$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb828a82-a639-37c6-a461-e9ec4f33dd43.roa File: cb828a82-a639-37c6-a461-e9ec4f33dd43.roa (raw, json) Hash identifier: vMC6pMOhpXbVfiNHMrQnmyiS5q9eA+TIQSwQtFOfhCU= Subject key identifier: BD:AB:A9:11:8F:84:9B:35:A2:95:A6:87:14:B2:A0:C9:9B:70:96:05 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B84E7690535BE65E81539D200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb828a82-a639-37c6-a461-e9ec4f33dd43.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 20940 IP address blocks: 23.215.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:69:05:35:be:65:e8:15:39:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=42c0a5d0-6655-4313-90ad-42233dd977cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:43:82:4b:36:fe:4f:c8:9c:67:ef:0b:5a:ff: c8:1c:5a:8f:43:38:9b:c2:bb:10:a2:7f:9a:02:02: b0:68:23:48:7e:66:4d:4b:ef:1e:28:c9:7a:6b:d7: 70:fb:8b:06:b3:26:7a:09:e5:a7:7d:19:59:15:98: 21:7d:ff:7e:19:45:07:9e:71:10:8c:03:56:c0:7d: e5:91:b6:18:1e:64:d8:b6:75:47:fe:69:58:6b:4b: d6:a7:55:82:84:35:0b:96:0e:77:cc:9e:a2:0e:14: 61:f5:41:83:37:8a:65:a3:84:e4:f9:23:be:cc:b5: 53:d3:b8:ca:ea:1f:fa:f2:68:1a:70:e6:3a:65:09: 26:88:44:cb:c6:7c:1e:61:02:d6:2d:44:bb:77:a3: b9:22:b4:65:4e:34:61:00:b2:15:33:9f:db:a4:98: b8:ed:25:e3:e3:27:19:0e:8f:bf:6b:f5:33:d5:07: 57:ae:3b:6d:5e:8a:27:02:27:b8:c5:64:13:cc:0e: cc:f2:df:c8:89:37:c4:37:97:22:4a:96:51:54:33: 00:34:de:33:8f:da:21:11:2f:c2:d0:e9:80:e1:f6: da:74:04:6d:bc:ea:65:6c:2d:e3:9a:b9:e8:ab:d2: 4a:76:06:15:c8:20:1b:5a:a1:4f:ea:3b:02:0f:a5: cc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AB:A9:11:8F:84:9B:35:A2:95:A6:87:14:B2:A0:C9:9B:70:96:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb828a82-a639-37c6-a461-e9ec4f33dd43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:f1:75:1a:28:5f:a3:fb:b4:9e:8c:2e:a6:ac:21:a4:24:55: 72:9e:91:fe:73:3c:c4:e8:cf:ab:50:00:4d:5c:09:d3:db:53: 4d:db:36:9f:f4:f5:7d:13:03:c3:26:0e:ff:f3:ee:59:02:17: 1d:09:24:56:30:cf:63:62:a6:a0:1e:7c:a9:1a:54:c9:9b:4d: fd:0e:8d:f9:a5:30:61:bf:05:8b:43:9b:65:be:52:c0:d0:37: bd:61:2c:91:f2:f3:eb:c6:6f:7b:9f:a0:89:b3:0d:a4:a1:32: 95:87:6d:e6:3a:f0:ca:8d:be:2c:11:19:1f:0f:18:14:89:f2: 45:1d:b3:d0:02:0e:2c:02:dc:58:48:64:8c:5e:2f:59:9c:52: a3:45:26:cb:ad:11:da:e9:02:ba:29:c1:a6:ce:dd:1e:2e:a3: 24:09:af:bc:09:35:18:fc:0a:f3:2d:b2:46:0d:f8:70:63:d4: 31:6a:89:d4:52:82:77:21:35:50:e2:18:c0:63:76:19:45:b6: d8:17:01:55:58:fe:fb:ba:84:da:e2:55:de:d8:c1:8d:dc:70: 0d:14:b1:fa:6d:3d:c4:be:f7:55:3e:2f:38:c5:c1:53:51:49: b5:0c:e3:6f:9d:2d:a9:f7:03:6a:05:09:35:07:45:47:ec:49: ec:ce:e3:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE52kFNb5l6BU50gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NDJjMGE1ZDAtNjY1NS00MzEzLTkwYWQtNDIyMzNkZDk3N2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0OCSzb+T8icZ+8LWv/IHFqPQzibwrsQon+a AgKwaCNIfmZNS+8eKMl6a9dw+4sGsyZ6CeWnfRlZFZghff9+GUUHnnEQjANWwH3l kbYYHmTYtnVH/mlYa0vWp1WChDULlg53zJ6iDhRh9UGDN4plo4Tk+SO+zLVT07jK 6h/68mgacOY6ZQkmiETLxnweYQLWLUS7d6O5IrRlTjRhALIVM5/bpJi47SXj4ycZ Do+/a/Uz1QdXrjttXoonAie4xWQTzA7M8t/IiTfEN5ciSpZRVDMANN4zj9ohES/C 0OmA4fbadARtvOplbC3jmrnoq9JKdgYVyCAbWqFP6jsCD6XMRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2rqRGPhJs1opWmhxSyoMmbcJYFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2I4MjhhODItYTYzOS0z N2M2LWE0NjEtZTllYzRmMzNkZDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9dqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfxdRooX6P7tJ6MLqasIaQkVXKekf5zPMToz6tQAE1cCdPbU03bNp/0 9X0TA8MmDv/z7lkCFx0JJFYwz2NipqAefKkaVMmbTf0OjfmlMGG/BYtDm2W+UsDQ N71hLJHy8+vGb3ufoImzDaShMpWHbeY68MqNviwRGR8PGBSJ8kUds9ACDiwC3FhI ZIxeL1mcUqNFJsutEdrpAropwabO3R4uoyQJr7wJNRj8CvMtskYN+HBj1DFqidRS gnchNVDiGMBjdhlFttgXAVVY/vu6hNriVd7YwY3ccA0UsfptPcS+91U+LzjFwVNR SbUM42+dLan3A2oFCTUHRUfsSezO43s= -----END CERTIFICATE-----Generated at Mon Oct 20 04:54:59 2025 by rpki-client