$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2bcaa322-bc22-3325-a000-9d33728ac300.roa File: 2bcaa322-bc22-3325-a000-9d33728ac300.roa (raw, json) Hash identifier: Om/BSROYHngg22vN6+AdjyM79kh9Qb24/+GEtrng7/Y= Subject key identifier: 5F:63:77:81:DA:4A:04:10:B4:D0:C9:E8:CA:9D:91:8F:27:32:4D:32 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC76300A261266C6B02F700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2bcaa322-bc22-3325-a000-9d33728ac300.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.220.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:63:00:a2:61:26:6c:6b:02:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=c14a2cff-6e0c-4b50-9e40-381ed11abbe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bc:bc:a9:2d:46:1e:f1:0a:56:a0:13:fe:20: b2:4b:cb:9b:da:0b:c1:6f:6b:3c:0f:be:b1:6b:a5: 32:e3:a4:95:57:95:1c:51:51:40:81:f5:f2:5f:7c: 0d:67:99:91:2b:57:52:13:6f:c8:06:74:2f:52:60: ea:2a:d1:5a:74:02:ff:ba:bd:1a:17:1e:7b:e4:fb: f7:02:55:c5:3f:a9:5d:bb:96:8e:02:18:1a:c1:ac: fa:3f:e6:cc:e5:cb:72:b1:68:27:af:ff:ee:bc:15: e5:87:c1:b4:a2:8c:0e:26:98:3d:72:c0:9d:15:74: b5:cf:9f:94:e5:7b:3f:a8:29:2f:20:81:30:ec:2a: bd:61:a2:8c:d3:0a:fc:8b:eb:26:b3:a6:8e:34:6e: a6:e1:11:66:16:79:54:90:43:f7:e2:e4:b3:43:f9: f8:3b:ab:8e:cf:7b:db:85:77:3d:20:cb:27:77:26: de:6a:66:2b:60:3d:b5:2d:9b:17:01:37:72:a9:a1: fd:33:f6:72:ab:fb:c0:3a:42:3e:06:ef:3e:7a:42: 0e:87:6d:23:c6:55:2f:d8:5f:11:ae:94:e0:82:85: 93:ab:d7:1d:07:56:9a:29:be:fc:9a:c3:96:34:5c: c9:03:ea:31:45:62:fd:e3:4d:48:df:0b:2e:e6:26: f4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:63:77:81:DA:4A:04:10:B4:D0:C9:E8:CA:9D:91:8F:27:32:4D:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2bcaa322-bc22-3325-a000-9d33728ac300.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ac:09:09:34:88:ee:7e:77:61:bb:a4:e2:02:34:af:3c:79: f1:26:5e:8c:86:28:0a:e2:53:c4:a7:88:7f:d8:98:e7:72:34: c6:1b:4d:6b:89:6a:5f:31:5a:70:be:8a:b4:98:72:31:fd:a2: 16:2c:f8:91:d5:ee:f2:ae:3e:cf:37:37:c6:8f:47:3f:b1:0e: fe:d1:cd:35:5f:88:99:62:17:d7:bd:3b:92:d8:cd:83:44:09: 7f:c5:5d:c3:a7:b3:64:a9:41:7f:9b:d3:11:e5:73:49:f1:46: a7:33:9c:29:ae:ab:b3:c5:03:16:7d:f8:f1:7c:e5:47:37:aa: ec:d1:df:df:25:d5:56:04:07:58:5b:a5:a5:4a:eb:b1:05:e1: 24:b6:2d:67:b7:09:22:2c:0f:dc:2d:ff:81:8e:7c:79:35:3a: de:e7:88:61:d6:30:98:8a:33:a0:4b:61:3e:46:fe:c3:cb:1e: 55:20:a7:c5:27:c3:73:ed:33:ad:79:9b:24:6c:3b:df:8b:22: 81:76:b3:72:c6:24:e7:3a:c0:6c:86:b8:e0:e6:c2:0a:23:a5: af:30:a5:0f:a5:97:4a:4e:cc:89:31:ef:ec:2e:a4:1b:b6:7e: 6a:da:77:5f:0b:8b:03:52:f2:7d:65:09:3e:34:41:98:45:99: 28:5b:85:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2MAomEmbGsC9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk YzE0YTJjZmYtNmUwYy00YjUwLTllNDAtMzgxZWQxMWFiYmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnby8qS1GHvEKVqAT/iCyS8ub2gvBb2s8D76x a6Uy46SVV5UcUVFAgfXyX3wNZ5mRK1dSE2/IBnQvUmDqKtFadAL/ur0aFx575Pv3 AlXFP6ldu5aOAhgawaz6P+bM5ctysWgnr//uvBXlh8G0oowOJpg9csCdFXS1z5+U 5Xs/qCkvIIEw7Cq9YaKM0wr8i+sms6aONG6m4RFmFnlUkEP34uSzQ/n4O6uOz3vb hXc9IMsndybeamYrYD21LZsXATdyqaH9M/Zyq/vAOkI+Bu8+ekIOh20jxlUv2F8R rpTggoWTq9cdB1aaKb78msOWNFzJA+oxRWL9401I3wsu5ib0gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9jd4HaSgQQtNDJ6MqdkY8nMk0yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmJjYWEzMjItYmMyMi0z MzI1LWEwMDAtOWQzMzcyOGFjMzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ymMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6sCQk0iO5+d2G7pOICNK88efEmXoyGKAriU8SniH/YmOdyNMYbTWuJ al8xWnC+irSYcjH9ohYs+JHV7vKuPs83N8aPRz+xDv7RzTVfiJliF9e9O5LYzYNE CX/FXcOns2SpQX+b0xHlc0nxRqcznCmuq7PFAxZ9+PF85Uc3quzR398l1VYEB1hb paVK67EF4SS2LWe3CSIsD9wt/4GOfHk1Ot7niGHWMJiKM6BLYT5G/sPLHlUgp8Un w3PtM615myRsO9+LIoF2s3LGJOc6wGyGuODmwgojpa8wpQ+ll0pOzIkx7+wupBu2 fmrad18LiwNS8n1lCT40QZhFmShbhfE= -----END CERTIFICATE-----Generated at Mon Oct 20 02:36:22 2025 by rpki-client