$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c6b4129-2f7f-3c70-81af-cf2e5a9b2f45.roa File: 2c6b4129-2f7f-3c70-81af-cf2e5a9b2f45.roa (raw, json) Hash identifier: mc4vDF3intu/zrOj6BD92cdM2v8N5zOh1XM5gtrcuOw= Subject key identifier: 42:B3:7C:27:2B:0C:5C:AC:E0:2C:51:E9:FB:F6:DD:18:B2:5C:16:7B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC762C84B59EFAA2FA39180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c6b4129-2f7f-3c70-81af-cf2e5a9b2f45.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 16625 IP address blocks: 23.220.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:62:c8:4b:59:ef:aa:2f:a3:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=501fee5d-ee14-4a91-84a4-93c1d3caf51d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b4:c8:fd:af:7a:41:06:86:41:e7:74:cc:c1: a2:51:b3:6e:d6:05:d7:ea:4d:2c:9c:20:12:f1:02: d1:35:41:e8:b0:cf:2c:95:68:cd:ae:cd:76:f9:17: e2:c8:eb:27:3b:29:27:46:62:78:cd:ac:a2:57:47: 77:e9:8c:b4:59:d5:f3:ba:09:57:18:58:8e:99:5a: 66:c4:37:6f:54:e7:dc:16:63:67:56:af:7d:01:2d: 79:de:84:dc:be:fc:8b:7f:b8:9f:80:47:9e:53:f0: 5b:8b:be:21:e2:df:3d:f9:d7:5e:91:cf:14:cd:98: b1:f9:50:09:c3:e1:eb:7a:9b:26:9d:38:2f:49:49: 59:3b:4f:73:dd:28:4a:7b:81:ed:b5:4b:62:fd:2b: d0:ea:b1:93:e5:2c:95:0c:24:6c:42:eb:94:27:5e: 31:36:ce:8a:20:49:f0:cb:e0:d9:2a:78:20:d7:14: 05:a8:cf:cc:52:8a:b6:db:33:e1:6e:da:a2:8c:c5: e2:be:75:bf:fd:5b:28:2e:d4:37:2e:d5:10:ce:88: ba:2f:53:92:da:2c:9b:c5:b0:49:99:40:5b:f2:42: e9:cf:a9:dc:4a:5b:e9:3e:69:c0:1a:5c:7e:71:4c: 9e:ac:6b:44:6d:1e:47:a3:d6:ab:cd:46:a0:1b:87: eb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B3:7C:27:2B:0C:5C:AC:E0:2C:51:E9:FB:F6:DD:18:B2:5C:16:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c6b4129-2f7f-3c70-81af-cf2e5a9b2f45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:b8:fe:70:bd:15:be:ea:d1:e5:d0:fb:a3:35:ae:09:99:9b: c7:57:c4:7a:b5:31:37:e0:f3:f0:f7:5c:42:34:1d:cc:0f:c1: 5a:1a:68:ad:65:0e:15:43:e2:aa:cf:63:06:00:a0:75:00:57: a5:95:38:de:94:7d:f1:6f:0e:1f:01:b2:7a:2d:50:b3:36:c4: bd:5f:5a:87:e9:d4:a8:d2:bd:4e:df:b1:04:85:07:f1:14:85: 6b:df:02:8a:81:1b:97:10:19:1a:6c:0a:c8:b7:27:ec:5a:be: a2:2f:0f:b2:22:fc:ad:90:76:20:60:9e:44:43:f7:45:b4:0b: b7:50:0f:82:88:07:b8:d8:f2:d1:77:0b:db:bb:18:ff:45:56: 8f:64:91:29:cb:b4:d2:19:18:5f:cf:ec:cc:db:28:dd:ed:e0: fa:c8:b7:1d:66:9f:e4:ee:37:3e:15:43:7d:e5:ce:70:70:a2: bc:49:a5:31:c1:76:2b:2b:8c:23:a0:35:4a:e1:d9:6f:53:4e: 4f:68:6a:0a:ba:44:bf:d8:3b:3d:63:cf:8f:9b:dd:42:56:93: 4f:fd:bb:ee:f1:14:b5:b6:36:7d:9d:3f:59:b3:6b:b6:58:33: 51:af:75:b0:4a:09:0b:2f:22:1e:d9:ff:39:56:3e:2e:97:93: 89:0a:2e:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2LIS1nvqi+jkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NTAxZmVlNWQtZWUxNC00YTkxLTg0YTQtOTNjMWQzY2FmNTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7TI/a96QQaGQed0zMGiUbNu1gXX6k0snCAS 8QLRNUHosM8slWjNrs12+RfiyOsnOyknRmJ4zayiV0d36Yy0WdXzuglXGFiOmVpm xDdvVOfcFmNnVq99AS153oTcvvyLf7ifgEeeU/Bbi74h4t89+ddekc8UzZix+VAJ w+HrepsmnTgvSUlZO09z3ShKe4HttUti/SvQ6rGT5SyVDCRsQuuUJ14xNs6KIEnw y+DZKngg1xQFqM/MUoq22zPhbtqijMXivnW//VsoLtQ3LtUQzoi6L1OS2iybxbBJ mUBb8kLpz6ncSlvpPmnAGlx+cUyerGtEbR5Ho9arzUagG4frQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKzfCcrDFys4CxR6fv23RiyXBZ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmM2YjQxMjktMmY3Zi0z YzcwLTgxYWYtY2YyZTVhOWIyZjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9yYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAG4/nC9Fb7q0eXQ+6M1rgmZm8dXxHq1MTfg8/D3XEI0HcwPwVoaaK1l DhVD4qrPYwYAoHUAV6WVON6UffFvDh8BsnotULM2xL1fWofp1KjSvU7fsQSFB/EU hWvfAoqBG5cQGRpsCsi3J+xavqIvD7Ii/K2QdiBgnkRD90W0C7dQD4KIB7jY8tF3 C9u7GP9FVo9kkSnLtNIZGF/P7MzbKN3t4PrItx1mn+TuNz4VQ33lznBworxJpTHB disrjCOgNUrh2W9TTk9oagq6RL/YOz1jz4+b3UJWk0/9u+7xFLW2Nn2dP1mza7ZY M1GvdbBKCQsvIh7Z/zlWPi6Xk4kKLsM= -----END CERTIFICATE-----Generated at Mon Oct 20 09:51:29 2025 by rpki-client