$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d327e28e-5119-3bea-899d-291cab94b320.roa File: d327e28e-5119-3bea-899d-291cab94b320.roa (raw, json) Hash identifier: jVUUNeveB1qWPi357gCIt46VphWC6Zf5DTuMv0xGIUY= Subject key identifier: 53:50:76:CE:AE:88:A4:78:6F:CA:D7:B2:2B:A4:50:4E:BD:93:EB:21 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1806EB8D67804B2D1C9AC5C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d327e28e-5119-3bea-899d-291cab94b320.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.212.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:eb:8d:67:80:4b:2d:1c:9a:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=60d65a6f-3fa8-4152-8d96-b2dfeb47d347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3a:d3:40:1c:ee:03:a4:a1:25:71:be:94:cf: 5a:cc:ad:19:2a:9e:eb:5b:90:65:d9:81:ba:48:14: 26:95:87:c7:ef:5b:ef:cb:a6:0e:45:7d:3f:9b:c9: f8:81:cd:34:fc:5f:65:67:82:25:3c:44:e2:ae:84: ac:fd:ef:56:54:79:54:f1:24:cd:53:6b:69:b1:49: 90:04:78:38:5b:29:dd:9b:52:5e:0e:8d:f8:1f:b4: c5:f5:be:4b:18:76:bc:01:f1:21:24:8b:bf:14:2f: 64:f7:fe:74:02:bf:d9:4c:8b:c4:18:7b:f3:1f:76: 36:d4:97:58:9d:f5:e5:c7:97:99:bc:0a:fb:92:96: cf:69:54:04:75:d5:f8:0e:04:85:2f:b2:f2:db:8e: 50:ee:5f:2a:99:8a:3b:1f:53:27:04:25:55:1a:89: 45:41:a8:ed:e7:ce:6d:58:7b:00:48:81:a3:1e:ce: 4c:78:4e:9a:71:6e:ef:57:32:47:09:99:2a:f0:0b: df:86:1b:02:55:60:72:48:91:97:2c:30:85:30:d5: e1:f5:f5:66:70:d4:b6:0b:eb:a0:45:5c:a2:7e:a9: df:ac:6a:67:7c:d9:6f:d7:2d:92:dc:86:1e:cd:90: 3d:2d:1f:25:e9:b4:76:80:29:75:ef:f7:3d:25:05: d5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:50:76:CE:AE:88:A4:78:6F:CA:D7:B2:2B:A4:50:4E:BD:93:EB:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d327e28e-5119-3bea-899d-291cab94b320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:f9:49:fa:6e:78:c8:70:77:3a:38:b8:f0:96:b0:ee:45:35: b1:6e:5f:48:2c:f1:23:0c:8b:8a:4d:de:0c:05:c8:63:4d:12: be:52:56:01:eb:0c:14:dc:2f:85:18:5f:6e:df:d9:f2:dd:dd: 36:a9:ab:71:5a:0f:bf:ed:82:88:39:9d:67:52:65:ce:bf:ec: e5:c2:f4:91:ae:3b:2e:b9:89:09:d1:44:03:39:e4:1b:c8:fe: 47:7f:1b:99:43:5d:de:91:4c:bc:01:f0:5a:2d:99:c5:dc:48: b7:52:32:53:98:38:d9:a1:8e:f7:c7:3e:46:36:72:89:d3:de: 2d:a1:b0:e9:7b:ca:fb:7a:c3:2e:7b:ac:76:d2:90:c4:44:ce: 5a:13:c3:fa:c9:aa:ed:a2:fc:03:42:9e:97:18:45:12:f1:14: 90:9e:e7:06:9f:ca:9a:80:55:33:bb:25:0d:60:76:b6:52:ba: 36:98:10:66:63:92:b4:3b:ee:d3:dc:f5:ae:72:62:6b:9c:12: b4:2e:a7:a0:bb:40:2e:55:50:b8:3d:db:ff:df:29:5e:61:46: f7:a9:f1:74:ed:39:b6:d2:79:fa:32:bc:4b:32:93:e4:cf:f9: 80:53:9b:aa:45:73:8a:d9:3e:e5:bc:28:6b:5b:73:1b:a7:6d: 13:63:61:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBuuNZ4BLLRyaxcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NjBkNjVhNmYtM2ZhOC00MTUyLThkOTYtYjJkZmViNDdkMzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDrTQBzuA6ShJXG+lM9azK0ZKp7rW5Bl2YG6 SBQmlYfH71vvy6YORX0/m8n4gc00/F9lZ4IlPETiroSs/e9WVHlU8STNU2tpsUmQ BHg4Wyndm1JeDo34H7TF9b5LGHa8AfEhJIu/FC9k9/50Ar/ZTIvEGHvzH3Y21JdY nfXlx5eZvAr7kpbPaVQEddX4DgSFL7Ly245Q7l8qmYo7H1MnBCVVGolFQajt585t WHsASIGjHs5MeE6acW7vVzJHCZkq8AvfhhsCVWBySJGXLDCFMNXh9fVmcNS2C+ug RVyifqnfrGpnfNlv1y2S3IYezZA9LR8l6bR2gCl17/c9JQXVHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNQds6uiKR4b8rXsiukUE69k+shMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDMyN2UyOGUtNTExOS0z YmVhLTg5OWQtMjkxY2FiOTRiMzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9QHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/5SfpueMhwdzo4uPCWsO5FNbFuX0gs8SMMi4pN3gwFyGNNEr5SVgHr DBTcL4UYX27f2fLd3Tapq3FaD7/tgog5nWdSZc6/7OXC9JGuOy65iQnRRAM55BvI /kd/G5lDXd6RTLwB8FotmcXcSLdSMlOYONmhjvfHPkY2conT3i2hsOl7yvt6wy57 rHbSkMREzloTw/rJqu2i/ANCnpcYRRLxFJCe5wafypqAVTO7JQ1gdrZSujaYEGZj krQ77tPc9a5yYmucErQup6C7QC5VULg92//fKV5hRvep8XTtObbSefoyvEsyk+TP +YBTm6pFc4rZPuW8KGtbcxunbRNjYSA= -----END CERTIFICATE-----Generated at Tue Nov 4 22:20:38 2025 by rpki-client