$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/046dd891-bf4b-3e08-9ff8-6b5b2a69c577.roa File: 046dd891-bf4b-3e08-9ff8-6b5b2a69c577.roa (raw, json) Hash identifier: L0aUTc0rmGanML2vO63m3ZKUsr+AdsyvuHkInsN7eqA= Subject key identifier: 9C:EF:00:A0:D8:76:32:94:99:BC:4A:45:37:8E:E8:F3:34:8B:40:68 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC76EFE8FC3D34E95D591C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/046dd891-bf4b-3e08-9ff8-6b5b2a69c577.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.221.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:6e:fe:8f:c3:d3:4e:95:d5:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=8f646e86-42f9-4549-9190-5e43436b9272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ac:81:11:0c:ad:f1:c2:e6:72:bd:05:e8:5b: 52:84:7a:16:27:d5:f0:57:66:0e:d8:94:98:33:9c: 98:53:8f:31:45:f6:6e:bd:d7:0a:87:bb:c4:04:23: 5c:f3:89:cb:ae:6c:84:b4:e5:23:f9:57:8d:3f:a0: 7e:b3:0c:15:62:ff:86:fb:ee:79:4d:b3:a3:6c:6e: a3:6c:05:1e:08:73:0c:cd:32:40:dd:fc:45:a2:7a: 49:a4:6b:6e:2a:76:6b:83:1d:99:e4:11:b3:ca:f6: 7b:62:f2:b4:de:84:79:bb:57:70:93:03:52:55:42: a5:f2:e2:7f:26:32:bc:02:07:09:c4:b0:46:44:e1: 4b:6e:b4:e2:56:ef:3a:35:32:ae:64:4b:24:0d:29: 13:d0:81:85:ed:01:85:2a:30:79:d9:2c:f1:fd:19: 95:3f:4e:68:22:b9:0c:de:9c:f4:6e:89:77:b3:13: 6c:62:7f:16:41:a4:af:af:91:4c:43:0b:ff:b4:63: 7c:be:14:bc:73:52:8a:fd:9c:33:65:b6:11:56:f6: 23:66:51:02:7f:ed:84:ac:51:30:23:1a:4a:8d:12: 7a:5a:94:b1:25:20:15:23:d9:77:54:4a:98:0a:3c: 03:cc:5f:fc:81:73:de:20:e1:40:bf:1a:b8:65:8c: 7b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EF:00:A0:D8:76:32:94:99:BC:4A:45:37:8E:E8:F3:34:8B:40:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/046dd891-bf4b-3e08-9ff8-6b5b2a69c577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a4:20:ac:56:ef:a1:8e:aa:36:3e:cb:0e:b4:14:ae:f3:c6: 12:e8:49:5e:ce:9d:89:73:ce:0f:90:31:50:3d:80:e7:1f:74: e9:f3:a6:f3:77:65:59:32:c7:4a:20:ee:02:40:16:4a:52:f9: b1:d0:91:7a:bd:00:61:dd:df:cd:20:62:82:b5:6b:30:cc:bc: df:82:9b:f2:68:37:f4:e8:3c:41:78:59:f8:fc:5c:9a:e0:c6: 13:b7:5c:df:75:77:16:45:a9:98:27:8a:c5:96:1f:51:4b:16: d1:bb:2e:bd:aa:2d:c6:59:0b:d9:b4:45:6e:8c:d9:db:75:aa: 0d:08:4f:b4:1d:93:c8:1f:ee:9a:57:d6:b7:8b:5f:ca:07:db: 8b:e9:98:3c:bc:85:4a:3d:9e:ac:1d:41:89:39:75:4f:b2:d6: 1d:78:40:fc:7a:d7:03:1a:d2:d7:69:24:a1:96:6e:24:94:7b: 44:33:e8:06:78:c8:66:1c:3f:49:66:d8:21:92:11:f8:a5:01: 7e:b3:ce:1a:1d:d0:53:cf:70:a7:1c:44:0c:bc:a7:a0:ab:d3: 25:55:f9:22:8c:60:ca:31:c3:17:83:6c:71:46:ba:db:51:3b: 80:32:6c:53:5c:af:df:e4:ea:d8:b6:bf:8b:97:ec:99:91:02: 87:e1:76:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx27+j8PTTpXVkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk OGY2NDZlODYtNDJmOS00NTQ5LTkxOTAtNWU0MzQzNmI5MjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qyBEQyt8cLmcr0F6FtShHoWJ9XwV2YO2JSY M5yYU48xRfZuvdcKh7vEBCNc84nLrmyEtOUj+VeNP6B+swwVYv+G++55TbOjbG6j bAUeCHMMzTJA3fxFonpJpGtuKnZrgx2Z5BGzyvZ7YvK03oR5u1dwkwNSVUKl8uJ/ JjK8AgcJxLBGROFLbrTiVu86NTKuZEskDSkT0IGF7QGFKjB52Szx/RmVP05oIrkM 3pz0bol3sxNsYn8WQaSvr5FMQwv/tGN8vhS8c1KK/ZwzZbYRVvYjZlECf+2ErFEw IxpKjRJ6WpSxJSAVI9l3VEqYCjwDzF/8gXPeIOFAvxq4ZYx7RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzvAKDYdjKUmbxKRTeO6PM0i0BoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDQ2ZGQ4OTEtYmY0Yi0z ZTA4LTlmZjgtNmI1YjJhNjljNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF93iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABikIKxW76GOqjY+yw60FK7zxhLoSV7OnYlzzg+QMVA9gOcfdOnzpvN3 ZVkyx0og7gJAFkpS+bHQkXq9AGHd380gYoK1azDMvN+Cm/JoN/ToPEF4Wfj8XJrg xhO3XN91dxZFqZgnisWWH1FLFtG7Lr2qLcZZC9m0RW6M2dt1qg0IT7Qdk8gf7ppX 1reLX8oH24vpmDy8hUo9nqwdQYk5dU+y1h14QPx61wMa0tdpJKGWbiSUe0Qz6AZ4 yGYcP0lm2CGSEfilAX6zzhod0FPPcKccRAy8p6Cr0yVV+SKMYMoxwxeDbHFGuttR O4AybFNcr9/k6ti2v4uX7JmRAofhdsE= -----END CERTIFICATE-----Generated at Mon Oct 20 02:27:27 2025 by rpki-client