$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20750c93-c082-363f-9cd7-0107290f069a.roa File: 20750c93-c082-363f-9cd7-0107290f069a.roa (raw, json) Hash identifier: 42i9xvljL1QKTII5ygUr6tPzjbirzsPMivwXiPC4IMk= Subject key identifier: 62:8A:62:15:F4:9E:FF:E7:59:B0:1F:14:65:82:09:EE:C7:81:AE:9C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC76A9810B0081FA91191E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20750c93-c082-363f-9cd7-0107290f069a.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.220.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:6a:98:10:b0:08:1f:a9:11:91:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=5ba3d9c0-880c-4f53-863a-bc59db4046b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e8:0d:b1:c1:9a:23:1f:ff:c3:7e:5b:53:25: 86:27:4c:30:6e:3f:e3:b4:81:19:7e:b3:31:6c:ff: 7c:fc:ec:d7:47:b2:3f:ff:94:f7:03:7a:23:8f:b9: c9:18:60:a0:e4:62:f8:b8:91:a6:47:13:f1:d0:37: ba:05:65:d2:49:09:6c:d7:c4:7e:34:35:bc:cb:ca: 55:3f:2a:93:ac:8e:4d:91:cb:43:4b:56:0e:bc:86: b0:bd:ed:81:5c:de:27:15:79:2a:0b:f5:40:9c:56: 06:57:84:04:6f:42:32:9b:19:98:bc:50:41:de:6d: e4:98:64:ea:6f:3e:65:05:fd:ef:0d:bf:05:33:bf: b3:d3:ec:f9:39:d2:dd:d5:88:cd:7d:8c:a9:f1:90: 06:e9:21:02:56:90:32:3c:b5:ed:a3:4f:db:8c:02: 6b:e0:42:04:9f:15:6e:6b:0e:44:ea:d7:b7:e1:2d: 51:b6:7c:c0:14:2b:06:5d:bc:e6:9a:44:96:47:ae: 8d:fe:49:c0:cd:98:45:37:78:f8:85:75:3d:a4:29: 74:e3:49:8d:30:d9:5e:ee:32:6b:d0:93:33:e1:83: c0:ad:9c:cd:a8:b0:4a:4a:bd:a7:f2:b8:ea:4d:66: 04:ed:58:b3:69:46:7a:e5:45:26:5d:97:fb:69:38: 06:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:8A:62:15:F4:9E:FF:E7:59:B0:1F:14:65:82:09:EE:C7:81:AE:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20750c93-c082-363f-9cd7-0107290f069a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:8e:90:1a:94:53:7c:10:b8:eb:42:3e:ba:71:cd:56:d6:8c: 44:e4:93:ae:f6:c8:78:d0:cb:73:35:f7:bb:b4:66:e2:18:8f: 34:30:67:d0:8e:57:6c:ea:a1:0e:bb:db:5c:f8:dc:83:ec:37: d5:85:3e:de:21:53:05:64:4f:44:cc:f4:5a:1f:97:58:9f:2e: 39:36:2e:53:9f:f6:93:bf:f1:bf:dd:ba:cf:86:35:73:40:76: ce:4e:28:c5:d3:e5:57:11:81:17:26:7e:dd:16:6a:07:fa:b6: 93:e1:c0:fa:37:e9:0b:d8:b4:e0:c5:1e:07:a6:67:70:bc:96: 55:2f:69:22:14:0b:db:8c:33:cf:a4:72:fe:9d:88:6b:2c:9a: f5:05:dd:de:eb:dd:d5:5b:4e:e8:a0:b5:1c:b3:7d:32:64:80: 5d:f3:fc:7c:cd:0f:84:2f:b3:5a:84:08:4a:2f:89:69:8d:2a: 90:9b:8c:f4:12:df:ce:ce:82:b1:0e:8c:77:88:90:d8:b9:04: e0:79:3e:31:59:7d:5a:8e:35:35:ae:5f:22:75:78:a3:1e:70: 08:84:c8:91:3e:b2:c2:e7:97:d0:a4:14:d8:9b:04:25:94:e9: b1:d7:ff:13:8e:23:55:4e:86:4d:0e:84:aa:86:a7:43:f8:bc: 8a:99:2d:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2qYELAIH6kRkeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NWJhM2Q5YzAtODgwYy00ZjUzLTg2M2EtYmM1OWRiNDA0NmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOgNscGaIx//w35bUyWGJ0wwbj/jtIEZfrMx bP98/OzXR7I//5T3A3ojj7nJGGCg5GL4uJGmRxPx0De6BWXSSQls18R+NDW8y8pV PyqTrI5NkctDS1YOvIawve2BXN4nFXkqC/VAnFYGV4QEb0IymxmYvFBB3m3kmGTq bz5lBf3vDb8FM7+z0+z5OdLd1YjNfYyp8ZAG6SECVpAyPLXto0/bjAJr4EIEnxVu aw5E6te34S1RtnzAFCsGXbzmmkSWR66N/knAzZhFN3j4hXU9pCl040mNMNle7jJr 0JMz4YPArZzNqLBKSr2n8rjqTWYE7VizaUZ65UUmXZf7aTgGyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKKYhX0nv/nWbAfFGWCCe7Hga6cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjA3NTBjOTMtYzA4Mi0z NjNmLTljZDctMDEwNzI5MGYwNjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9xGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuOkBqUU3wQuOtCPrpxzVbWjETkk672yHjQy3M197u0ZuIYjzQwZ9CO V2zqoQ6721z43IPsN9WFPt4hUwVkT0TM9Fofl1ifLjk2LlOf9pO/8b/dus+GNXNA ds5OKMXT5VcRgRcmft0Wagf6tpPhwPo36QvYtODFHgemZ3C8llUvaSIUC9uMM8+k cv6diGssmvUF3d7r3dVbTuigtRyzfTJkgF3z/HzND4Qvs1qECEoviWmNKpCbjPQS 387OgrEOjHeIkNi5BOB5PjFZfVqONTWuXyJ1eKMecAiEyJE+ssLnl9CkFNibBCWU 6bHX/xOOI1VOhk0OhKqGp0P4vIqZLSw= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:16 2025 by rpki-client