$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a2798f7-5b92-3031-904c-2b8522db1ea7.roa File: 7a2798f7-5b92-3031-904c-2b8522db1ea7.roa (raw, json) Hash identifier: cU671X1QRCi4m7WG4n9N0TOWBmkJEfniYegVMJ2O1Q8= Subject key identifier: 49:2F:41:91:DB:5D:F3:45:7D:D7:8C:71:58:86:9C:1A:DE:72:83:57 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B328C4CCF9969C61C11428680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a2798f7-5b92-3031-904c-2b8522db1ea7.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 45430 IP address blocks: 23.209.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:4c:cf:99:69:c6:1c:11:42:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=b1a317d2-0a31-4646-9b30-dcfdee0efe20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:89:8c:a1:87:df:c2:0f:78:aa:77:57:26:4e: 5b:7e:79:90:19:96:bf:ae:80:8e:8a:4d:aa:8e:71: 29:21:be:8b:f8:65:b1:b8:ac:1a:7a:a4:e9:00:a6: 69:91:5d:49:e6:9f:2c:1c:67:4d:52:77:7c:fd:da: 5d:5c:64:19:86:7f:82:09:12:0e:db:9a:f7:48:77: 3b:c6:ae:75:01:b2:6b:fa:4b:09:a7:be:3f:c7:d4: 74:09:80:a5:c8:7b:5f:96:17:fc:cb:53:12:ee:5c: 22:6d:36:d6:95:09:16:86:64:a0:ea:87:db:f0:13: 57:3f:39:80:6e:64:aa:3b:76:28:66:b0:35:50:37: 91:9d:35:bb:96:8a:41:8d:22:79:8f:c3:58:13:01: 8a:28:82:fb:9b:0f:5c:fd:f1:bb:eb:59:4c:f7:3b: 26:0b:d4:01:16:99:a0:9b:2d:48:70:ff:80:f9:87: b8:4e:12:95:bf:d5:34:ad:a8:f3:9b:eb:84:b7:3e: 11:4f:65:04:34:fc:aa:83:df:1d:c7:a2:9c:dd:90: 88:46:26:4e:c3:1e:0e:10:e5:6b:4a:8c:ea:72:7e: 25:23:8d:8a:95:90:ee:d5:dc:59:1b:f5:a9:17:d2: a8:56:93:71:2f:a9:4d:49:4f:1e:76:ff:b4:6a:bf: 09:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2F:41:91:DB:5D:F3:45:7D:D7:8C:71:58:86:9C:1A:DE:72:83:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a2798f7-5b92-3031-904c-2b8522db1ea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:a3:35:54:cd:f2:b2:11:79:08:26:36:b5:86:86:7e:0c:be: 6a:08:d3:54:f8:3f:5e:ce:fe:e7:08:61:b2:ba:9b:f4:18:c6: b8:df:9a:d1:8a:5f:bb:e6:d6:e4:de:69:ae:e7:e9:7c:f6:c1: 33:24:31:65:c4:ac:e0:0b:23:d9:fd:eb:39:9a:b5:21:22:d2: c7:da:9f:a7:30:63:d9:f8:41:b6:a7:05:df:9d:ac:4d:a4:e9: 93:2e:c4:66:98:5c:20:93:c4:76:a8:8f:8a:4b:f4:b5:ae:99: 72:cf:5e:30:d5:e9:b2:7f:cd:07:3e:57:66:6f:3a:2d:3a:9a: a7:86:e3:54:3e:68:a5:47:46:69:29:36:38:04:39:60:4c:ba: 5d:b0:e1:6c:af:05:1d:28:91:4a:d9:2f:60:43:5b:55:d4:bc: c8:61:ba:a3:15:7f:48:00:1a:95:8f:9c:44:42:61:f6:e3:82: 97:76:bc:59:80:81:84:10:d8:ce:bf:b0:38:55:d8:04:47:c4: 07:2d:de:40:d0:51:9b:54:40:5d:ca:ad:07:e1:34:86:14:94: 91:d1:35:56:cb:d8:ac:8b:14:ee:7b:42:0d:b8:38:6e:f2:99: 49:74:47:22:57:dd:17:c0:59:7d:ba:6a:64:f5:cb:9b:80:80: a2:95:cf:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjEzPmWnGHBFChoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk YjFhMzE3ZDItMGEzMS00NjQ2LTliMzAtZGNmZGVlMGVmZTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqImMoYffwg94qndXJk5bfnmQGZa/roCOik2q jnEpIb6L+GWxuKwaeqTpAKZpkV1J5p8sHGdNUnd8/dpdXGQZhn+CCRIO25r3SHc7 xq51AbJr+ksJp74/x9R0CYClyHtflhf8y1MS7lwibTbWlQkWhmSg6ofb8BNXPzmA bmSqO3YoZrA1UDeRnTW7lopBjSJ5j8NYEwGKKIL7mw9c/fG761lM9zsmC9QBFpmg my1IcP+A+Ye4ThKVv9U0rajzm+uEtz4RT2UENPyqg98dx6Kc3ZCIRiZOwx4OEOVr Sozqcn4lI42KlZDu1dxZG/WpF9KoVpNxL6lNSU8edv+0ar8JJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkvQZHbXfNFfdeMcViGnBrecoNXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2EyNzk4ZjctNWI5Mi0z MDMxLTkwNGMtMmI4NTIyZGIxZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9HwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyjNVTN8rIReQgmNrWGhn4MvmoI01T4P17O/ucIYbK6m/QYxrjfmtGK X7vm1uTeaa7n6Xz2wTMkMWXErOALI9n96zmatSEi0sfan6cwY9n4QbanBd+drE2k 6ZMuxGaYXCCTxHaoj4pL9LWumXLPXjDV6bJ/zQc+V2ZvOi06mqeG41Q+aKVHRmkp NjgEOWBMul2w4WyvBR0okUrZL2BDW1XUvMhhuqMVf0gAGpWPnERCYfbjgpd2vFmA gYQQ2M6/sDhV2ARHxAct3kDQUZtUQF3KrQfhNIYUlJHRNVbL2KyLFO57Qg24OG7y mUl0RyJX3RfAWX26amT1y5uAgKKVz/I= -----END CERTIFICATE-----Generated at Fri Oct 24 17:00:45 2025 by rpki-client