$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a6e88ae-fce1-33a4-8cf2-b493368b6f67.roa File: 2a6e88ae-fce1-33a4-8cf2-b493368b6f67.roa (raw, json) Hash identifier: vH1vLKDTANQVg1dTQED3cLXeSfrRNZHAAs1kpC+Pe70= Subject key identifier: 5B:06:9F:1D:B0:ED:4A:E7:47:4F:35:D3:4B:97:DF:21:AD:7C:60:CA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC7621B533C9FF39B76C4E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a6e88ae-fce1-33a4-8cf2-b493368b6f67.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.220.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:62:1b:53:3c:9f:f3:9b:76:c4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=e8125f22-3b0e-475b-af11-3ec97674ab69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d1:4c:b8:e9:a3:b0:f7:58:81:e1:fe:3e:ac: b1:6b:f5:47:b4:76:86:e3:e1:aa:6f:59:22:2e:e3: 11:3d:54:a4:27:9f:a1:ae:7b:9e:9c:92:80:ce:ad: 22:3b:ba:28:2f:e9:a5:d7:39:35:8c:d7:a4:c7:1a: fb:60:6e:e1:3c:dc:22:eb:c1:6c:8b:93:98:e5:92: 59:0b:4e:2e:3a:b0:47:fb:71:9a:5a:88:ba:3c:59: 4e:4f:04:c0:75:ea:7d:6d:49:63:34:3d:55:a3:c1: c5:70:8f:54:ca:ae:00:ce:bd:db:39:42:cf:52:45: 57:11:f7:32:ea:47:4c:05:14:7c:dd:0b:aa:23:d2: 6b:c2:e2:14:46:2c:96:83:4f:dc:24:7a:9c:81:72: f5:98:9e:c5:7e:61:e3:bb:60:3d:1a:b6:2b:51:58: fc:b5:9b:2c:fa:23:2c:4c:71:6a:43:b8:8f:a4:8c: 04:df:91:3d:cf:a8:68:82:31:44:c3:8b:e5:e6:b8: 57:34:b8:df:14:47:fc:07:4d:8a:56:ef:62:5b:44: 6e:9e:90:de:8f:1e:ad:4f:08:98:11:66:da:ee:ad: c1:d2:53:9b:84:37:00:9c:bd:29:fd:78:6e:4b:63: 41:0f:8a:c6:b7:ac:8d:a3:ab:d1:8e:0e:0c:f7:f0: f8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:06:9F:1D:B0:ED:4A:E7:47:4F:35:D3:4B:97:DF:21:AD:7C:60:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a6e88ae-fce1-33a4-8cf2-b493368b6f67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:00:d0:bb:e7:94:81:ca:a7:70:5b:31:71:4e:b8:ec:47:ec: 59:bf:5c:87:75:59:6d:ac:ae:44:fd:7c:0e:c8:5f:18:6b:a2: 96:2a:e1:5b:d4:f2:a3:62:15:c8:51:e8:db:67:c4:c0:ee:bc: 8b:d9:a9:c9:62:45:d7:da:85:dc:38:b3:d6:e0:33:85:6c:fc: c9:ab:6b:29:28:c6:b2:04:4f:b9:c7:fb:69:f0:51:09:f7:97: 37:a8:a8:ba:14:8a:cf:e1:1b:b9:cc:77:36:bb:86:27:45:68: f4:92:2c:1f:5d:25:b6:d6:f8:7d:57:5e:62:60:de:08:73:55: 56:13:bd:59:23:f5:b7:56:2b:ed:fd:eb:4d:a2:74:2f:fc:d6: e0:22:b7:66:14:b2:26:13:22:05:45:19:e2:b3:3c:6c:4d:4c: 41:fa:bc:59:57:86:bf:9e:23:f7:91:3a:78:cb:2e:12:d2:30: 41:f9:76:6a:ef:6e:9f:ef:c8:bf:98:f7:81:75:82:1f:31:97: 7b:1d:ca:28:45:0b:76:d3:e6:d3:c9:59:1f:0f:47:71:5b:68: 0a:d2:1e:87:59:1c:b8:c7:46:9c:98:a1:45:f6:47:30:d2:bd: 4c:51:a3:e6:ac:e2:79:63:51:99:5f:7e:56:79:5e:c5:89:34: d4:d9:84:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2IbUzyf85t2xOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ZTgxMjVmMjItM2IwZS00NzViLWFmMTEtM2VjOTc2NzRhYjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstFMuOmjsPdYgeH+Pqyxa/VHtHaG4+Gqb1ki LuMRPVSkJ5+hrnuenJKAzq0iO7ooL+ml1zk1jNekxxr7YG7hPNwi68Fsi5OY5ZJZ C04uOrBH+3GaWoi6PFlOTwTAdep9bUljND1Vo8HFcI9Uyq4Azr3bOULPUkVXEfcy 6kdMBRR83QuqI9JrwuIURiyWg0/cJHqcgXL1mJ7FfmHju2A9GrYrUVj8tZss+iMs THFqQ7iPpIwE35E9z6hogjFEw4vl5rhXNLjfFEf8B02KVu9iW0RunpDejx6tTwiY EWba7q3B0lObhDcAnL0p/XhuS2NBD4rGt6yNo6vRjg4M9/D4QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsGnx2w7UrnR08100uX3yGtfGDKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmE2ZTg4YWUtZmNlMS0z M2E0LThjZjItYjQ5MzM2OGI2ZjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9xWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkA0LvnlIHKp3BbMXFOuOxH7Fm/XId1WW2srkT9fA7IXxhropYq4VvU 8qNiFchR6NtnxMDuvIvZqcliRdfahdw4s9bgM4Vs/MmraykoxrIET7nH+2nwUQn3 lzeoqLoUis/hG7nMdza7hidFaPSSLB9dJbbW+H1XXmJg3ghzVVYTvVkj9bdWK+39 602idC/81uAit2YUsiYTIgVFGeKzPGxNTEH6vFlXhr+eI/eROnjLLhLSMEH5dmrv bp/vyL+Y94F1gh8xl3sdyihFC3bT5tPJWR8PR3FbaArSHodZHLjHRpyYoUX2RzDS vUxRo+as4nljUZlfflZ5XsWJNNTZhDA= -----END CERTIFICATE-----Generated at Mon Oct 20 04:54:49 2025 by rpki-client