$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be34ffb5-ae89-3fd4-bfd0-c28b031315be.roa File: be34ffb5-ae89-3fd4-bfd0-c28b031315be.roa (raw, json) Hash identifier: XHujv0YAEzyXNiXV71R01p1hiVjVOduc+uDHmSI18Zw= Subject key identifier: FA:E5:36:59:15:BB:5E:E2:D3:46:4C:E0:A7:C1:C3:8D:4E:BE:0D:19 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B68FCA5C5B54EB6BB3FDFF680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be34ffb5-ae89-3fd4-bfd0-c28b031315be.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.218.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:a5:c5:b5:4e:b6:bb:3f:df:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=dd058b05-61ae-4ef6-9ef6-69582416279b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ec:ec:b4:01:78:03:8d:35:29:63:e3:53:5d: 54:94:02:53:94:40:be:31:40:19:f2:d2:e5:95:91: c3:f5:e6:9c:e4:7d:c2:fe:8f:e8:41:48:96:d2:f0: 21:60:0c:de:1c:91:56:ef:98:e7:79:a3:e2:98:91: 5a:ca:94:89:55:3e:99:e6:e1:75:d7:56:4a:96:ff: f2:04:c0:cc:d9:cb:1b:48:e8:20:44:ed:6e:de:ed: 8a:29:80:e2:16:d5:cc:94:7b:cd:51:82:fe:4c:8d: b7:44:a3:5c:30:22:61:40:0c:45:8c:ea:ec:b2:a2: 6e:30:f0:43:fe:5e:0c:55:04:6a:77:d3:a2:fe:07: 1a:70:64:24:e5:f5:66:78:be:95:80:35:c9:ae:17: fa:81:aa:4a:7e:8c:f3:b8:75:00:7d:ec:a7:e1:ef: 95:d2:38:e8:82:43:d5:6c:88:88:b9:e3:48:3e:3e: 31:59:05:4e:93:09:86:a8:11:8d:50:8a:15:64:ae: 1e:5b:d4:35:9e:22:c0:8c:16:1c:6b:91:e6:ce:11: f3:0b:93:5d:32:19:a3:29:e6:8a:00:74:1a:bc:37: c4:6b:f7:ed:bc:c2:b5:3d:bc:0e:14:7e:49:99:11: fc:76:79:86:08:c7:23:53:c8:97:02:d7:52:7a:0c: 5b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E5:36:59:15:BB:5E:E2:D3:46:4C:E0:A7:C1:C3:8D:4E:BE:0D:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be34ffb5-ae89-3fd4-bfd0-c28b031315be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ef:06:c7:7c:8d:87:c7:ca:d4:33:64:45:11:91:41:db:19: bf:9e:2f:2f:fa:12:e5:48:51:96:cc:94:cb:27:f1:7c:67:86: 4d:d7:07:3c:33:7e:09:fb:2b:6a:07:75:25:67:13:fb:ea:66: bc:22:59:2e:5a:ad:93:99:60:59:90:2e:6b:72:bf:e8:e3:f6: 1d:d9:57:73:42:72:5e:20:d9:6d:e5:cf:aa:90:64:bc:4c:a9: 8f:28:9d:6b:fc:c4:09:22:30:0b:5b:e4:ec:78:e8:9d:88:e7: 0c:7e:26:9c:85:ff:65:20:0e:85:c2:23:4d:ee:46:34:37:74: 10:0d:46:f4:bc:e4:2d:0b:d2:8e:f9:21:f5:a6:18:7a:ec:91: f0:a2:2a:e1:6f:54:5f:ea:3a:d0:5f:e6:f4:52:6b:40:48:86: ca:f2:b4:81:65:44:a2:d2:f9:82:11:32:42:63:b7:c7:24:73: c0:74:2c:9c:7f:1d:4d:4b:a3:52:27:02:e3:3a:2c:ec:cf:96: 9b:af:b0:7b:e3:a1:c3:7b:41:a2:92:a8:46:57:0f:b3:11:53: d2:36:fb:9d:ea:7b:21:d0:a8:42:53:13:d2:a8:ca:96:35:3c: 50:58:9c:a0:b8:78:7b:b6:3f:0f:5d:c0:27:7f:81:c8:20:e3: 9f:8b:b0:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/KXFtU62uz/f9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk ZGQwNThiMDUtNjFhZS00ZWY2LTllZjYtNjk1ODI0MTYyNzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlezstAF4A401KWPjU11UlAJTlEC+MUAZ8tLl lZHD9eac5H3C/o/oQUiW0vAhYAzeHJFW75jneaPimJFaypSJVT6Z5uF111ZKlv/y BMDM2csbSOggRO1u3u2KKYDiFtXMlHvNUYL+TI23RKNcMCJhQAxFjOrssqJuMPBD /l4MVQRqd9Oi/gcacGQk5fVmeL6VgDXJrhf6gapKfozzuHUAfeyn4e+V0jjogkPV bIiIueNIPj4xWQVOkwmGqBGNUIoVZK4eW9Q1niLAjBYca5HmzhHzC5NdMhmjKeaK AHQavDfEa/ftvMK1PbwOFH5JmRH8dnmGCMcjU8iXAtdSegxbsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrlNlkVu17i00ZM4KfBw41Ovg0ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmUzNGZmYjUtYWU4OS0z ZmQ0LWJmZDAtYzI4YjAzMTMxNWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9rVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7vBsd8jYfHytQzZEURkUHbGb+eLy/6EuVIUZbMlMsn8Xxnhk3XBzwz fgn7K2oHdSVnE/vqZrwiWS5arZOZYFmQLmtyv+jj9h3ZV3NCcl4g2W3lz6qQZLxM qY8onWv8xAkiMAtb5Ox46J2I5wx+JpyF/2UgDoXCI03uRjQ3dBANRvS85C0L0o75 IfWmGHrskfCiKuFvVF/qOtBf5vRSa0BIhsrytIFlRKLS+YIRMkJjt8ckc8B0LJx/ HU1Lo1InAuM6LOzPlpuvsHvjocN7QaKSqEZXD7MRU9I2+53qeyHQqEJTE9KoypY1 PFBYnKC4eHu2Pw9dwCd/gcgg45+LsPY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:35:25 2025 by rpki-client