$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41605246-27b6-346d-9d13-056a05d2ecb6.roa File: 41605246-27b6-346d-9d13-056a05d2ecb6.roa (raw, json) Hash identifier: yQK9FQntRt1yb64wgUS8aFpsR4IZ/S/FfYibhW8+hHU= Subject key identifier: 28:5C:0E:B2:33:A7:48:1C:01:6E:CC:5F:72:79:EC:81:60:88:72:D9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC7693EBFA800AA43ED8B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41605246-27b6-346d-9d13-056a05d2ecb6.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.223.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:69:3e:bf:a8:00:aa:43:ed:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=6c7e070f-26fe-479e-8ecf-91d86179ca02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:43:06:74:61:cc:d6:fb:5d:e7:5d:cd:52:3d: 0f:ee:b1:2f:61:6d:f9:f3:c5:83:2a:4e:17:8a:4c: 25:92:4b:73:a1:25:6d:ee:0d:78:6f:78:0e:08:61: 56:9d:c6:0c:5d:ae:00:af:f2:36:dc:4a:b4:bb:2e: 69:9f:b3:75:c7:f7:62:ac:27:05:50:b1:46:d4:2e: bb:5b:1a:60:65:b8:96:26:dc:d7:58:a7:14:12:39: b8:ab:a1:d4:52:66:c5:df:82:13:36:00:18:d0:96: b0:32:44:45:7e:de:cb:9a:f1:74:2c:9e:20:aa:d5: 17:28:37:ec:ca:d9:3f:6b:a0:36:f1:cd:72:bc:54: 17:27:5c:f8:98:64:af:96:0d:73:39:d7:a5:f5:d5: 87:a7:52:2f:07:05:bf:8e:4d:80:11:24:d7:41:9e: 4c:4f:e8:ef:c2:ad:12:3e:c3:41:29:ef:b4:b3:9a: 38:81:2f:e0:7c:69:6f:27:4f:ce:cf:5d:3d:f7:0c: 16:b6:dd:fe:f5:11:38:c6:25:10:56:bb:6f:04:55: e2:0f:14:fb:b4:59:26:cc:60:bf:50:36:5b:9e:d8: d9:cc:07:69:48:64:99:47:e6:60:84:f2:a3:e3:8e: 5b:78:af:2a:fd:44:47:67:d7:22:e4:33:c3:85:56: 49:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5C:0E:B2:33:A7:48:1C:01:6E:CC:5F:72:79:EC:81:60:88:72:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41605246-27b6-346d-9d13-056a05d2ecb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:b3:9a:cd:11:d2:15:70:2c:3b:4f:88:d4:38:9b:a9:dd:49: b0:2d:39:31:d7:28:a7:b3:5a:8b:3a:59:f0:33:52:50:a9:ab: d4:c9:5c:f6:3e:c0:14:4b:ec:b5:e2:e3:1f:17:e3:07:60:4c: 4b:50:a1:67:3b:e5:8d:8f:25:a9:a8:80:5f:37:24:ae:5b:4f: 96:96:3e:f0:f1:27:d0:40:1b:2a:37:b0:eb:90:62:e4:c9:6f: eb:1f:ae:b0:9a:6e:cd:d0:d4:0b:91:4e:8b:4e:a9:09:f5:cf: 31:5a:b9:fa:5d:2b:67:ac:00:e5:a6:72:5d:f1:ab:17:ac:96: 84:e5:c8:ab:3f:55:33:12:04:69:7e:a5:11:16:66:c3:01:c3: cb:32:46:4a:2d:c9:21:d9:d5:49:d5:37:7c:c9:6c:6d:17:78: 2b:d9:b1:ca:34:27:94:d2:85:8d:e8:c1:ee:b4:9e:7d:83:d2: 23:4a:21:03:de:f7:06:e0:a7:8a:fa:4e:28:be:b7:4e:1d:14: 55:a7:61:47:37:57:c2:0d:5b:17:3f:0b:84:2c:68:e2:9f:60: b9:55:55:ef:0b:7b:be:2b:2b:e1:24:05:10:e0:47:f6:c9:a6: b3:f0:af:f3:e1:f5:16:72:55:89:d6:a1:b0:a7:68:28:2a:21: e2:09:fa:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2k+v6gAqkPti4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NmM3ZTA3MGYtMjZmZS00NzllLThlY2YtOTFkODYxNzljYTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EMGdGHM1vtd513NUj0P7rEvYW3588WDKk4X ikwlkktzoSVt7g14b3gOCGFWncYMXa4Ar/I23Eq0uy5pn7N1x/dirCcFULFG1C67 WxpgZbiWJtzXWKcUEjm4q6HUUmbF34ITNgAY0JawMkRFft7LmvF0LJ4gqtUXKDfs ytk/a6A28c1yvFQXJ1z4mGSvlg1zOdel9dWHp1IvBwW/jk2AESTXQZ5MT+jvwq0S PsNBKe+0s5o4gS/gfGlvJ0/Oz1099wwWtt3+9RE4xiUQVrtvBFXiDxT7tFkmzGC/ UDZbntjZzAdpSGSZR+ZghPKj445beK8q/URHZ9ci5DPDhVZJrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChcDrIzp0gcAW7MX3J57IFgiHLZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDE2MDUyNDYtMjdiNi0z NDZkLTlkMTMtMDU2YTA1ZDJlY2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9/RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEezms0R0hVwLDtPiNQ4m6ndSbAtOTHXKKezWos6WfAzUlCpq9TJXPY+ wBRL7LXi4x8X4wdgTEtQoWc75Y2PJamogF83JK5bT5aWPvDxJ9BAGyo3sOuQYuTJ b+sfrrCabs3Q1AuRTotOqQn1zzFaufpdK2esAOWmcl3xqxesloTlyKs/VTMSBGl+ pREWZsMBw8syRkotySHZ1UnVN3zJbG0XeCvZsco0J5TShY3owe60nn2D0iNKIQPe 9wbgp4r6Tii+t04dFFWnYUc3V8INWxc/C4QsaOKfYLlVVe8Le74rK+EkBRDgR/bJ prPwr/Ph9RZyVYnWobCnaCgqIeIJ+vk= -----END CERTIFICATE-----Generated at Mon Oct 20 02:34:57 2025 by rpki-client