$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c881c764-a36a-3a2e-ad04-8c57d04ffb54.roa File: c881c764-a36a-3a2e-ad04-8c57d04ffb54.roa (raw, json) Hash identifier: /mrZJ3JZ7NzYmiiW2bnGixpZ1B9W2rXel2C9iHDorSA= Subject key identifier: 2C:EB:C9:03:B1:9C:2A:85:B9:BC:4C:FF:B1:F6:DD:F5:60:B5:5E:EE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583C95E99DEAFFD888166300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c881c764-a36a-3a2e-ad04-8c57d04ffb54.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.206.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:95:e9:9d:ea:ff:d8:88:16:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=ff33dcde-9240-461a-beda-a01c3458d6eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:33:eb:9a:da:ac:fa:e5:f4:09:94:43:24:72: fd:14:cd:56:a9:f7:ba:5c:d1:5a:79:56:98:bd:08: dd:ba:c3:c0:1d:ed:fe:cf:ca:ac:38:a7:bf:f2:f7: 6e:90:d7:d3:27:b3:ac:95:9c:86:fb:a6:32:a6:38: 01:ee:fa:27:df:f6:28:02:17:cf:31:b8:48:c0:cd: ef:22:38:2e:b1:24:ac:77:b9:5d:89:11:e0:b7:57: 99:0f:7e:7a:6f:69:ff:6c:74:2d:50:f4:5d:d0:47: 44:80:81:59:ff:93:0a:bd:14:67:e7:30:bb:27:9b: cf:52:14:37:99:a5:c4:42:4d:df:e9:02:2b:12:69: 35:ca:3d:5c:32:41:10:f2:5c:7e:13:a9:90:ae:3a: de:3b:48:19:17:1c:94:9a:5c:da:5f:50:b5:0a:05: 0b:73:03:08:db:b7:18:a1:cd:a9:a7:d9:e8:f9:4c: 42:c3:e0:91:43:97:bc:0a:39:ba:1e:e6:2e:51:ac: 56:14:bd:cf:07:2f:6f:96:fd:0e:6c:f6:cd:f4:55: 54:7c:eb:8e:d3:26:fa:93:0b:96:51:4a:ed:64:43: fa:48:c5:03:0d:50:25:93:b5:5c:46:42:38:d1:68: 47:99:37:56:f1:88:25:40:83:9d:9e:07:b0:a5:5b: ef:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:EB:C9:03:B1:9C:2A:85:B9:BC:4C:FF:B1:F6:DD:F5:60:B5:5E:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c881c764-a36a-3a2e-ad04-8c57d04ffb54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:d3:98:5f:90:ef:a2:bd:b2:d9:6b:ed:5b:60:27:89:ac:e3: cb:31:d1:76:15:c8:17:56:13:4f:0e:dc:4f:0e:45:85:70:09: 17:20:22:80:cf:de:eb:12:25:1d:45:72:c2:94:e1:52:29:1e: f9:b7:16:9c:b7:79:fe:40:89:d6:5d:8d:cf:3c:0d:7e:ab:69: 7b:63:b8:f7:7e:ce:01:9d:68:79:14:4e:26:85:0b:e1:f8:b5: da:4d:56:94:75:89:ec:68:36:c2:0e:e8:ac:59:af:b7:63:63: 74:ed:de:52:4d:20:10:99:9d:0b:c8:2c:f2:1c:07:35:97:45: f1:8d:68:a1:64:00:1b:eb:97:0b:26:f2:8f:28:df:34:b2:5d: c2:42:55:a3:60:ad:12:c3:26:be:65:46:14:b3:ce:5b:6b:06: 88:9a:f8:36:1c:b2:39:f9:23:72:27:22:11:10:8b:34:e8:74: 91:cf:e1:b1:69:6a:e1:fb:a3:ab:87:b2:e4:84:40:34:2d:14: 9b:73:7d:16:52:70:c0:85:a5:19:90:4f:e9:1a:e6:9c:73:fe: e6:da:f8:73:fb:ab:ed:46:a2:af:3c:7b:07:3e:84:18:47:09: 42:99:2c:5e:0a:5e:5b:11:72:41:c9:b8:61:15:36:92:a6:75: 24:b8:37:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJXpner/2IgWYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZmYzM2RjZGUtOTI0MC00NjFhLWJlZGEtYTAxYzM0NThkNmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8TPrmtqs+uX0CZRDJHL9FM1Wqfe6XNFaeVaY vQjdusPAHe3+z8qsOKe/8vdukNfTJ7OslZyG+6YypjgB7von3/YoAhfPMbhIwM3v IjgusSSsd7ldiRHgt1eZD356b2n/bHQtUPRd0EdEgIFZ/5MKvRRn5zC7J5vPUhQ3 maXEQk3f6QIrEmk1yj1cMkEQ8lx+E6mQrjreO0gZFxyUmlzaX1C1CgULcwMI27cY oc2pp9no+UxCw+CRQ5e8Cjm6HuYuUaxWFL3PBy9vlv0ObPbN9FVUfOuO0yb6kwuW UUrtZEP6SMUDDVAlk7VcRkI40WhHmTdW8YglQIOdngewpVvvYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzryQOxnCqFubxM/7H23fVgtV7uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzg4MWM3NjQtYTM2YS0z YTJlLWFkMDQtOGM1N2QwNGZmYjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF854MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/TmF+Q76K9stlr7VtgJ4ms48sx0XYVyBdWE08O3E8ORYVwCRcgIoDP 3usSJR1FcsKU4VIpHvm3Fpy3ef5AidZdjc88DX6raXtjuPd+zgGdaHkUTiaFC+H4 tdpNVpR1iexoNsIO6KxZr7djY3Tt3lJNIBCZnQvILPIcBzWXRfGNaKFkABvrlwsm 8o8o3zSyXcJCVaNgrRLDJr5lRhSzzltrBoia+DYcsjn5I3InIhEQizTodJHP4bFp auH7o6uHsuSEQDQtFJtzfRZScMCFpRmQT+ka5pxz/uba+HP7q+1Goq88ewc+hBhH CUKZLF4KXlsRckHJuGEVNpKmdSS4N3U= -----END CERTIFICATE-----Generated at Tue Nov 4 23:53:30 2025 by rpki-client