$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/138b081b-33f2-3e8d-8f7c-74fde9737c2a.roa File: 138b081b-33f2-3e8d-8f7c-74fde9737c2a.roa (raw, json) Hash identifier: Fms0oL5dA5j/cmXyusEbhXhDebwv3u7zSrfJphATRNA= Subject key identifier: CF:7F:90:8B:2A:5F:B0:18:00:03:5A:53:2F:86:8A:5A:9E:6A:87:A8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BBE404FDF51503307F4B564C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/138b081b-33f2-3e8d-8f7c-74fde9737c2a.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 16625 IP address blocks: 23.207.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:4f:df:51:50:33:07:f4:b5:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=9ea0b30b-58bf-4558-94ba-847eb2a5624e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a5:e0:38:38:61:29:c5:7e:47:af:ed:91:45: e8:62:d3:53:39:20:94:72:22:ea:fc:c8:27:cc:d7: 0c:a3:bd:95:5a:e9:4c:2d:28:c8:ee:f7:e9:bb:b7: 1c:20:b5:9b:f0:84:2d:0e:c1:20:86:b6:b2:79:ab: 8c:bb:68:1a:b5:7a:3d:36:e6:39:64:be:57:6e:9d: d0:82:2c:47:87:8f:2d:9a:fe:4c:1a:ae:f8:2a:0c: 61:a1:44:c0:9f:49:f1:ad:94:21:87:3e:b7:8a:a0: 83:9e:82:2f:4b:2d:ec:d2:22:c0:cf:78:f1:9e:a2: 46:f8:ab:c6:38:b0:e8:d6:03:d0:bd:1a:08:6e:4f: 0e:36:95:2f:48:fb:b7:e5:ac:8a:d6:5a:1f:b1:8f: 0f:54:28:4f:a0:5e:3e:d8:1f:e8:ad:96:cd:00:26: 48:66:f3:57:34:1a:05:7d:d8:e3:5b:50:41:4d:01: 1e:84:04:2d:cf:6e:3d:22:e4:97:85:c2:2f:94:0f: a4:8a:41:47:a4:bc:3f:5c:97:e3:2f:f9:95:53:6d: bc:ef:f0:af:ed:7d:af:26:a8:cd:13:9a:ec:a5:ea: 29:6d:d1:da:9f:d7:14:ae:5c:e3:d8:bf:91:a3:f4: f2:dc:56:e9:89:37:3b:b0:a7:6a:4c:9e:7e:76:cc: 8c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7F:90:8B:2A:5F:B0:18:00:03:5A:53:2F:86:8A:5A:9E:6A:87:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/138b081b-33f2-3e8d-8f7c-74fde9737c2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:a0:f6:b5:f1:eb:5f:7b:30:78:60:6e:86:77:c3:01:c2:04: c1:34:c9:e7:17:e1:62:11:01:68:99:94:bc:81:2b:45:84:24: 89:82:b5:da:d7:e7:ae:13:6e:d6:26:c7:7c:80:71:c1:0b:bb: e9:f4:f5:c6:68:33:10:aa:ef:bc:9e:21:50:0c:bd:7c:a0:3d: ea:b2:23:76:ba:5c:b8:64:f8:35:b1:c3:cc:76:b4:5c:d6:14: fa:26:cb:5e:93:f0:6c:ed:cf:da:6f:32:a6:4b:4e:ed:96:87: 7d:8c:a1:85:16:89:94:a7:b4:42:c9:55:75:1a:a1:b4:b0:7d: 11:f1:ae:7a:85:e8:fc:34:67:64:04:86:20:49:b2:c4:99:7d: fa:65:29:ed:61:96:5b:d0:5f:a4:f1:38:c6:62:07:2d:74:ad: 11:5a:89:f9:ed:b1:15:b6:40:43:10:68:d9:b4:b8:da:e0:38: aa:5b:6d:93:62:f0:01:17:a4:87:41:78:bb:10:93:bd:cd:dc: 64:f2:73:e4:8a:fe:f2:ee:fc:67:c6:f5:4b:55:e2:6a:57:e8: 38:78:47:6f:68:05:24:4d:d5:9d:fe:2b:bf:59:ba:ce:a2:52: 90:2a:f7:f1:d4:b6:02:4f:d1:86:e7:f0:a6:45:6a:82:a0:c6: 2f:a6:ea:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QE/fUVAzB/S1ZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk OWVhMGIzMGItNThiZi00NTU4LTk0YmEtODQ3ZWIyYTU2MjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaXgODhhKcV+R6/tkUXoYtNTOSCUciLq/Mgn zNcMo72VWulMLSjI7vfpu7ccILWb8IQtDsEghrayeauMu2gatXo9NuY5ZL5Xbp3Q gixHh48tmv5MGq74KgxhoUTAn0nxrZQhhz63iqCDnoIvSy3s0iLAz3jxnqJG+KvG OLDo1gPQvRoIbk8ONpUvSPu35ayK1lofsY8PVChPoF4+2B/orZbNACZIZvNXNBoF fdjjW1BBTQEehAQtz249IuSXhcIvlA+kikFHpLw/XJfjL/mVU2287/Cv7X2vJqjN E5rspeopbdHan9cUrlzj2L+Ro/Ty3FbpiTc7sKdqTJ5+dsyMywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9/kIsqX7AYAANaUy+GilqeaoeoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTM4YjA4MWItMzNmMi0z ZThkLThmN2MtNzRmZGU5NzM3YzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8+4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCg9rXx6197MHhgboZ3wwHCBME0yecX4WIRAWiZlLyBK0WEJImCtdrX 564TbtYmx3yAccELu+n09cZoMxCq77yeIVAMvXygPeqyI3a6XLhk+DWxw8x2tFzW FPomy16T8Gztz9pvMqZLTu2Wh32MoYUWiZSntELJVXUaobSwfRHxrnqF6Pw0Z2QE hiBJssSZffplKe1hllvQX6TxOMZiBy10rRFaifntsRW2QEMQaNm0uNrgOKpbbZNi 8AEXpIdBeLsQk73N3GTyc+SK/vLu/GfG9UtV4mpX6Dh4R29oBSRN1Z3+K79Zus6i UpAq9/HUtgJP0Ybn8KZFaoKgxi+m6lI= -----END CERTIFICATE-----Generated at Tue Nov 4 22:59:35 2025 by rpki-client