$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab51c6b7-6c05-3f83-82d4-b458d62c6f2b.roa File: ab51c6b7-6c05-3f83-82d4-b458d62c6f2b.roa (raw, json) Hash identifier: sj5ZenSeNU+HvD98qkKkBV6QTFZsXape/Qnrcu4o4y0= Subject key identifier: C3:4C:89:61:D5:CA:03:85:04:2E:5C:B7:60:7C:18:B0:73:4E:F2:C6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B99D78E08F9BFBCA8A8506E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab51c6b7-6c05-3f83-82d4-b458d62c6f2b.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 35994 IP address blocks: 23.212.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:8e:08:f9:bf:bc:a8:a8:50:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=ad370ad3-4148-440c-8aff-a643f66ce579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c6:3c:c5:f8:fe:32:70:e4:ff:a7:6b:48:e0: 4e:b9:4f:e7:91:00:d5:b6:3e:5a:e0:68:df:bf:ad: 7e:b8:97:bb:97:b9:b3:2d:63:9a:2b:c4:8a:98:b2: 76:32:d5:17:c0:19:b9:c3:74:c1:2c:72:24:c0:35: b5:42:a7:04:8b:ca:33:1c:f8:90:cc:e0:64:4b:6e: 2d:8f:8c:8e:5e:c2:73:8b:ff:83:f2:3d:e6:ce:07: ac:1c:6a:bf:86:98:71:31:74:95:37:3c:ac:77:b1: f8:9c:5a:d9:41:a7:67:66:22:d4:0b:4e:9d:e5:08: a3:6c:20:fd:55:24:f0:07:d1:12:4d:0c:58:1f:51: 4f:7d:67:9e:3e:40:3d:48:1b:6b:99:ef:78:7b:c2: b3:d1:50:cd:08:bb:08:9b:99:c4:bd:f8:72:88:8c: 7a:61:aa:6b:b4:7b:f6:7f:0a:52:74:c8:6e:8f:9e: 89:20:81:79:5d:7c:13:57:21:96:30:50:90:e0:b3: 15:31:ce:82:c0:94:80:97:5e:ee:e1:31:86:d8:9d: 6d:6c:a3:90:de:f2:d5:92:3e:7b:43:9f:9d:72:dd: 55:c6:d5:c0:1a:01:60:fd:f5:92:05:53:a3:66:11: 1d:a9:4a:4b:0a:e1:eb:fb:e1:f6:3b:03:8b:0d:dd: 06:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4C:89:61:D5:CA:03:85:04:2E:5C:B7:60:7C:18:B0:73:4E:F2:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab51c6b7-6c05-3f83-82d4-b458d62c6f2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:a7:40:d9:0a:34:4a:39:43:4a:01:0f:8e:41:f1:b7:a8:fc: d8:a7:dd:cd:d6:11:ad:37:38:0d:09:a7:34:7d:07:83:63:ff: 70:d7:63:41:6b:e9:7b:8b:8a:ce:2d:f0:93:f3:a1:ea:62:26: de:ac:48:31:39:18:38:d6:2d:40:4e:a1:ff:e1:95:fb:fb:20: b4:6d:44:36:a2:70:64:a4:50:be:8d:89:ba:3f:9d:8a:9c:09: 57:7b:23:fa:a9:21:33:34:88:51:23:48:a0:b8:56:e7:c1:4a: 70:a4:45:b1:1d:40:b7:e2:7f:45:c2:c1:3a:dc:7e:1e:92:56: 91:95:9e:12:b4:28:a4:68:22:5d:a5:71:6a:91:59:4a:48:88: 09:1a:67:6f:4c:33:95:ba:70:e4:59:66:f4:90:b8:53:a3:72: b2:7e:d6:f7:e5:1f:26:60:c0:c4:a2:d5:e7:a2:f0:65:e6:cc: 16:8b:03:c1:40:3e:9b:c2:4c:e4:1e:ea:8b:0e:d4:6c:c9:49: fa:c2:30:5d:79:d4:59:b0:b9:9b:37:17:c2:39:9d:d5:40:df: 54:c3:42:6a:f5:c5:d1:36:b2:88:2d:e1:45:99:03:35:0a:bf: 2e:23:33:fc:48:22:cf:a9:fc:73:da:eb:c0:00:75:a5:ad:53: 22:20:40:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ144I+b+8qKhQbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YWQzNzBhZDMtNDE0OC00NDBjLThhZmYtYTY0M2Y2NmNlNTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8Y8xfj+MnDk/6drSOBOuU/nkQDVtj5a4Gjf v61+uJe7l7mzLWOaK8SKmLJ2MtUXwBm5w3TBLHIkwDW1QqcEi8ozHPiQzOBkS24t j4yOXsJzi/+D8j3mzgesHGq/hphxMXSVNzysd7H4nFrZQadnZiLUC06d5QijbCD9 VSTwB9ESTQxYH1FPfWeePkA9SBtrme94e8Kz0VDNCLsIm5nEvfhyiIx6YaprtHv2 fwpSdMhuj56JIIF5XXwTVyGWMFCQ4LMVMc6CwJSAl17u4TGG2J1tbKOQ3vLVkj57 Q5+dct1VxtXAGgFg/fWSBVOjZhEdqUpLCuHr++H2OwOLDd0GowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNMiWHVygOFBC5ct2B8GLBzTvLGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWI1MWM2YjctNmMwNS0z ZjgzLTgyZDQtYjQ1OGQ2MmM2ZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9RkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2nQNkKNEo5Q0oBD45B8beo/Nin3c3WEa03OA0JpzR9B4Nj/3DXY0Fr 6XuLis4t8JPzoepiJt6sSDE5GDjWLUBOof/hlfv7ILRtRDaicGSkUL6Nibo/nYqc CVd7I/qpITM0iFEjSKC4VufBSnCkRbEdQLfif0XCwTrcfh6SVpGVnhK0KKRoIl2l cWqRWUpIiAkaZ29MM5W6cORZZvSQuFOjcrJ+1vflHyZgwMSi1eei8GXmzBaLA8FA PpvCTOQe6osO1GzJSfrCMF151FmwuZs3F8I5ndVA31TDQmr1xdE2sogt4UWZAzUK vy4jM/xIIs+p/HPa68AAdaWtUyIgQPg= -----END CERTIFICATE-----Generated at Tue Nov 4 22:17:58 2025 by rpki-client