$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0b13ab04-5bd1-362c-a9ff-4c85fd810873.roa File: 0b13ab04-5bd1-362c-a9ff-4c85fd810873.roa (raw, json) Hash identifier: XB/itKwZzT5y6dkpCJUbZZSkcRBC/aAc2bbmO2gb180= Subject key identifier: 67:81:6D:A6:CA:AA:EB:F7:16:5B:35:46:01:1D:40:23:FA:D6:A9:47 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC76CB0BE9DA903946759E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0b13ab04-5bd1-362c-a9ff-4c85fd810873.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 16625 IP address blocks: 23.220.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:6c:b0:be:9d:a9:03:94:67:59:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=28ad4c4d-5484-4c28-8251-eb0cf32ecb59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:93:fa:6d:85:75:75:40:ac:d5:49:ac:86:b4: b7:53:67:15:ff:4c:b8:cc:8f:7c:79:65:59:3d:19: 2b:44:f6:49:ae:93:f2:99:36:67:17:61:52:2e:62: ae:79:6e:90:ec:fc:18:d9:e4:20:d3:af:23:21:f8: e6:78:2f:7d:2f:35:c5:de:19:b3:52:67:ba:81:9d: 8c:40:b1:66:01:29:ba:6f:e6:72:51:75:7f:df:3e: 9d:9a:20:9c:8d:6c:13:e1:ca:dc:d2:da:dc:9d:f6: 12:bd:4a:a7:82:4d:a7:44:c2:ac:24:ed:5e:a6:0d: 52:81:2e:d6:7c:08:e9:e5:8f:61:9b:cd:cf:37:90: 95:af:df:31:f9:df:39:41:fd:4f:26:38:02:29:5c: 23:99:51:48:8b:a1:fe:7b:2c:f8:e7:78:b7:23:e7: 20:38:70:91:f0:70:70:ec:04:c0:8e:61:59:41:80: f4:2c:5e:a5:26:01:be:b4:ed:d9:88:14:fe:1b:0f: 42:cf:1e:fa:07:ad:ef:0b:f6:ec:9f:e4:f2:d1:ea: 2b:ec:e4:06:77:d6:a3:02:54:9d:5c:a5:a5:a5:60: 30:53:00:c0:81:d5:0d:13:ba:12:e7:9c:9b:b9:54: 1e:13:ae:2d:04:fd:c1:f0:64:d0:f0:cb:72:de:8a: fc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:81:6D:A6:CA:AA:EB:F7:16:5B:35:46:01:1D:40:23:FA:D6:A9:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0b13ab04-5bd1-362c-a9ff-4c85fd810873.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:73:4c:54:65:0b:66:d6:d5:01:92:c4:95:ee:b3:65:9d:c8: b1:39:18:ba:b9:2b:43:81:a8:5e:5d:99:97:5c:ba:c6:3e:d4: b3:a7:d4:6c:6c:fe:56:4c:20:09:ce:db:4d:9b:2f:95:d1:d6: 76:6a:c6:dd:36:4e:45:24:0e:82:08:13:62:56:01:c9:d6:7c: ab:c1:ef:31:83:8c:eb:d4:7a:b4:f4:d8:e7:66:a8:57:3a:33: 5a:f4:93:2e:7d:d2:8d:21:a0:8c:a4:a2:fe:c9:85:ad:dc:d2: b7:f7:0a:f4:25:54:0d:ed:88:9b:94:e9:2a:7c:cc:50:2a:55: 9f:1a:b3:f6:f0:29:d6:32:49:20:f3:54:94:63:27:49:55:ac: 81:0a:6b:93:67:8d:c1:34:a9:0d:87:94:a8:d4:c7:92:ba:83: 36:43:0d:92:5f:fe:14:f8:eb:90:58:8c:20:64:61:2c:cd:41: 44:92:67:54:17:29:a5:50:5b:c6:39:9b:6f:1e:23:40:ec:6f: a9:f3:b1:83:db:0d:66:06:a2:47:bf:95:1a:c5:5b:8e:9f:94: 0e:4a:ce:f3:07:26:d6:36:c3:72:79:30:ea:31:00:fc:17:21: 93:9d:69:96:2f:02:c4:31:51:79:d3:0e:d4:64:38:76:a3:89: 3a:25:a8:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2ywvp2pA5RnWeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MjhhZDRjNGQtNTQ4NC00YzI4LTgyNTEtZWIwY2YzMmVjYjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJP6bYV1dUCs1UmshrS3U2cV/0y4zI98eWVZ PRkrRPZJrpPymTZnF2FSLmKueW6Q7PwY2eQg068jIfjmeC99LzXF3hmzUme6gZ2M QLFmASm6b+ZyUXV/3z6dmiCcjWwT4crc0trcnfYSvUqngk2nRMKsJO1epg1SgS7W fAjp5Y9hm83PN5CVr98x+d85Qf1PJjgCKVwjmVFIi6H+eyz453i3I+cgOHCR8HBw 7ATAjmFZQYD0LF6lJgG+tO3ZiBT+Gw9Czx76B63vC/bsn+Ty0eor7OQGd9ajAlSd XKWlpWAwUwDAgdUNE7oS55ybuVQeE64tBP3B8GTQ8Mty3or8SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeBbabKquv3Fls1RgEdQCP61qlHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGIxM2FiMDQtNWJkMS0z NjJjLWE5ZmYtNGM4NWZkODEwODczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9zQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZzTFRlC2bW1QGSxJXus2WdyLE5GLq5K0OBqF5dmZdcusY+1LOn1Gxs /lZMIAnO202bL5XR1nZqxt02TkUkDoIIE2JWAcnWfKvB7zGDjOvUerT02OdmqFc6 M1r0ky590o0hoIykov7Jha3c0rf3CvQlVA3tiJuU6Sp8zFAqVZ8as/bwKdYySSDz VJRjJ0lVrIEKa5NnjcE0qQ2HlKjUx5K6gzZDDZJf/hT465BYjCBkYSzNQUSSZ1QX KaVQW8Y5m28eI0Dsb6nzsYPbDWYGoke/lRrFW46flA5KzvMHJtY2w3J5MOoxAPwX IZOdaZYvAsQxUXnTDtRkOHajiTolqLA= -----END CERTIFICATE-----Generated at Mon Oct 20 04:57:06 2025 by rpki-client