$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d01ac20a-36cd-3f02-b13d-e12feb88da0e.roa File: d01ac20a-36cd-3f02-b13d-e12feb88da0e.roa (raw, json) Hash identifier: HHj48nsAcXQDY0ZmeIx8XCjqF27o6YMD/ilhZhxcpXI= Subject key identifier: FF:3A:39:14:AE:BD:3B:0D:2C:3E:A1:57:38:FA:7B:E2:E9:15:B3:2A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BBE404E45811D91AD1B5F4F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d01ac20a-36cd-3f02-b13d-e12feb88da0e.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 20940 IP address blocks: 23.209.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:4e:45:81:1d:91:ad:1b:5f:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=97ad6340-1a3d-4dd0-acf9-4c3a56f06e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6e:93:0f:f4:50:e6:e2:76:6a:7e:f2:5a:1d: 8f:39:2c:f3:94:24:f1:3b:2b:3f:6a:ea:2c:4c:4f: 94:0f:99:45:9e:c9:b7:62:25:40:3e:ad:13:96:b2: 18:99:d0:4b:a7:a3:df:6c:99:7a:19:6b:34:82:c6: 16:cf:05:8d:2f:6d:b7:4b:c7:96:17:a0:ef:ea:69: 6e:6c:61:a3:6a:c4:6f:c1:4f:0b:12:e9:8a:35:b9: 17:62:39:87:9a:81:6c:57:f9:ab:46:10:88:fd:0c: 7b:c8:ba:7d:47:70:1f:b0:93:31:34:9b:68:45:00: c7:26:18:28:59:de:6a:2b:0a:af:48:96:0c:5d:a3: c5:80:f0:ea:d7:1c:b6:d9:b5:e1:6c:32:23:f8:fe: 68:f9:10:a4:e6:8a:b2:89:7d:81:34:fe:dc:22:22: 31:ee:78:38:43:ad:3e:02:21:79:52:6a:f9:1f:aa: 14:05:cd:b2:c8:52:c8:bb:2e:f0:0d:2d:72:ae:8c: 9f:1d:1f:4e:76:a8:11:28:06:19:bc:10:3d:12:ce: 13:b7:14:8f:72:d9:29:6a:26:aa:3e:c7:cf:fc:fe: 4a:04:59:47:ad:fc:75:67:f1:96:80:3f:cc:10:f5: 06:48:4a:08:45:92:3e:bb:a7:e8:a7:f6:53:95:ed: 20:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:3A:39:14:AE:BD:3B:0D:2C:3E:A1:57:38:FA:7B:E2:E9:15:B3:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d01ac20a-36cd-3f02-b13d-e12feb88da0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:e3:e2:e1:5b:d1:00:58:d6:d9:44:d1:ee:d5:76:97:4d:1c: a6:1f:58:91:a6:92:ca:11:d4:1c:60:f4:b1:f2:b8:c3:fd:04: 9a:ce:38:eb:57:65:fa:6c:f1:84:6d:5c:b6:87:0a:dd:10:95: ec:17:6d:97:13:d0:2d:a7:69:4c:21:f1:49:e0:52:50:29:91: da:71:07:29:60:02:e5:0b:d5:e8:99:18:46:bf:ef:59:d1:6a: 7e:e9:6d:d2:9e:51:9d:e8:32:e9:9d:4d:80:05:56:01:de:ec: cf:43:86:39:ae:8b:07:a2:a8:2d:ae:fd:62:2a:ce:7c:9b:0c: 6b:00:4c:07:37:c9:91:9a:2e:10:ef:e1:09:5a:e7:c0:33:55: 67:48:76:d1:ac:4a:87:a8:83:75:48:ad:23:6a:1e:d8:e4:42: 22:b2:47:5b:79:af:0c:cb:07:28:d7:0c:ad:30:01:01:26:33: 86:c1:d1:7f:b4:b6:4c:74:fb:c3:e7:8c:e0:27:5e:64:d4:e1: 20:b2:fb:87:75:1f:12:c9:eb:c3:16:a7:a1:eb:52:c7:13:b0: 59:4f:0e:ac:1d:b1:4b:76:15:cf:0d:77:9e:9f:f9:8c:71:46: 76:3a:af:b3:75:1d:cf:dd:be:0b:08:49:ed:5a:d5:aa:62:ae: dc:31:9e:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QE5FgR2RrRtfTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk OTdhZDYzNDAtMWEzZC00ZGQwLWFjZjktNGMzYTU2ZjA2ZTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn26TD/RQ5uJ2an7yWh2POSzzlCTxOys/auos TE+UD5lFnsm3YiVAPq0TlrIYmdBLp6PfbJl6GWs0gsYWzwWNL223S8eWF6Dv6mlu bGGjasRvwU8LEumKNbkXYjmHmoFsV/mrRhCI/Qx7yLp9R3AfsJMxNJtoRQDHJhgo Wd5qKwqvSJYMXaPFgPDq1xy22bXhbDIj+P5o+RCk5oqyiX2BNP7cIiIx7ng4Q60+ AiF5Umr5H6oUBc2yyFLIuy7wDS1yroyfHR9OdqgRKAYZvBA9Es4TtxSPctkpaiaq PsfP/P5KBFlHrfx1Z/GWgD/MEPUGSEoIRZI+u6fop/ZTle0g9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP86ORSuvTsNLD6hVzj6e+LpFbMqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDAxYWMyMGEtMzZjZC0z ZjAyLWIxM2QtZTEyZmViODhkYTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9F1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3j4uFb0QBY1tlE0e7VdpdNHKYfWJGmksoR1Bxg9LHyuMP9BJrOOOtX Zfps8YRtXLaHCt0QlewXbZcT0C2naUwh8UngUlApkdpxBylgAuUL1eiZGEa/71nR an7pbdKeUZ3oMumdTYAFVgHe7M9DhjmuiweiqC2u/WIqznybDGsATAc3yZGaLhDv 4Qla58AzVWdIdtGsSoeog3VIrSNqHtjkQiKyR1t5rwzLByjXDK0wAQEmM4bB0X+0 tkx0+8PnjOAnXmTU4SCy+4d1HxLJ68MWp6HrUscTsFlPDqwdsUt2Fc8Nd56f+Yxx RnY6r7N1Hc/dvgsISe1a1apirtwxnnk= -----END CERTIFICATE-----Generated at Wed Nov 5 00:52:15 2025 by rpki-client