$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22796a0f-a11f-3d7e-b81b-18b853665ad4.roa File: 22796a0f-a11f-3d7e-b81b-18b853665ad4.roa (raw, json) Hash identifier: HYF+tk84lufWVS02KNCc0IKtmj32X1i6AXV/vYRXXC8= Subject key identifier: B2:74:F9:46:7A:FB:A2:EE:47:59:2A:6C:57:CE:58:5A:90:FB:72:23 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC76492DFA136BEC8B9DAA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22796a0f-a11f-3d7e-b81b-18b853665ad4.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 34984 IP address blocks: 23.221.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:64:92:df:a1:36:be:c8:b9:da:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=1d9ed39c-fd52-45bb-ac9e-ce95b5be2961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:97:7f:82:5a:10:3d:79:8d:b1:d2:41:b5:77: 75:4e:53:4a:28:db:ae:46:94:90:ff:0c:c8:5d:b1: 9c:fb:c3:c7:d5:92:b1:e2:0d:bb:f5:f0:55:06:36: db:44:56:51:2c:58:2d:8c:0e:f9:35:09:e3:cf:9a: 79:20:6d:3d:8d:b4:ea:a2:2f:bc:f7:80:9a:15:7a: f7:f3:5a:f3:56:b5:9d:b9:eb:38:a0:4d:da:aa:9c: c1:71:c9:d0:6d:bb:34:ab:f3:26:4d:29:1c:d8:4a: 1b:37:27:26:01:2c:de:7e:2c:90:e7:0b:0f:91:21: eb:95:d6:a4:3b:5d:23:af:43:11:31:02:01:a7:79: b6:02:c2:41:3a:6f:9e:aa:f4:1f:f0:52:e5:4d:d9: c3:9c:a1:5d:36:f3:5c:40:97:be:18:32:92:fa:07: 13:da:f8:59:e4:18:d8:15:88:87:18:ff:ae:d2:cb: 7d:db:89:b1:72:21:1a:df:1c:d4:06:56:75:af:2a: 56:91:1f:7f:2e:ca:05:0c:cc:39:f8:d0:d2:e9:b0: 4e:8f:32:de:1f:eb:62:02:fb:62:f9:dc:02:56:e1: fb:24:ee:a4:c2:7b:b4:bf:72:6e:0f:e1:c2:8b:a3: f3:09:40:c1:9b:59:93:3c:1f:80:54:3b:1c:12:87: 03:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:74:F9:46:7A:FB:A2:EE:47:59:2A:6C:57:CE:58:5A:90:FB:72:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22796a0f-a11f-3d7e-b81b-18b853665ad4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:f4:a2:5a:93:d6:cd:f3:e4:a4:c1:ac:b7:0b:23:80:25:9d: 15:e6:6d:88:ad:1e:a3:5c:71:b6:64:cb:75:2a:5b:a0:45:a9: bf:9c:3b:6c:6c:82:58:78:dd:0e:f4:48:5d:53:94:2f:0c:52: 03:65:fe:8b:aa:24:8d:b6:4d:bc:45:fb:58:52:5d:cc:0d:3d: 3e:b8:d5:9d:a7:b7:d3:a4:22:43:ce:5c:78:22:14:c5:65:5d: eb:64:6c:51:a9:38:73:5b:ce:fc:c9:6b:42:ac:76:d0:cc:e0: a3:4b:e7:b5:3e:05:15:c5:b2:e4:56:ea:ce:dc:59:da:52:b3: 59:9f:47:52:ec:37:b6:af:86:9b:8f:c3:46:80:66:fa:93:3d: a6:9c:23:da:b4:92:11:24:f3:b8:5d:12:3d:e2:70:9d:3e:69: 0c:24:fc:e8:ef:39:80:99:d8:94:3a:96:ac:39:08:39:60:5b: 63:14:cb:7f:1e:d8:b7:d5:50:a6:17:35:65:b3:79:db:9c:38: 09:30:4f:f3:36:3d:25:b4:06:cd:56:d7:21:50:ad:05:69:ba: 0b:01:5f:84:37:b5:4e:7d:b0:b0:71:3c:55:a1:94:73:d2:0d: af:79:b5:be:99:4e:db:1f:d2:be:93:a1:1c:ac:db:e1:8d:59: cb:50:30:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2SS36E2vsi52qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MWQ5ZWQzOWMtZmQ1Mi00NWJiLWFjOWUtY2U5NWI1YmUyOTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJd/gloQPXmNsdJBtXd1TlNKKNuuRpSQ/wzI XbGc+8PH1ZKx4g279fBVBjbbRFZRLFgtjA75NQnjz5p5IG09jbTqoi+894CaFXr3 81rzVrWdues4oE3aqpzBccnQbbs0q/MmTSkc2EobNycmASzefiyQ5wsPkSHrldak O10jr0MRMQIBp3m2AsJBOm+eqvQf8FLlTdnDnKFdNvNcQJe+GDKS+gcT2vhZ5BjY FYiHGP+u0st924mxciEa3xzUBlZ1rypWkR9/LsoFDMw5+NDS6bBOjzLeH+tiAvti +dwCVuH7JO6kwnu0v3JuD+HCi6PzCUDBm1mTPB+AVDscEocDnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJ0+UZ6+6LuR1kqbFfOWFqQ+3IjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjI3OTZhMGYtYTExZi0z ZDdlLWI4MWItMThiODUzNjY1YWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF93AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJf0olqT1s3z5KTBrLcLI4AlnRXmbYitHqNccbZky3UqW6BFqb+cO2xs glh43Q70SF1TlC8MUgNl/ouqJI22TbxF+1hSXcwNPT641Z2nt9OkIkPOXHgiFMVl XetkbFGpOHNbzvzJa0KsdtDM4KNL57U+BRXFsuRW6s7cWdpSs1mfR1LsN7avhpuP w0aAZvqTPaacI9q0khEk87hdEj3icJ0+aQwk/OjvOYCZ2JQ6lqw5CDlgW2MUy38e 2LfVUKYXNWWzeducOAkwT/M2PSW0Bs1W1yFQrQVpugsBX4Q3tU59sLBxPFWhlHPS Da95tb6ZTtsf0r6ToRys2+GNWctQMNs= -----END CERTIFICATE-----Generated at Mon Oct 20 09:55:34 2025 by rpki-client