$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd558792-b295-30bb-b2dc-c6122d5a2ff6.roa File: dd558792-b295-30bb-b2dc-c6122d5a2ff6.roa (raw, json) Hash identifier: RcZY7CXXEC1AHHxPQcMWNdZ9UWiMzBEm79IlNMPXYNs= Subject key identifier: 51:43:FD:0E:18:1E:0C:9B:EA:AA:57:72:21:C6:33:B9:E4:AC:AD:E5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B07518E0002E0C87680B980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd558792-b295-30bb-b2dc-c6122d5a2ff6.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.211.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:51:8e:00:02:e0:c8:76:80:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=2e87e60d-cbe2-4a04-ae8b-a3ca00100e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:83:1f:b1:d2:80:8d:fc:79:90:73:bc:4a:bc: f7:85:e6:ae:64:0f:41:cf:60:08:1a:c0:b3:32:44: 40:cb:fc:9e:6e:8d:4e:c0:21:35:36:49:f7:49:05: 84:1c:94:91:d2:ae:8c:a3:40:d0:6a:32:c7:ef:0e: 8a:c2:92:dc:f2:90:f6:76:c4:5f:ac:06:cf:3e:25: f4:05:1b:e2:e4:4e:43:52:88:8b:6e:8d:3b:21:31: 49:b3:5a:6d:21:2a:a7:d6:2d:32:37:4b:cd:64:d6: 92:50:61:7c:4a:73:c1:44:0b:be:52:2b:e9:54:19: 26:67:90:1c:d6:91:b2:ae:8d:cf:2e:56:70:56:5c: 61:2a:4e:91:aa:3e:a5:bf:c5:a9:be:b3:29:ac:85: e8:50:b5:90:20:28:6f:e2:c1:b2:be:09:98:4d:f1: 28:23:36:05:f7:f5:fa:1a:ab:37:87:64:b1:ac:99: bf:38:36:f3:60:b7:b7:78:cb:85:51:5a:c3:14:9f: a6:eb:c9:ce:67:8c:d2:7d:b1:a1:be:23:6a:56:aa: b1:60:5a:f6:99:d0:6d:e2:f8:a2:03:14:9f:89:47: f1:cc:64:bc:89:2b:1d:aa:2b:cb:21:b4:41:3f:f1: 71:b6:70:09:a6:b1:5f:48:2d:39:94:ff:68:e2:3a: fe:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:43:FD:0E:18:1E:0C:9B:EA:AA:57:72:21:C6:33:B9:E4:AC:AD:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd558792-b295-30bb-b2dc-c6122d5a2ff6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:f6:6e:22:39:8d:73:8b:07:96:b4:c2:19:a6:e3:06:a7:eb: f4:e5:89:ef:cf:ea:e8:14:43:c2:aa:ac:99:bd:a4:27:3f:79: 11:97:3e:22:04:2e:32:89:c6:d8:89:29:1d:39:2c:b9:3e:6e: a0:9f:50:7b:e4:c6:e5:52:56:58:97:38:32:ac:da:60:37:f4: 17:67:1f:f7:6d:43:9c:14:e8:ca:67:41:1a:88:ac:c2:88:5b: 5b:a1:7c:22:52:80:3a:5d:70:57:1b:18:ca:7a:ee:f7:3f:63: 5f:0d:6e:f6:84:eb:48:9a:14:e0:14:5b:ba:f0:f3:21:e7:cd: b1:ca:9e:e4:c3:f9:bf:e8:26:cf:34:be:a5:55:2c:ed:fb:8a: 75:59:10:e1:42:54:d3:07:e5:7b:9b:55:a5:fc:f2:27:ed:f4: 44:b4:77:03:e1:48:74:f7:a9:1b:a0:91:11:c1:a7:d6:4d:80: da:37:f9:9e:28:22:59:c4:5b:99:28:aa:1c:d0:75:2a:5a:6e: 49:1d:61:a7:f9:df:be:15:e6:a1:7c:0c:b7:1c:4f:f4:55:b2: 99:8c:d5:9e:2d:ec:22:b2:01:8c:02:c7:56:cb:45:27:f0:a7: 58:9c:61:2d:b5:7c:3d:47:4f:64:ce:95:7b:f6:d1:3d:3f:02: 73:0d:da:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1GOAALgyHaAuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MmU4N2U2MGQtY2JlMi00YTA0LWFlOGItYTNjYTAwMTAwZTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIMfsdKAjfx5kHO8Srz3heauZA9Bz2AIGsCz MkRAy/yebo1OwCE1Nkn3SQWEHJSR0q6Mo0DQajLH7w6KwpLc8pD2dsRfrAbPPiX0 BRvi5E5DUoiLbo07ITFJs1ptISqn1i0yN0vNZNaSUGF8SnPBRAu+UivpVBkmZ5Ac 1pGyro3PLlZwVlxhKk6Rqj6lv8WpvrMprIXoULWQIChv4sGyvgmYTfEoIzYF9/X6 Gqs3h2SxrJm/ODbzYLe3eMuFUVrDFJ+m68nOZ4zSfbGhviNqVqqxYFr2mdBt4vii AxSfiUfxzGS8iSsdqivLIbRBP/FxtnAJprFfSC05lP9o4jr+QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFD/Q4YHgyb6qpXciHGM7nkrK3lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGQ1NTg3OTItYjI5NS0z MGJiLWIyZGMtYzYxMjJkNWEyZmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9PwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJP2biI5jXOLB5a0whmm4wan6/Tlie/P6ugUQ8KqrJm9pCc/eRGXPiIE LjKJxtiJKR05LLk+bqCfUHvkxuVSVliXODKs2mA39BdnH/dtQ5wU6MpnQRqIrMKI W1uhfCJSgDpdcFcbGMp67vc/Y18NbvaE60iaFOAUW7rw8yHnzbHKnuTD+b/oJs80 vqVVLO37inVZEOFCVNMH5XubVaX88ift9ES0dwPhSHT3qRugkRHBp9ZNgNo3+Z4o IlnEW5koqhzQdSpabkkdYaf5374V5qF8DLccT/RVspmM1Z4t7CKyAYwCx1bLRSfw p1icYS21fD1HT2TOlXv20T0/AnMN2pw= -----END CERTIFICATE-----Generated at Mon Oct 20 05:05:52 2025 by rpki-client