$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22fe71ac-4030-3145-827c-318fba1cab01.roa File: 22fe71ac-4030-3145-827c-318fba1cab01.roa (raw, json) Hash identifier: yh5hUs9dAMzyDIg2Qe59SFUHOKPVuZjXqVCkd0xPkWw= Subject key identifier: D7:F5:55:7A:32:9A:F8:7D:59:4A:B9:41:D7:34:63:35:D5:7C:0D:76 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC76FAEBEDEE9B888C165C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22fe71ac-4030-3145-827c-318fba1cab01.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.222.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:6f:ae:be:de:e9:b8:88:c1:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=13a7c826-273f-41fb-8b11-308626871048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:58:17:aa:06:2d:f7:99:b1:f5:fe:e8:99:92: 2c:e7:ec:e4:3c:24:b4:3e:36:3c:b9:bc:01:51:59: 1e:8c:ec:e4:f1:b8:6d:f3:dc:53:0a:2f:14:8b:6a: a5:ce:a5:39:e6:1d:de:7c:78:1e:9b:54:25:de:6c: 5e:9b:a5:e9:ce:11:d0:76:52:4d:ea:f1:f9:31:43: 10:b6:ab:ad:89:52:1f:07:1e:d6:5d:bf:34:02:9a: 32:c3:b2:eb:53:cf:d5:2b:19:b8:2e:ec:79:14:76: d1:6d:30:ff:c8:b1:9d:d5:46:38:76:54:a7:6e:a1: e5:4b:f0:15:1e:7c:cc:21:1c:68:1f:92:1c:79:22: 7e:16:56:3c:d0:35:ff:29:00:26:ff:68:bd:6f:bc: 9f:86:61:75:f7:e1:e1:b9:66:70:d6:40:0a:80:ce: c4:b6:ea:19:77:ca:92:57:26:0a:a9:b9:99:6b:3b: f1:6c:42:78:5f:c2:59:9f:87:b9:bd:23:63:03:9c: 74:cc:f3:b9:86:57:5a:e6:6f:bc:d0:7a:d1:a8:15: ba:33:18:80:62:dd:b6:63:ab:65:11:8a:d4:6c:ec: 7a:0d:d6:78:c9:44:28:a8:18:e6:10:d0:6b:95:d1: 54:eb:93:cc:67:ca:5e:d1:7b:c1:c9:89:18:51:5a: c5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F5:55:7A:32:9A:F8:7D:59:4A:B9:41:D7:34:63:35:D5:7C:0D:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22fe71ac-4030-3145-827c-318fba1cab01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:3d:be:63:73:76:fe:07:6a:8b:2b:5b:4b:74:4f:26:3b:0b: 41:25:34:80:f7:e3:16:bc:f1:a1:24:fd:87:1c:c4:6c:89:15: 79:ce:91:1e:ad:e3:d8:2d:f5:43:cc:71:57:3c:ad:8f:48:15: 35:fe:d0:f7:81:e2:4e:ec:4d:10:d7:68:84:b1:7d:e1:8d:3e: 4e:ab:b3:8f:66:a6:97:f1:08:b5:a7:27:d7:29:d8:b7:23:37: d0:cf:8b:4c:87:dc:e3:e8:af:a1:24:4c:9b:06:fd:f6:e5:74: 0a:a4:ac:fb:68:73:fc:55:46:71:4e:e1:4f:09:60:83:83:78: d2:cd:7e:56:18:60:fc:a2:b6:36:f3:70:c0:a2:5a:a0:37:06: 9d:49:fa:1d:46:c8:73:6d:b3:d7:d3:19:e8:d9:2c:c9:8f:73: 2b:fa:5c:45:9b:82:28:f2:22:28:eb:81:49:c2:dd:b3:07:9f: a9:e8:d3:e5:4f:e7:27:2f:1c:c3:dc:80:4b:09:31:1f:bc:80: dd:da:01:21:f7:c6:ed:db:50:d3:1f:e7:18:4d:82:32:f6:56: a5:61:8f:81:c1:88:25:5e:9c:85:f1:1e:e6:28:e8:38:d2:8b: 86:c3:a4:8c:12:70:b8:f3:ca:e8:1a:45:0f:8d:e3:f5:19:39: bb:00:03:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2+uvt7puIjBZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MTNhN2M4MjYtMjczZi00MWZiLThiMTEtMzA4NjI2ODcxMDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1gXqgYt95mx9f7omZIs5+zkPCS0PjY8ubwB UVkejOzk8bht89xTCi8Ui2qlzqU55h3efHgem1Ql3mxem6XpzhHQdlJN6vH5MUMQ tqutiVIfBx7WXb80Apoyw7LrU8/VKxm4Lux5FHbRbTD/yLGd1UY4dlSnbqHlS/AV HnzMIRxoH5IceSJ+FlY80DX/KQAm/2i9b7yfhmF19+HhuWZw1kAKgM7EtuoZd8qS VyYKqbmZazvxbEJ4X8JZn4e5vSNjA5x0zPO5hlda5m+80HrRqBW6MxiAYt22Y6tl EYrUbOx6DdZ4yUQoqBjmENBrldFU65PMZ8pe0XvByYkYUVrFhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNf1VXoymvh9WUq5Qdc0YzXVfA12MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjJmZTcxYWMtNDAzMC0z MTQ1LTgyN2MtMzE4ZmJhMWNhYjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF94MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFU9vmNzdv4HaosrW0t0TyY7C0ElNID34xa88aEk/YccxGyJFXnOkR6t 49gt9UPMcVc8rY9IFTX+0PeB4k7sTRDXaISxfeGNPk6rs49mppfxCLWnJ9cp2Lcj N9DPi0yH3OPor6EkTJsG/fbldAqkrPtoc/xVRnFO4U8JYIODeNLNflYYYPyitjbz cMCiWqA3Bp1J+h1GyHNts9fTGejZLMmPcyv6XEWbgijyIijrgUnC3bMHn6no0+VP 5ycvHMPcgEsJMR+8gN3aASH3xu3bUNMf5xhNgjL2VqVhj4HBiCVenIXxHuYo6DjS i4bDpIwScLjzyugaRQ+N4/UZObsAA+g= -----END CERTIFICATE-----Generated at Mon Oct 20 05:07:44 2025 by rpki-client