$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7159d3d3-8719-34f7-acbd-3048dc0c8b58.roa File: 7159d3d3-8719-34f7-acbd-3048dc0c8b58.roa (raw, json) Hash identifier: G1hoNPZjIPUzvV7IUk2ljWy/UmRrKKqgoZ6u+qzJ7Cs= Subject key identifier: 98:1E:1E:AD:DC:FA:C3:27:9C:B2:CB:00:B0:3D:D9:E4:13:A9:34:01 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B72C1F01A45494BB55BE9D000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7159d3d3-8719-34f7-acbd-3048dc0c8b58.roa Signing time: Wed 08 Oct 2025 01:00:29 +0000 ROA not before: Wed 08 Oct 2025 01:00:29 +0000 ROA not after: Tue 06 Jan 2026 02:00:29 +0000 asID: 16625 IP address blocks: 23.209.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:c1:f0:1a:45:49:4b:b5:5b:e9:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 8 01:00:29 2025 GMT Not After : Jan 6 02:00:29 2026 GMT Subject: CN=fc208deb-b370-49dc-b71e-e709828991da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4b:8f:c7:04:2a:ad:20:5f:42:70:cd:24:73: 3e:4e:5f:69:5d:6c:5b:7c:6d:ef:c9:ac:fe:41:5d: a7:ca:64:0a:ee:93:17:96:26:3b:31:d7:2e:41:00: 9d:8d:9f:86:f5:c3:53:b1:83:84:6a:8d:2e:b8:2a: 1f:5c:20:c8:e7:c3:76:37:b8:a7:7a:ba:a0:f9:47: 9f:3a:23:3b:93:94:62:33:45:9a:32:7c:00:e1:ae: 01:84:a5:f2:b3:d0:eb:58:d7:aa:85:26:97:14:66: 0b:39:19:93:fb:7e:96:72:c3:c8:c7:41:05:a6:92: 1b:68:96:e1:55:be:4d:94:7d:60:56:ac:59:38:a2: db:cc:f1:0c:67:7d:f4:ba:03:20:56:8f:8f:a7:6e: 5a:ed:a8:75:d6:dc:33:77:e4:ad:92:cf:76:2b:6b: 1e:9b:ac:a1:9d:0d:96:db:98:ba:67:be:cc:ac:f4: 24:e0:db:ed:c3:1e:d5:33:b2:13:1f:95:5f:c5:f2: 02:3d:b1:fa:ef:c7:cf:f6:8c:39:60:92:66:04:8f: 46:8d:ba:04:a7:ac:d4:f4:3d:36:92:1c:ea:f7:93: 8a:7e:4b:f3:f0:2b:cc:a1:94:96:d7:ae:52:fa:1b: 56:66:e8:f0:91:59:53:34:ea:28:99:10:b8:75:1d: af:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:1E:1E:AD:DC:FA:C3:27:9C:B2:CB:00:B0:3D:D9:E4:13:A9:34:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7159d3d3-8719-34f7-acbd-3048dc0c8b58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:b5:a2:8e:bd:32:9c:d7:64:af:9d:d6:b6:2b:cf:ea:86:c4: ea:b6:2f:bc:f9:0b:23:65:28:9b:e6:70:b3:01:a2:14:60:1b: 7e:44:ea:01:ad:c8:c0:de:83:90:93:39:73:e0:38:9b:a6:38: 24:a4:87:6f:5b:27:e5:f3:fd:16:07:e6:ad:a3:78:4a:c9:9a: 0e:b6:c5:f0:40:77:0f:24:1a:9f:b4:a6:f9:f5:df:41:bf:6c: cb:06:99:da:d2:ea:87:4f:f9:0e:6a:b0:1b:53:0b:af:5d:46: 7d:81:21:91:33:28:14:24:7d:2e:e9:5b:e8:b0:e4:5f:ce:4a: e4:ed:9b:f7:0b:d3:8c:8a:7d:fb:75:d8:b7:c9:96:37:66:7f: c0:78:06:0a:f8:d9:52:60:ec:7c:35:03:e0:7e:79:24:7e:64: 57:06:49:59:ac:33:bf:9f:a9:b3:e5:8c:b7:0e:ce:be:5f:13: 6e:43:1d:f4:e9:7e:b7:eb:a0:ce:37:dd:4d:63:f5:73:9d:bf: 40:82:ea:ab:4f:05:fc:5f:3b:cc:f9:be:7a:17:e8:b9:a5:ac: eb:f6:63:fc:f6:96:c9:0e:25:79:ef:4c:dc:05:55:9e:b0:94: 58:70:c5:0f:6e:02:bb:8c:81:a2:56:e5:35:ff:c9:a7:37:7e: 02:14:0c:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtywfAaRUlLtVvp0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwODAxMDAyOVoXDTI2MDEwNjAyMDAyOVowLzEtMCsGA1UEAxMk ZmMyMDhkZWItYjM3MC00OWRjLWI3MWUtZTcwOTgyODk5MWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEuPxwQqrSBfQnDNJHM+Tl9pXWxbfG3vyaz+ QV2nymQK7pMXliY7MdcuQQCdjZ+G9cNTsYOEao0uuCofXCDI58N2N7inerqg+Uef OiM7k5RiM0WaMnwA4a4BhKXys9DrWNeqhSaXFGYLORmT+36WcsPIx0EFppIbaJbh Vb5NlH1gVqxZOKLbzPEMZ330ugMgVo+Pp25a7ah11twzd+Stks92K2sem6yhnQ2W 25i6Z77MrPQk4Nvtwx7VM7ITH5VfxfICPbH678fP9ow5YJJmBI9GjboEp6zU9D02 khzq95OKfkvz8CvMoZSW165S+htWZujwkVlTNOoomRC4dR2vJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgeHq3c+sMnnLLLALA92eQTqTQBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzE1OWQzZDMtODcxOS0z NGY3LWFjYmQtMzA0OGRjMGM4YjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9HcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACG1oo69MpzXZK+d1rYrz+qGxOq2L7z5CyNlKJvmcLMBohRgG35E6gGt yMDeg5CTOXPgOJumOCSkh29bJ+Xz/RYH5q2jeErJmg62xfBAdw8kGp+0pvn130G/ bMsGmdrS6odP+Q5qsBtTC69dRn2BIZEzKBQkfS7pW+iw5F/OSuTtm/cL04yKfft1 2LfJljdmf8B4Bgr42VJg7Hw1A+B+eSR+ZFcGSVmsM7+fqbPljLcOzr5fE25DHfTp frfroM433U1j9XOdv0CC6qtPBfxfO8z5vnoX6LmlrOv2Y/z2lskOJXnvTNwFVZ6w lFhwxQ9uAruMgaJW5TX/yac3fgIUDHg= -----END CERTIFICATE-----Generated at Mon Oct 20 12:36:24 2025 by rpki-client