$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/864fc4b4-bb28-3388-b086-8f6e2ad09c02.roa File: 864fc4b4-bb28-3388-b086-8f6e2ad09c02.roa (raw, json) Hash identifier: vDIj3+3IKJFkiuvN0PilMe7LEraxd8Krz7nnVidJ7GA= Subject key identifier: 3F:D4:13:EE:29:DC:79:8E:E3:65:4D:65:3D:61:9F:F7:4C:57:25:D8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583CA463F7A43571D4989280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/864fc4b4-bb28-3388-b086-8f6e2ad09c02.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.207.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:a4:63:f7:a4:35:71:d4:98:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=dd5e58a8-bd04-4a71-82a6-233c02b745ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ff:ee:41:1d:f2:00:5e:68:6d:33:91:78:26: 71:2b:07:79:8d:86:f8:e8:ed:fb:4f:c7:ed:7c:28: d1:3a:1a:c8:4b:50:28:c0:54:21:c7:3c:c2:77:f2: cd:8f:23:52:89:9a:53:64:7f:6b:c7:d1:b9:f3:59: 2a:f1:6b:a7:8d:42:30:b7:1b:fb:eb:35:62:f7:7b: 59:91:7d:03:ae:f1:f2:89:ef:bd:00:91:ba:2a:b3: b6:06:85:ae:f9:08:0c:6e:51:82:45:27:c6:5f:9e: 05:6e:b6:d3:20:67:cb:67:2c:be:7a:14:7f:6b:5f: 93:44:bc:40:32:00:67:d6:d0:7f:f7:00:b5:b8:a6: 95:74:9a:72:47:f3:7b:d8:37:8a:05:aa:21:24:80: d2:2c:2a:a2:d5:5f:9b:43:fc:19:76:db:7a:61:30: ad:a4:bb:e1:93:a0:13:27:d6:3e:38:15:8a:c9:0f: bc:81:22:d1:9e:c7:db:87:a4:29:8e:8d:b2:50:dc: f6:60:a2:c2:ee:17:3e:53:65:23:fc:2b:f7:01:84: 21:04:23:89:e0:05:af:f3:e3:99:bd:a0:30:8f:b3: fc:0f:50:a1:8b:8a:5e:35:da:48:65:f4:c9:31:44: df:6d:bb:cf:39:87:63:31:49:c5:6a:65:64:f2:c2: b2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D4:13:EE:29:DC:79:8E:E3:65:4D:65:3D:61:9F:F7:4C:57:25:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/864fc4b4-bb28-3388-b086-8f6e2ad09c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:1e:4a:98:47:cc:5a:67:de:d6:9d:75:c4:4e:8e:cb:eb:05: b5:75:50:6f:c8:16:61:ca:38:50:3c:be:5b:93:16:1a:e7:92: 55:63:1a:91:6f:60:e7:07:ab:58:01:dc:e4:3a:35:7f:f8:5d: 3a:88:e7:1c:75:e7:28:96:57:3b:dc:92:36:cd:cf:9e:30:f3: 21:92:31:06:82:5b:90:2c:fd:73:b6:87:f9:a1:49:f8:c2:35: 26:7a:f3:46:bb:8a:f0:e5:58:3f:f1:78:2b:d3:1f:2e:02:9f: 9b:13:06:a3:d2:43:1b:ee:a3:a3:b1:d0:c6:59:2e:21:a8:f2: 48:dd:de:dd:1c:b9:ff:82:8a:99:46:f5:aa:18:b5:1e:38:38: 90:52:1b:0f:c9:2c:35:f0:51:a5:7a:5b:50:bc:cf:7b:82:b1: a5:01:b7:dd:0c:9b:c2:06:ad:ae:0d:c8:b1:df:b8:cd:cd:7c: 0d:c1:f1:24:a8:9b:2c:2e:b7:5c:ad:e4:73:29:01:22:e1:dd: 72:64:ca:27:f4:a5:f2:c2:c0:eb:8d:0d:4d:90:55:98:00:7c: cc:5d:9b:20:26:1e:b6:f2:a9:58:6a:96:1f:2f:d0:b7:e8:19: 4c:b4:83:a6:cd:ce:86:a3:d6:aa:16:45:e5:61:55:fc:a7:b7: ca:39:9c:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPKRj96Q1cdSYkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZGQ1ZTU4YTgtYmQwNC00YTcxLTgyYTYtMjMzYzAyYjc0NWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl//uQR3yAF5obTOReCZxKwd5jYb46O37T8ft fCjROhrIS1AowFQhxzzCd/LNjyNSiZpTZH9rx9G581kq8WunjUIwtxv76zVi93tZ kX0DrvHyie+9AJG6KrO2BoWu+QgMblGCRSfGX54FbrbTIGfLZyy+ehR/a1+TRLxA MgBn1tB/9wC1uKaVdJpyR/N72DeKBaohJIDSLCqi1V+bQ/wZdtt6YTCtpLvhk6AT J9Y+OBWKyQ+8gSLRnsfbh6Qpjo2yUNz2YKLC7hc+U2Uj/Cv3AYQhBCOJ4AWv8+OZ vaAwj7P8D1Chi4peNdpIZfTJMUTfbbvPOYdjMUnFamVk8sKymwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/UE+4p3HmO42VNZT1hn/dMVyXYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODY0ZmM0YjQtYmIyOC0z Mzg4LWIwODYtOGY2ZTJhZDA5YzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8/GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEweSphHzFpn3taddcROjsvrBbV1UG/IFmHKOFA8vluTFhrnklVjGpFv YOcHq1gB3OQ6NX/4XTqI5xx15yiWVzvckjbNz54w8yGSMQaCW5As/XO2h/mhSfjC NSZ680a7ivDlWD/xeCvTHy4Cn5sTBqPSQxvuo6Ox0MZZLiGo8kjd3t0cuf+CiplG 9aoYtR44OJBSGw/JLDXwUaV6W1C8z3uCsaUBt90Mm8IGra4NyLHfuM3NfA3B8SSo mywut1yt5HMpASLh3XJkyif0pfLCwOuNDU2QVZgAfMxdmyAmHrbyqVhqlh8v0Lfo GUy0g6bNzoaj1qoWReVhVfynt8o5nKs= -----END CERTIFICATE-----Generated at Tue Nov 4 22:24:05 2025 by rpki-client