhPSpcUkSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA//aC19v9N1Rw8+6Kgr+o3Tb+b4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTdiYjAzYjEtNzQyOC0z NGI3LWJlMTMtNzAwZDlkZjgyMGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9e6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9pzsR1OX8MOs/yaQ5UsrMBWkTdm5k23STUAqDfiLco7tn0PshQhekh MGB8liIrMaueGRXKdKqqSfWQgkVbFHrQQ+4oCS1vCuNiB9FalKbUQhxUZrSbaJXo 3arGja2LSaCO6GLZNtoevgVI9OEUuDLnxQY0n3RmBBNXsP99bbyVkmhQ6B8vVA0m 176bb+7l8uelbKC+VL74K7mE7mVwaV1GEZWv7AGqTbXHerUj24LJ9NJRBD9nWCj+ PFouYcbQV5ZrMlkC2PtyyST/f6PEV+5j1ov5rLZ4dsHwE5nuE14Qrj7NJ3GzFYgP D2ITqkrTt98YGC7yjoyyDhTnzxPkwwY= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:01 2025 by rpki-client