$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a361201-c1a3-3680-b602-edf0734457ba.roa File: 5a361201-c1a3-3680-b602-edf0734457ba.roa (raw, json) Hash identifier: ex3mtHioYnuFCubRFf8G4FREJz5HuxKviqNa4fSHCm4= Subject key identifier: 6A:EC:D7:64:DD:45:89:F7:CD:D4:9D:87:24:44:B1:19:32:25:E2:1A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1806E8B2AEA006D0395B6400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a361201-c1a3-3680-b602-edf0734457ba.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.214.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:e8:b2:ae:a0:06:d0:39:5b:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=73089038-9b60-4fb3-b8e3-929f9d66b482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d1:cf:3b:03:35:65:6e:a1:f6:a5:b7:67:02: 56:36:ae:60:a1:2c:bb:a6:a3:08:53:6e:de:30:43: f9:ff:5e:b2:67:5e:0d:da:87:78:16:b9:3c:de:d1: f4:1f:ca:7f:88:08:a7:e7:9b:95:27:d5:8e:af:29: e3:43:a7:10:11:89:bb:e8:57:2a:5b:71:ed:55:f4: e6:5a:1c:01:d2:42:63:cc:85:84:90:03:a9:0e:7d: 4d:49:ce:91:d9:3b:00:65:13:f9:a9:3a:7c:97:12: f2:07:a5:ad:23:75:10:5c:89:b9:4e:28:82:c3:92: d5:26:c8:1b:bb:f5:3f:4e:33:79:7e:aa:89:9c:5d: ab:1c:28:78:58:5c:44:76:79:86:58:38:78:28:94: c8:9b:bd:be:44:ac:4a:b6:af:ff:4c:d0:aa:db:d6: fd:4a:4b:cc:3c:88:17:7c:be:77:31:c7:ca:ad:4e: 0f:3e:cc:49:8c:22:cd:77:34:1e:17:eb:0e:0e:db: c4:7f:00:d9:fe:d0:7d:ba:57:dc:2a:48:0d:26:86: c0:2d:84:2b:e9:fb:cf:37:63:22:dd:1a:e0:2d:cc: 4d:4f:cf:b0:47:31:35:3f:e7:54:34:82:73:db:17: 1d:9c:58:f8:2d:00:a3:f8:f0:75:63:d6:31:73:dd: 08:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:EC:D7:64:DD:45:89:F7:CD:D4:9D:87:24:44:B1:19:32:25:E2:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a361201-c1a3-3680-b602-edf0734457ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:6b:9b:35:0d:e5:f1:94:09:de:48:e8:d3:71:1b:13:e5:53: c0:64:3b:06:81:16:31:e4:21:f4:1e:d3:d4:8a:8e:19:b2:12: 66:1f:7d:40:80:3b:1d:b2:8e:78:db:90:36:3b:70:de:37:2e: 4b:56:07:a3:6e:ad:ea:b8:f4:e6:91:3f:5f:37:99:21:6b:ac: 25:7c:bd:87:ed:a6:25:1a:61:4b:f9:94:8f:b2:e7:00:4d:25: c4:b9:46:a2:7e:a8:d7:81:ea:ec:ce:50:10:48:50:5e:79:9f: e1:53:c9:be:0b:0b:7b:7f:1b:87:f0:e1:f2:19:e7:f4:35:44: ed:3e:06:b5:ac:3b:f1:4e:c5:9a:8a:24:3b:ef:33:78:f8:fb: 7e:f2:d5:03:49:a8:7c:d1:f8:68:42:15:35:eb:88:f7:bf:5a: 8a:72:8f:70:02:0e:23:af:eb:c9:f5:05:73:97:5c:c7:08:99: 6a:e7:76:53:e1:2b:2b:5b:bf:2d:09:1c:f8:1c:8c:76:ed:6f: 8f:74:c0:b1:30:94:f7:ea:68:40:ca:a7:72:40:3a:09:67:a2: 55:9e:ae:72:08:4f:7c:e3:da:d0:2f:42:28:1a:8d:46:a1:88: b3:b1:bd:b3:04:1a:55:aa:a0:1d:91:a2:17:35:ca:a0:f3:56: 35:8c:ae:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBuiyrqAG0DlbZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NzMwODkwMzgtOWI2MC00ZmIzLWI4ZTMtOTI5ZjlkNjZiNDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9HPOwM1ZW6h9qW3ZwJWNq5goSy7pqMIU27e MEP5/16yZ14N2od4Frk83tH0H8p/iAin55uVJ9WOrynjQ6cQEYm76FcqW3HtVfTm WhwB0kJjzIWEkAOpDn1NSc6R2TsAZRP5qTp8lxLyB6WtI3UQXIm5TiiCw5LVJsgb u/U/TjN5fqqJnF2rHCh4WFxEdnmGWDh4KJTIm72+RKxKtq//TNCq29b9SkvMPIgX fL53McfKrU4PPsxJjCLNdzQeF+sODtvEfwDZ/tB9ulfcKkgNJobALYQr6fvPN2Mi 3RrgLcxNT8+wRzE1P+dUNIJz2xcdnFj4LQCj+PB1Y9Yxc90IuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrs12TdRYn3zdSdhyREsRkyJeIaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWEzNjEyMDEtYzFhMy0z NjgwLWI2MDItZWRmMDczNDQ1N2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9YUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRrmzUN5fGUCd5I6NNxGxPlU8BkOwaBFjHkIfQe09SKjhmyEmYffUCA Ox2yjnjbkDY7cN43LktWB6Nureq49OaRP183mSFrrCV8vYftpiUaYUv5lI+y5wBN JcS5RqJ+qNeB6uzOUBBIUF55n+FTyb4LC3t/G4fw4fIZ5/Q1RO0+BrWsO/FOxZqK JDvvM3j4+37y1QNJqHzR+GhCFTXriPe/Wopyj3ACDiOv68n1BXOXXMcImWrndlPh Kytbvy0JHPgcjHbtb490wLEwlPfqaEDKp3JAOglnolWernIIT3zj2tAvQigajUah iLOxvbMEGlWqoB2Rohc1yqDzVjWMrsk= -----END CERTIFICATE-----Generated at Tue Nov 4 22:20:07 2025 by rpki-client