$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/125f277d-d6b9-30a1-bbee-676052b265b0.roa File: 125f277d-d6b9-30a1-bbee-676052b265b0.roa (raw, json) Hash identifier: fBitBJV9OCCdb+fVt6lsNB6vmS+prwDAMhL38hTPcdM= Subject key identifier: 56:C9:E7:9A:BD:8D:BB:8D:ED:F4:5F:45:73:F4:31:B6:E0:FB:16:2E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B68FCA84223B56ED843C21400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/125f277d-d6b9-30a1-bbee-676052b265b0.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.219.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:a8:42:23:b5:6e:d8:43:c2:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=f99cd9ad-ad7d-4a64-8ff0-5addbdc5f1d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:49:ef:ab:b8:dc:c3:fd:c1:b1:08:53:8c:56: b5:f6:ef:03:52:d1:36:3e:31:c7:fa:97:b4:b4:84: 4e:4d:aa:65:c7:eb:5f:b9:8e:c1:43:2e:8b:41:48: c6:55:1e:5c:87:5c:e9:48:b4:6e:0c:64:ab:59:18: cd:f0:82:37:c4:67:f7:a9:69:e6:93:c6:02:9e:6c: e6:23:91:0d:34:7b:1b:25:b5:3c:e9:4f:ff:70:c3: 29:7a:ed:92:90:00:0e:66:9b:85:c7:32:69:f1:ba: ae:35:3a:12:7f:06:e0:e8:f0:cd:d3:24:99:18:83: 7d:f4:49:2d:05:c9:d6:14:12:f7:ee:fc:96:54:53: 61:ef:29:b6:07:89:88:57:91:eb:cf:14:4e:cd:b3: 9d:fd:5b:0d:8d:5d:e4:64:13:ff:e2:9e:e9:fc:72: ea:b2:ba:a4:0a:a3:da:a7:c1:d8:3d:44:74:1d:ea: 25:e6:2f:52:4b:b3:f5:50:f4:2d:fd:d9:79:7a:6c: 49:06:21:2e:f1:25:12:a2:ea:b1:34:5b:39:1c:21: c4:af:b7:0c:50:52:e5:6a:57:99:a9:e4:d8:ff:a5: 5c:e9:50:14:e1:30:42:4a:34:ae:38:6c:e4:5d:2a: 49:15:da:c1:55:26:87:71:d3:05:a9:71:3d:24:ab: 47:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C9:E7:9A:BD:8D:BB:8D:ED:F4:5F:45:73:F4:31:B6:E0:FB:16:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/125f277d-d6b9-30a1-bbee-676052b265b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:bf:2e:fa:e0:f5:d2:f7:51:77:68:c6:13:7a:9e:8d:19:59: 1d:8a:6d:7c:6a:b7:c7:2f:77:ed:03:9f:00:59:a0:d0:d5:4f: 59:55:7e:50:20:00:b6:87:b1:50:6b:c3:55:fc:ae:eb:9e:3b: da:07:63:44:1b:03:5a:48:5f:ec:21:c2:2f:1a:2e:73:68:58: a4:90:91:b8:3b:d1:16:20:bd:9f:44:70:41:b4:c0:8e:e9:05: f2:32:c7:c6:2d:9b:74:66:7d:bf:eb:93:56:bc:d5:78:cf:7e: c3:11:a0:28:05:6e:e1:f8:ae:ac:4f:3c:bd:4e:75:ab:1f:8c: dc:c6:dd:1c:0d:d0:ad:51:2d:bd:65:cb:a9:27:ef:46:7c:24: a6:f7:a1:32:b8:3b:2a:89:f1:88:8c:84:fa:67:9f:7f:6d:e3: 26:78:b7:69:d9:f7:f9:78:d8:34:09:12:59:f4:d8:cd:24:6d: b1:86:cb:b3:16:63:23:f8:a0:fc:3b:87:e8:a3:eb:c9:25:6b: 96:49:ae:72:ad:0c:b3:4e:50:58:22:8c:30:7c:a9:d3:cf:b5: 58:16:3b:41:26:fd:b1:52:93:da:87:d0:f3:d1:f7:86:b5:65: e3:27:8e:92:b9:46:93:47:bf:cb:fa:42:30:f9:91:c3:58:df: e6:05:b8:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/KhCI7Vu2EPCFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk Zjk5Y2Q5YWQtYWQ3ZC00YTY0LThmZjAtNWFkZGJkYzVmMWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEnvq7jcw/3BsQhTjFa19u8DUtE2PjHH+pe0 tIROTaplx+tfuY7BQy6LQUjGVR5ch1zpSLRuDGSrWRjN8II3xGf3qWnmk8YCnmzm I5ENNHsbJbU86U//cMMpeu2SkAAOZpuFxzJp8bquNToSfwbg6PDN0ySZGIN99Ekt BcnWFBL37vyWVFNh7ym2B4mIV5HrzxROzbOd/VsNjV3kZBP/4p7p/HLqsrqkCqPa p8HYPUR0Heol5i9SS7P1UPQt/dl5emxJBiEu8SUSouqxNFs5HCHEr7cMUFLlaleZ qeTY/6Vc6VAU4TBCSjSuOGzkXSpJFdrBVSaHcdMFqXE9JKtHzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbJ55q9jbuN7fRfRXP0Mbbg+xYuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTI1ZjI3N2QtZDZiOS0z MGExLWJiZWUtNjc2MDUyYjI2NWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9uYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADG/Lvrg9dL3UXdoxhN6no0ZWR2KbXxqt8cvd+0DnwBZoNDVT1lVflAg ALaHsVBrw1X8ruueO9oHY0QbA1pIX+whwi8aLnNoWKSQkbg70RYgvZ9EcEG0wI7p BfIyx8Ytm3Rmfb/rk1a81XjPfsMRoCgFbuH4rqxPPL1OdasfjNzG3RwN0K1RLb1l y6kn70Z8JKb3oTK4OyqJ8YiMhPpnn39t4yZ4t2nZ9/l42DQJEln02M0kbbGGy7MW YyP4oPw7h+ij68kla5ZJrnKtDLNOUFgijDB8qdPPtVgWO0Em/bFSk9qH0PPR94a1 ZeMnjpK5RpNHv8v6QjD5kcNY3+YFuO4= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:18 2025 by rpki-client