$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4f085ef-f945-3280-987e-d4c9a979d9cb.roa File: e4f085ef-f945-3280-987e-d4c9a979d9cb.roa (raw, json) Hash identifier: JNvVmrSwxZ2qXfatIC0LyptfQU+NQh+Y1d5zWRJF7sU= Subject key identifier: 17:25:0E:07:48:13:B7:75:DC:10:ED:5F:BE:A7:37:26:80:EA:39:D9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583C9850E99A65CA1B049F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4f085ef-f945-3280-987e-d4c9a979d9cb.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.207.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:98:50:e9:9a:65:ca:1b:04:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=61c6c651-4f20-453a-a5b1-0b75e0863f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3e:97:a9:13:d8:a2:60:17:01:30:e7:25:e6: 7b:b2:fe:51:d7:78:7e:2f:f9:53:37:8d:ea:4f:08: 56:0b:2f:31:41:d3:e3:8c:c0:b0:0d:b2:6c:15:1a: b3:b0:8b:90:3b:09:52:b0:1a:79:ba:c7:16:a6:66: 88:f5:71:25:80:e0:e2:49:3f:90:31:e6:8a:cc:e2: c1:3f:99:9d:56:b0:03:c1:ec:e7:d1:88:bb:5b:02: f7:05:ab:09:08:fb:c3:10:17:27:01:e5:28:25:48: 59:85:f8:56:5e:dc:e5:68:92:f7:02:f7:0a:a6:fc: f8:2d:83:89:4a:5a:23:07:a4:f0:07:fe:77:23:ac: 7b:9b:17:79:e2:8f:31:5a:11:55:98:75:9c:85:42: 1c:9b:53:d4:ce:27:f9:9e:6e:e6:6d:5d:b8:4d:5b: f1:16:69:da:5f:79:2c:67:60:42:36:e6:a0:23:37: 12:81:13:b7:b5:58:65:e5:e7:a4:96:63:98:ee:2a: b9:db:b5:97:95:b3:7e:0a:31:f8:3f:15:b3:fc:a2: 14:fa:15:6b:5d:78:3b:b2:84:cd:d6:d1:3f:08:0a: b7:b9:60:7c:92:52:c4:b0:92:a5:c1:c1:7b:29:e8: 20:d6:11:6c:24:b4:cb:0b:df:19:f0:6f:f6:6c:71: ff:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:25:0E:07:48:13:B7:75:DC:10:ED:5F:BE:A7:37:26:80:EA:39:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4f085ef-f945-3280-987e-d4c9a979d9cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:32:bb:4b:40:50:7e:bc:35:e3:97:be:f9:4a:0f:c5:f4:77: 8e:c5:13:9c:23:ea:61:53:7f:d4:f1:b9:bc:45:74:ee:8d:6e: c4:47:90:a6:d6:5c:9a:08:c0:34:3c:53:b3:08:2d:31:34:f0: 69:21:83:2e:b0:e0:6d:41:9f:3f:4b:61:58:8c:db:07:5d:ce: da:aa:32:90:ba:9d:cb:53:8f:a7:c4:84:da:57:d4:68:88:d7: 37:cf:9b:c5:bf:a0:16:a8:8f:0a:0a:3d:8b:e5:83:49:11:c9: 8a:db:fd:25:96:26:3f:53:18:d4:86:bd:b0:f2:a3:14:1b:d9: ab:8b:10:d6:82:b1:0c:3d:1b:28:0d:6b:50:a5:be:30:a8:ab: aa:d6:f6:c1:b2:0d:a3:42:26:a9:d9:90:dc:9e:08:bc:aa:01: f6:5f:e7:3d:10:bd:e2:7b:46:f8:a8:83:d2:90:06:34:7c:76: 8f:5c:e8:59:28:4e:8a:1f:7b:31:12:14:7b:4d:29:e7:ea:9a: 31:d2:15:dc:be:6b:2d:81:19:e0:78:51:49:f8:73:ce:64:38: da:c0:af:54:ae:a6:7d:06:07:42:4d:9d:a2:fb:0a:4c:1e:be: 21:5f:4f:04:ad:fd:4e:d5:b9:cc:7c:92:33:40:25:74:77:f2: 9b:11:ba:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJhQ6ZplyhsEn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NjFjNmM2NTEtNGYyMC00NTNhLWE1YjEtMGI3NWUwODYzZjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD6XqRPYomAXATDnJeZ7sv5R13h+L/lTN43q TwhWCy8xQdPjjMCwDbJsFRqzsIuQOwlSsBp5uscWpmaI9XElgODiST+QMeaKzOLB P5mdVrADwezn0Yi7WwL3BasJCPvDEBcnAeUoJUhZhfhWXtzlaJL3AvcKpvz4LYOJ SlojB6TwB/53I6x7mxd54o8xWhFVmHWchUIcm1PUzif5nm7mbV24TVvxFmnaX3ks Z2BCNuagIzcSgRO3tVhl5eeklmOY7iq527WXlbN+CjH4PxWz/KIU+hVrXXg7soTN 1tE/CAq3uWB8klLEsJKlwcF7Kegg1hFsJLTLC98Z8G/2bHH/IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBclDgdIE7d13BDtX76nNyaA6jnZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTRmMDg1ZWYtZjk0NS0z MjgwLTk4N2UtZDRjOWE5NzlkOWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF888MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkyu0tAUH68NeOXvvlKD8X0d47FE5wj6mFTf9TxubxFdO6NbsRHkKbW XJoIwDQ8U7MILTE08Gkhgy6w4G1Bnz9LYViM2wddztqqMpC6nctTj6fEhNpX1GiI 1zfPm8W/oBaojwoKPYvlg0kRyYrb/SWWJj9TGNSGvbDyoxQb2auLENaCsQw9GygN a1ClvjCoq6rW9sGyDaNCJqnZkNyeCLyqAfZf5z0QveJ7Rviog9KQBjR8do9c6Fko ToofezESFHtNKefqmjHSFdy+ay2BGeB4UUn4c85kONrAr1Supn0GB0JNnaL7Ckwe viFfTwSt/U7Vucx8kjNAJXR38psRuvQ= -----END CERTIFICATE-----Generated at Mon Oct 20 12:35:41 2025 by rpki-client