$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfb98baa-2682-37a7-bfc4-9b7540f961e2.roa File: dfb98baa-2682-37a7-bfc4-9b7540f961e2.roa (raw, json) Hash identifier: ERKGinejFUNnh+xqHz5gbfk5QWLPee0i/Hgetx7ZxuU= Subject key identifier: 63:AC:40:E1:86:CC:6F:32:F5:9E:3A:3B:4E:DA:3F:51:97:92:F8:7F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B0759DDC0524AF78FA26580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfb98baa-2682-37a7-bfc4-9b7540f961e2.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.209.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:59:dd:c0:52:4a:f7:8f:a2:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=e0a54dd1-c600-4cb6-8ff1-0d58ee268ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:15:02:30:6d:8e:5a:62:9f:bd:6e:f2:54:71: c2:51:d7:91:b3:8f:f2:a7:11:96:e2:b3:02:d7:16: 25:94:a3:78:a3:45:ba:b1:42:8e:50:90:8a:1e:0a: 70:02:5f:dd:39:36:5e:0f:0a:26:9e:78:24:d9:d4: 61:32:9a:d7:ce:cf:9b:0e:ee:d5:bc:7f:63:23:26: 85:92:e6:e8:98:5c:62:e0:b9:23:cd:a2:89:06:8e: 43:23:ae:40:df:ce:6b:27:78:91:19:89:f7:21:92: a5:7a:47:b5:bc:ea:36:0f:b7:49:ee:b4:17:83:77: d6:de:e6:a8:dc:8b:c3:c0:2c:20:e6:a5:df:0c:8f: 53:53:41:40:9e:c8:df:bb:44:53:46:87:af:27:90: 9d:27:6f:ea:d4:86:69:51:e2:8e:25:79:65:3b:e7: 2a:57:60:25:ee:47:e0:c3:74:4b:7d:33:a2:e3:87: 55:55:14:ac:1b:a9:08:d2:e6:1c:16:e4:96:f2:7c: 7f:4e:47:92:4b:a4:32:ec:01:c0:c8:40:23:5b:df: 69:2e:cc:ec:0f:56:e4:d2:46:0f:9f:47:41:03:e2: f4:69:52:8f:59:4a:af:ac:3f:63:22:1b:aa:21:7d: f1:83:4b:cc:b0:a8:fc:3c:4a:05:df:1f:bd:64:e3: f5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:AC:40:E1:86:CC:6F:32:F5:9E:3A:3B:4E:DA:3F:51:97:92:F8:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfb98baa-2682-37a7-bfc4-9b7540f961e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:99:58:d4:4d:ef:28:4f:3f:b9:84:a3:aa:2f:d6:9d:98:57: aa:77:c9:47:26:cc:d8:ad:f7:e4:be:21:dd:ac:27:9a:52:fa: 06:66:93:08:5e:ba:14:ec:c9:d8:20:96:80:03:d0:12:fe:49: a7:10:da:46:52:ff:ca:ce:21:5f:e1:76:3e:04:83:aa:26:e1: 95:db:19:c9:3a:5a:4a:50:a9:6d:d3:e5:e1:4e:a5:28:8b:9d: 50:91:a4:3e:48:d8:2c:6f:b3:cb:0c:25:d2:a3:32:72:3a:8c: 74:8b:cd:c5:de:d8:bf:40:3d:60:18:f7:9c:30:5d:5f:7c:c5: 07:2f:ae:6a:eb:6d:32:7f:73:c6:ba:39:03:c4:95:c3:3a:b3: 55:c3:b9:94:8e:0c:71:82:24:d0:87:78:13:a9:dd:cd:7c:9e: b8:ec:a5:de:6c:56:1a:89:8e:5f:a7:e3:93:cd:ac:f2:5c:3a: 24:4a:43:7a:20:ee:b7:34:f7:4f:a5:fa:9d:02:55:67:4c:07: 8c:3d:a4:ba:c4:ad:0e:8d:ec:d8:84:90:90:8a:11:30:e4:1a: a6:06:f6:a0:d1:fb:23:20:57:fe:54:c6:31:00:44:46:01:55: 29:d4:46:d7:28:a3:31:d6:fe:d9:75:41:a4:35:d9:4c:2d:c1: 57:7c:07:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1ndwFJK94+iZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZTBhNTRkZDEtYzYwMC00Y2I2LThmZjEtMGQ1OGVlMjY4YWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRUCMG2OWmKfvW7yVHHCUdeRs4/ypxGW4rMC 1xYllKN4o0W6sUKOUJCKHgpwAl/dOTZeDwomnngk2dRhMprXzs+bDu7VvH9jIyaF kubomFxi4LkjzaKJBo5DI65A385rJ3iRGYn3IZKleke1vOo2D7dJ7rQXg3fW3uao 3IvDwCwg5qXfDI9TU0FAnsjfu0RTRoevJ5CdJ2/q1IZpUeKOJXllO+cqV2Al7kfg w3RLfTOi44dVVRSsG6kI0uYcFuSW8nx/TkeSS6Qy7AHAyEAjW99pLszsD1bk0kYP n0dBA+L0aVKPWUqvrD9jIhuqIX3xg0vMsKj8PEoF3x+9ZOP1uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOsQOGGzG8y9Z46O07aP1GXkvh/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGZiOThiYWEtMjY4Mi0z N2E3LWJmYzQtOWI3NTQwZjk2MWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9G0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqZWNRN7yhPP7mEo6ov1p2YV6p3yUcmzNit9+S+Id2sJ5pS+gZmkwhe uhTsydggloAD0BL+SacQ2kZS/8rOIV/hdj4Eg6om4ZXbGck6WkpQqW3T5eFOpSiL nVCRpD5I2Cxvs8sMJdKjMnI6jHSLzcXe2L9APWAY95wwXV98xQcvrmrrbTJ/c8a6 OQPElcM6s1XDuZSODHGCJNCHeBOp3c18nrjspd5sVhqJjl+n45PNrPJcOiRKQ3og 7rc090+l+p0CVWdMB4w9pLrErQ6N7NiEkJCKETDkGqYG9qDR+yMgV/5UxjEAREYB VSnURtcoozHW/tl1QaQ12UwtwVd8B9M= -----END CERTIFICATE-----Generated at Mon Oct 20 02:36:30 2025 by rpki-client