$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08825d7a-816d-305d-8e50-8167b3827d91.roa File: 08825d7a-816d-305d-8e50-8167b3827d91.roa (raw, json) Hash identifier: OG88g3lkJZ/uIbWN/idD+Qe9gwBPIY6i+qNNLwnTlWs= Subject key identifier: AD:23:96:B2:6B:2A:60:8B:A6:D7:96:7A:BD:D0:D5:C5:92:FD:2F:01 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B758CA8B65D2AADA72F663580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08825d7a-816d-305d-8e50-8167b3827d91.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 20940 IP address blocks: 23.221.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:a8:b6:5d:2a:ad:a7:2f:66:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=879dce13-0974-4e87-a921-9c73087f8eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2e:67:29:94:18:ad:40:f2:6a:99:ca:e5:f2: d8:63:f7:30:3e:45:97:57:9a:d2:2b:79:b1:b8:b8: b2:98:ab:e5:3e:f7:72:5e:6b:a0:c1:65:15:14:dc: ad:eb:80:5f:56:6a:5f:76:f5:8e:da:02:63:79:c0: 6f:19:70:25:89:79:d1:e0:05:b1:b5:9e:24:a4:c9: 21:49:60:73:7f:3d:cb:99:60:1b:59:91:6c:9e:ef: 16:14:c6:58:1c:21:8d:c8:e8:26:9d:80:40:ec:3b: ed:fc:0d:01:ab:23:08:39:1b:64:95:37:4c:bd:43: a7:fe:4a:0b:7d:b9:0d:bb:bd:c9:0f:d2:cf:e4:1b: 5e:9b:8c:11:94:c9:56:cb:72:aa:4b:b3:82:f1:70: ef:eb:87:80:3e:ee:a2:bb:84:f1:c6:9c:ce:4e:f7: a2:4b:4f:e7:2f:77:b3:cd:88:03:9d:1d:34:82:0e: a1:ae:fd:9b:a5:16:fc:0e:eb:bc:31:39:7b:b1:04: b1:67:9e:1e:70:a5:50:f0:2d:99:cb:64:a4:29:7f: 5f:1d:ad:47:aa:18:b7:c3:b2:13:ed:80:73:0d:14: 41:1f:23:1f:10:f7:2f:09:1d:8d:81:12:43:c7:07: 22:b9:b9:38:21:8b:8f:3b:6a:37:da:ef:0c:48:84: 10:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:23:96:B2:6B:2A:60:8B:A6:D7:96:7A:BD:D0:D5:C5:92:FD:2F:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08825d7a-816d-305d-8e50-8167b3827d91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:f6:fe:eb:ba:02:65:e1:b3:5e:a7:37:77:32:fc:2c:95:ba: 07:ed:cb:49:64:14:06:88:b8:8f:b6:17:e4:aa:71:82:47:42: c7:7b:93:ef:00:30:54:e5:f6:e8:c1:ea:a3:cd:4d:55:47:2b: 00:48:a8:90:d0:39:4c:fd:0b:e7:18:12:01:2a:1e:f2:1f:2b: a5:83:be:92:1d:81:0c:2a:91:a6:d9:dd:2c:f4:0a:da:95:d8: 4f:14:0d:0c:c5:7a:36:f7:d1:d9:f0:60:cb:47:53:20:8e:38: 5a:1d:c2:84:4f:c3:f2:9e:cc:34:cd:70:b7:61:4b:bb:73:83: b6:e7:1a:33:4b:9b:1d:25:03:9c:42:5f:8b:8b:d6:cc:ff:72: 57:e7:0c:0f:20:21:a4:6b:c0:c6:43:8e:8c:74:eb:9d:97:fb: 7e:1e:5e:ec:a8:c5:8b:27:5b:16:32:87:d1:35:a8:35:e3:06: b4:15:09:b2:4e:ad:80:32:80:cb:e9:af:ad:73:69:92:7e:53: 53:39:38:fa:17:b3:e5:c9:c0:bb:b4:0e:4f:7d:8a:0d:f6:bf: 60:28:be:55:a5:ff:0f:93:c7:3f:4c:85:fc:d3:d9:23:ac:9c: 36:09:69:3f:a2:9d:79:ee:aa:2b:85:38:c1:79:33:2d:16:27: f1:8f:aa:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jKi2XSqtpy9mNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk ODc5ZGNlMTMtMDk3NC00ZTg3LWE5MjEtOWM3MzA4N2Y4ZWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy5nKZQYrUDyapnK5fLYY/cwPkWXV5rSK3mx uLiymKvlPvdyXmugwWUVFNyt64BfVmpfdvWO2gJjecBvGXAliXnR4AWxtZ4kpMkh SWBzfz3LmWAbWZFsnu8WFMZYHCGNyOgmnYBA7Dvt/A0BqyMIORtklTdMvUOn/koL fbkNu73JD9LP5Btem4wRlMlWy3KqS7OC8XDv64eAPu6iu4TxxpzOTveiS0/nL3ez zYgDnR00gg6hrv2bpRb8Duu8MTl7sQSxZ54ecKVQ8C2Zy2SkKX9fHa1Hqhi3w7IT 7YBzDRRBHyMfEPcvCR2NgRJDxwciubk4IYuPO2o32u8MSIQQ7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0jlrJrKmCLpteWer3Q1cWS/S8BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDg4MjVkN2EtODE2ZC0z MDVkLThlNTAtODE2N2IzODI3ZDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF90pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAP2/uu6AmXhs16nN3cy/CyVugfty0lkFAaIuI+2F+SqcYJHQsd7k+8A MFTl9ujB6qPNTVVHKwBIqJDQOUz9C+cYEgEqHvIfK6WDvpIdgQwqkabZ3Sz0CtqV 2E8UDQzFejb30dnwYMtHUyCOOFodwoRPw/KezDTNcLdhS7tzg7bnGjNLmx0lA5xC X4uL1sz/clfnDA8gIaRrwMZDjox0652X+34eXuyoxYsnWxYyh9E1qDXjBrQVCbJO rYAygMvpr61zaZJ+U1M5OPoXs+XJwLu0Dk99ig32v2AovlWl/w+Txz9MhfzT2SOs nDYJaT+inXnuqiuFOMF5My0WJ/GPqm0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:39:18 2025 by rpki-client