$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60f70201-dd72-34ee-b145-8cd6056b4884.roa File: 60f70201-dd72-34ee-b145-8cd6056b4884.roa (raw, json) Hash identifier: HVBMhH0QEDrDkfeNQNRZTNU4cE2WekpyNN6yzwzcL3w= Subject key identifier: A9:B3:AC:6F:3F:AF:D9:4E:4C:12:D3:FC:B0:FA:D9:D0:38:14:BC:08 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD205E1F3763E27057BF980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60f70201-dd72-34ee-b145-8cd6056b4884.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 35994 IP address blocks: 23.217.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d2:05:e1:f3:76:3e:27:05:7b:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=df56c1a4-dc15-4a22-bbaa-dd9ca08b3297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:de:2c:37:b0:ea:26:b6:52:42:95:3a:41:fa: c2:98:37:cb:55:f3:1f:a9:f8:5a:0d:46:6d:7e:94: 75:a9:15:81:82:36:99:e7:2d:6d:49:6a:e7:d8:32: a3:c5:fb:d2:71:68:20:9a:74:ba:8c:ee:3c:27:48: c5:21:cf:9f:8f:a0:23:d9:17:7f:5e:14:88:8d:74: 12:f8:0d:bf:fe:30:e5:e8:4e:bd:f0:9c:a5:63:90: 01:57:99:30:e5:c3:28:a5:ac:79:aa:6e:a1:ae:8d: e9:95:98:e1:d4:1d:a4:bc:8d:dc:ab:e6:47:d6:66: 30:19:e2:1f:d4:6a:33:77:a4:e2:c3:b2:95:01:0c: 63:1e:a4:78:f6:78:b6:3e:87:6a:84:d3:6d:c2:95: 85:8c:da:53:6a:da:ad:e8:67:37:b7:fc:95:4e:aa: 66:08:86:55:56:d6:e1:2d:4f:30:f3:2f:02:dd:5a: fa:0a:a4:8c:01:44:3d:96:0c:83:68:af:fe:09:dc: a2:46:87:7c:67:21:af:8f:dd:ec:91:19:b3:e8:97: 7d:d9:37:69:ae:31:43:dd:b8:bb:6e:16:3b:dc:36: 82:8a:a5:4b:dd:d0:fb:94:97:7a:44:b0:5d:a9:d5: 38:4b:eb:c8:e3:21:0b:51:07:58:cf:f1:40:76:dc: 00:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B3:AC:6F:3F:AF:D9:4E:4C:12:D3:FC:B0:FA:D9:D0:38:14:BC:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60f70201-dd72-34ee-b145-8cd6056b4884.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:0e:be:6f:25:c5:57:24:ee:db:62:ce:b8:9e:9a:e7:8f:b7: ce:86:8a:bd:99:e7:7b:84:e9:0d:35:d9:c7:8a:09:76:6a:78: 8c:7a:13:e2:97:5b:e6:3a:4f:0e:f4:5c:d4:f1:0e:d7:29:33: 67:c0:c4:ea:91:74:ec:34:cd:38:fb:99:38:25:f9:cd:a4:6f: a5:58:87:09:d4:34:10:77:a3:5c:2f:18:c3:d1:af:47:c5:84: 53:04:75:08:72:83:5f:06:fe:e4:cf:85:9c:84:2b:7b:0a:fc: 67:b1:22:3f:7d:1f:31:2c:2c:6f:45:7a:5d:00:fa:37:a7:30: 58:4a:bd:75:ab:3e:49:6b:bf:19:d4:84:31:e9:1e:f2:56:e5: 69:6d:b5:3b:01:14:a6:9e:31:38:49:f8:73:8d:13:e8:04:44: 8b:b2:d9:06:bc:9c:ac:18:66:07:fa:fa:9b:e3:d8:27:e4:9b: 4d:94:09:00:0b:c9:4d:88:b9:90:c1:3c:2a:33:04:9b:be:98: 14:22:c4:ed:1c:04:4a:77:7f:94:21:c2:f5:3c:60:ee:a2:15: bb:4e:fd:1d:de:d5:71:88:65:d9:22:e6:76:ab:51:56:50:e6: 05:d0:48:6b:1e:bb:0a:36:20:c4:73:10:b8:fa:9c:61:1c:b1: 81:30:52:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0gXh83Y+JwV7+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk ZGY1NmMxYTQtZGMxNS00YTIyLWJiYWEtZGQ5Y2EwOGIzMjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyN4sN7DqJrZSQpU6QfrCmDfLVfMfqfhaDUZt fpR1qRWBgjaZ5y1tSWrn2DKjxfvScWggmnS6jO48J0jFIc+fj6Aj2Rd/XhSIjXQS +A2//jDl6E698JylY5ABV5kw5cMopax5qm6hro3plZjh1B2kvI3cq+ZH1mYwGeIf 1Gozd6Tiw7KVAQxjHqR49ni2PodqhNNtwpWFjNpTatqt6Gc3t/yVTqpmCIZVVtbh LU8w8y8C3Vr6CqSMAUQ9lgyDaK/+CdyiRod8ZyGvj93skRmz6Jd92TdprjFD3bi7 bhY73DaCiqVL3dD7lJd6RLBdqdU4S+vI4yELUQdYz/FAdtwAcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmzrG8/r9lOTBLT/LD62dA4FLwIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjBmNzAyMDEtZGQ3Mi0z NGVlLWIxNDUtOGNkNjA1NmI0ODg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9lrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcOvm8lxVck7ttizriemuePt86Gir2Z53uE6Q012ceKCXZqeIx6E+KX W+Y6Tw70XNTxDtcpM2fAxOqRdOw0zTj7mTgl+c2kb6VYhwnUNBB3o1wvGMPRr0fF hFMEdQhyg18G/uTPhZyEK3sK/GexIj99HzEsLG9Fel0A+jenMFhKvXWrPklrvxnU hDHpHvJW5WlttTsBFKaeMThJ+HONE+gERIuy2Qa8nKwYZgf6+pvj2Cfkm02UCQAL yU2IuZDBPCozBJu+mBQixO0cBEp3f5QhwvU8YO6iFbtO/R3e1XGIZdki5narUVZQ 5gXQSGseuwo2IMRzELj6nGEcsYEwUgQ= -----END CERTIFICATE-----Generated at Wed Nov 5 03:31:27 2025 by rpki-client