$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c02d4a79-f2ea-3fbb-beb5-adddd67af026.roa File: c02d4a79-f2ea-3fbb-beb5-adddd67af026.roa (raw, json) Hash identifier: kvDvEeZSjSIR9Yz2q4UKAGK0Vhnz1t+lFZLnUdhVyBM= Subject key identifier: 0A:60:90:6D:03:48:16:28:CC:CD:AE:1B:1C:9A:BC:9B:8D:6E:13:A2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583C9712A8EDEBC452AA0F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c02d4a79-f2ea-3fbb-beb5-adddd67af026.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.206.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:97:12:a8:ed:eb:c4:52:aa:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=ed2e52b8-25f8-48db-b63c-7929c9ac3728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:78:fa:0c:8b:da:2d:5c:a6:5a:85:2d:7d:e2: b8:fd:92:d9:68:57:cc:e5:ec:99:b5:5e:f9:bf:f7: ef:11:0e:66:5d:94:60:c2:d3:f3:54:b3:52:80:3c: 5c:ff:60:c2:cd:c6:01:5c:b2:e5:59:ec:5f:d5:5c: fd:94:e6:2c:2e:a5:a0:f2:01:56:dc:70:0e:61:8f: af:ef:a0:ee:c1:dd:f2:d5:3d:ac:ee:5d:ee:55:28: ba:9a:e1:ac:cf:18:fb:f6:f0:d8:b1:80:4a:c0:4a: cf:d3:9f:94:cf:15:f3:b0:5e:c3:61:0c:68:71:15: 39:c3:ca:eb:6b:6c:ad:f4:c3:ad:54:ba:dd:51:74: 75:e7:66:cd:d8:de:79:38:3c:ca:d3:1e:18:01:a6: 9a:f0:00:24:9d:37:81:41:df:90:4c:30:a8:e4:29: d9:a0:19:75:53:28:4a:c2:31:43:5c:4e:96:14:ac: 65:89:1f:f6:2b:a5:95:00:be:64:b6:93:52:e7:3b: 4c:6e:d0:35:5d:d1:f4:b1:24:a6:30:b3:6a:ee:cf: 14:b5:f8:ac:db:87:b8:f6:bb:d9:ab:a2:db:d7:c1: 40:6a:a1:6b:2c:a7:3e:4a:3f:8a:bd:d0:ac:2a:b5: fc:cc:e2:18:4c:d6:17:93:ac:09:5e:21:8f:8f:7b: 49:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:60:90:6D:03:48:16:28:CC:CD:AE:1B:1C:9A:BC:9B:8D:6E:13:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c02d4a79-f2ea-3fbb-beb5-adddd67af026.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:71:44:2e:85:37:50:c9:69:ed:a9:a8:66:dc:0f:fa:ab:27: 5b:0a:4e:92:ff:9e:12:d0:98:c5:57:99:75:80:c4:2c:57:5f: 9f:ed:04:08:d3:df:7a:03:c6:a1:73:31:c9:ba:fb:72:9b:a4: ec:4f:c5:da:ea:ea:13:19:0b:ef:48:83:7c:ac:cb:b4:e0:7d: 01:f1:19:6a:d2:17:8b:f7:f1:0b:09:ca:04:d1:d6:06:01:1c: ee:86:52:ea:dd:54:73:03:33:7b:e9:e5:11:d2:e9:d7:87:f3: 2d:fe:91:65:6f:9e:93:79:7f:96:8e:30:0b:e5:f6:15:45:9f: ab:bf:82:5a:66:2a:a8:81:07:62:39:48:d0:c8:bb:37:2f:6e: df:a5:7b:85:ca:31:6c:ec:a1:af:c1:66:4f:03:e3:fe:3b:13: 19:f3:55:eb:85:7a:9e:a4:67:02:49:cb:0c:6b:31:d8:0c:c1: b7:b2:8c:42:3a:89:47:61:db:f2:46:95:f2:b2:54:35:c4:c4: 07:0b:f9:81:79:27:2d:7c:15:43:a0:ad:52:c5:da:b2:68:a7: 63:b6:77:ae:48:0d:06:ed:2e:cf:bc:33:d7:74:12:a9:bf:c5: 5e:77:09:56:94:f4:37:3f:cf:2e:9b:c6:a5:10:1d:fa:86:8a: 27:75:98:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJcSqO3rxFKqDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZWQyZTUyYjgtMjVmOC00OGRiLWI2M2MtNzkyOWM5YWMzNzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3j6DIvaLVymWoUtfeK4/ZLZaFfM5eyZtV75 v/fvEQ5mXZRgwtPzVLNSgDxc/2DCzcYBXLLlWexf1Vz9lOYsLqWg8gFW3HAOYY+v 76Duwd3y1T2s7l3uVSi6muGszxj79vDYsYBKwErP05+UzxXzsF7DYQxocRU5w8rr a2yt9MOtVLrdUXR152bN2N55ODzK0x4YAaaa8AAknTeBQd+QTDCo5CnZoBl1UyhK wjFDXE6WFKxliR/2K6WVAL5ktpNS5ztMbtA1XdH0sSSmMLNq7s8Utfis24e49rvZ q6Lb18FAaqFrLKc+Sj+KvdCsKrX8zOIYTNYXk6wJXiGPj3tJlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApgkG0DSBYozM2uGxyavJuNbhOiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzAyZDRhNzktZjJlYS0z ZmJiLWJlYjUtYWRkZGQ2N2FmMDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF87CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtxRC6FN1DJae2pqGbcD/qrJ1sKTpL/nhLQmMVXmXWAxCxXX5/tBAjT 33oDxqFzMcm6+3KbpOxPxdrq6hMZC+9Ig3ysy7TgfQHxGWrSF4v38QsJygTR1gYB HO6GUurdVHMDM3vp5RHS6deH8y3+kWVvnpN5f5aOMAvl9hVFn6u/glpmKqiBB2I5 SNDIuzcvbt+le4XKMWzsoa/BZk8D4/47ExnzVeuFep6kZwJJywxrMdgMwbeyjEI6 iUdh2/JGlfKyVDXExAcL+YF5Jy18FUOgrVLF2rJop2O2d65IDQbtLs+8M9d0Eqm/ xV53CVaU9Dc/zy6bxqUQHfqGiid1mJs= -----END CERTIFICATE-----Generated at Mon Oct 20 02:32:36 2025 by rpki-client