$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79760c8c-64bc-38a5-b132-95fa5b97d443.roa File: 79760c8c-64bc-38a5-b132-95fa5b97d443.roa (raw, json) Hash identifier: NvVO2Gocjb007U5lexHWm2/wFT5P/3NXFvCpkgFxoZA= Subject key identifier: 4F:1B:2F:3B:12:B9:69:1F:E6:19:41:4E:A8:CD:94:C4:CF:71:8F:41 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC763F4962F6D7F0F6962C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79760c8c-64bc-38a5-b132-95fa5b97d443.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 16625 IP address blocks: 23.221.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:63:f4:96:2f:6d:7f:0f:69:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=76037175-bcd9-4743-8e33-f7f1eddf8ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f6:48:cf:c8:22:27:b9:89:b8:88:dd:f3:34: 3b:9a:f7:0f:dd:3b:23:aa:06:e3:a6:0e:74:4e:4f: 6c:08:7d:80:a3:e4:ef:0e:f0:42:3d:55:35:ee:25: a2:d5:48:e4:92:99:3e:bf:ac:7a:f6:60:9f:b6:ea: 59:b8:cf:8f:47:bb:fe:65:d6:ad:47:38:aa:aa:25: ff:ce:63:8f:ad:fa:ac:9d:de:2a:fa:33:1f:21:42: ef:f1:d4:6d:8b:ec:36:d7:00:99:d0:e8:12:7f:8e: c9:70:3a:99:6a:92:1f:16:1c:af:f9:14:33:b7:3d: 7c:ff:07:dd:9e:49:ea:46:8e:89:16:06:0a:3c:48: 00:42:fc:d9:e5:69:79:ae:61:6b:d3:1e:f3:17:4f: 98:e1:2e:2b:b2:98:a5:ef:28:7e:9c:34:27:2c:98: 53:f2:df:da:c2:fc:4a:90:53:b2:44:ef:7f:ea:84: 92:52:8c:ef:8d:c2:76:8c:d5:d3:36:33:f2:42:51: 36:5f:ef:fb:67:70:fa:10:e9:8b:5d:32:7a:25:0d: ab:96:be:2a:d1:81:61:21:f9:f4:be:49:58:38:ff: d1:a8:0d:fc:e1:88:fe:49:f5:e9:96:31:70:e5:9a: 86:65:f3:7e:35:df:7e:41:8f:49:90:24:e3:f7:45: e2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1B:2F:3B:12:B9:69:1F:E6:19:41:4E:A8:CD:94:C4:CF:71:8F:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79760c8c-64bc-38a5-b132-95fa5b97d443.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:34:3b:13:d3:0c:c1:9d:54:25:7f:e9:90:cf:26:3f:06:29: 19:b0:65:2c:55:d7:ab:f6:94:20:ab:66:27:9e:ad:4d:1e:1f: 84:90:c4:aa:9d:e5:e7:c1:95:83:93:fb:a8:29:1c:8b:04:d4: 41:46:e3:db:25:4a:3e:c1:62:85:1a:1a:fd:5b:3c:b1:bc:cc: 4c:21:da:9c:a7:39:11:0d:55:41:13:80:62:b9:1c:ae:2a:db: 55:31:1f:31:4c:91:c6:f3:6d:f2:91:10:b4:8e:10:49:f7:77: 24:e4:f0:18:d7:2b:a5:79:22:90:eb:da:2b:50:a5:dd:22:47: 5f:46:2f:e8:6b:c5:d4:e8:a2:12:c7:20:7a:f6:51:c7:05:d1: 33:a2:4c:e6:34:5f:9b:62:4e:7c:20:d2:c2:d5:f8:f3:59:e6: de:75:74:c5:61:02:5f:aa:9c:5c:de:05:b6:65:6f:24:f9:8c: 6a:16:eb:67:8a:71:b4:f1:3d:a0:a2:13:e0:9c:c2:6f:1d:a5: c1:58:f9:76:d8:5b:3c:0a:35:ac:79:95:84:ab:bd:f3:15:c5: 53:61:d8:ad:9b:ca:97:90:66:69:92:96:6d:07:b4:14:29:7a: 65:58:9f:6b:ff:37:27:e7:78:a2:f2:22:47:dc:72:6a:98:57: 8c:43:e9:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2P0li9tfw9pYsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NzYwMzcxNzUtYmNkOS00NzQzLThlMzMtZjdmMWVkZGY4ZWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfZIz8giJ7mJuIjd8zQ7mvcP3Tsjqgbjpg50 Tk9sCH2Ao+TvDvBCPVU17iWi1Ujkkpk+v6x69mCftupZuM+PR7v+ZdatRziqqiX/ zmOPrfqsnd4q+jMfIULv8dRti+w21wCZ0OgSf47JcDqZapIfFhyv+RQztz18/wfd nknqRo6JFgYKPEgAQvzZ5Wl5rmFr0x7zF0+Y4S4rspil7yh+nDQnLJhT8t/awvxK kFOyRO9/6oSSUozvjcJ2jNXTNjPyQlE2X+/7Z3D6EOmLXTJ6JQ2rlr4q0YFhIfn0 vklYOP/RqA384Yj+SfXpljFw5ZqGZfN+Nd9+QY9JkCTj90Xi+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8bLzsSuWkf5hlBTqjNlMTPcY9BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzk3NjBjOGMtNjRiYy0z OGE1LWIxMzItOTVmYTViOTdkNDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF90kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHk0OxPTDMGdVCV/6ZDPJj8GKRmwZSxV16v2lCCrZieerU0eH4SQxKqd 5efBlYOT+6gpHIsE1EFG49slSj7BYoUaGv1bPLG8zEwh2pynORENVUETgGK5HK4q 21UxHzFMkcbzbfKRELSOEEn3dyTk8BjXK6V5IpDr2itQpd0iR19GL+hrxdToohLH IHr2UccF0TOiTOY0X5tiTnwg0sLV+PNZ5t51dMVhAl+qnFzeBbZlbyT5jGoW62eK cbTxPaCiE+Ccwm8dpcFY+XbYWzwKNax5lYSrvfMVxVNh2K2bypeQZmmSlm0HtBQp emVYn2v/NyfneKLyIkfccmqYV4xD6WY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:24:40 2025 by rpki-client