$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a70d41d-4a3f-32d8-97b3-3bee825909c2.roa File: 7a70d41d-4a3f-32d8-97b3-3bee825909c2.roa (raw, json) Hash identifier: FgkxWQEuP7VIj79nsqMwfiycwRx8QFRVqZsqvb4ygQo= Subject key identifier: 58:F3:97:4D:E3:09:D9:F0:8D:16:96:CD:BE:03:0C:B3:E4:2B:30:AF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC769AEFA03886B5A5A1DC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a70d41d-4a3f-32d8-97b3-3bee825909c2.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 16625 IP address blocks: 23.223.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:69:ae:fa:03:88:6b:5a:5a:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=7aa7465e-b73e-4b17-b112-d74fef290a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:91:b9:8a:d8:5c:aa:4e:fb:ba:8a:ad:2f:4a: 2d:80:ea:71:08:a6:dc:71:2f:de:3d:95:5e:40:08: bd:11:38:e8:4c:5e:fa:53:47:79:37:68:1f:88:48: 21:92:7b:76:c2:ba:01:a7:2f:25:8b:47:98:71:36: 2d:20:d1:ac:33:09:24:58:8c:b9:80:be:67:cd:77: 7e:8c:71:bf:bd:eb:94:fb:4a:d1:e8:27:81:39:3c: bb:1e:3d:26:4f:ae:17:be:b4:2d:4a:11:d0:93:0f: 06:a8:5e:6f:d5:0d:ff:33:08:4e:5d:77:a2:bc:51: ff:ae:83:af:3e:a8:c3:a9:dc:d1:09:41:ef:ef:c0: e7:f7:64:59:17:e0:18:d8:fa:aa:cf:96:aa:14:84: a2:f1:a9:8e:0e:15:b0:8c:74:a8:6d:db:1b:fe:45: eb:89:16:42:d7:44:69:31:a3:29:e5:43:22:b5:f4: 15:20:70:b5:18:ac:7b:f1:b5:2c:22:ce:00:d3:ee: 2a:fe:42:fc:2f:64:79:bd:fb:7f:a2:cb:4a:ef:bd: a9:e4:44:62:db:a1:59:63:00:35:54:23:29:d0:a7: a8:d8:79:b0:e2:79:3b:cc:0b:30:c4:5f:a5:3c:12: a4:5b:ed:21:80:9a:95:06:ad:bb:3a:2b:54:9a:d5: 62:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F3:97:4D:E3:09:D9:F0:8D:16:96:CD:BE:03:0C:B3:E4:2B:30:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a70d41d-4a3f-32d8-97b3-3bee825909c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:83:98:22:df:87:98:75:9e:8c:f7:62:39:94:9f:15:b2:15: 49:13:e3:63:ec:7f:68:ea:ec:1b:7f:fb:8b:17:08:85:bf:d4: 21:87:1a:fc:b0:4f:0f:3d:db:1f:6e:70:c0:28:32:36:e6:a1: 47:7b:87:c0:cc:9d:52:f9:26:a4:2f:42:44:8f:8b:d7:f0:cf: 5d:44:e4:65:d0:de:28:a1:cd:01:c4:53:95:6b:53:97:8e:c5: 2f:5e:27:1c:94:b2:c1:32:59:14:25:da:2a:18:ed:a7:83:db: 6e:9c:5d:51:31:05:d0:f1:d3:5b:58:f3:84:9f:cb:da:fc:98: cf:83:01:e2:08:78:ca:b8:dd:73:f6:8d:ee:af:84:84:9f:53: 2b:8b:06:a0:a6:91:e1:bc:06:cc:5a:a5:74:0b:1b:0d:af:ed: c6:4a:f7:06:ae:11:3b:0a:c9:60:27:49:64:44:12:91:85:d6: 26:ea:0f:b5:97:80:a0:79:4d:74:4c:c7:59:89:5c:17:b7:00: df:f8:de:96:43:bc:ab:6f:06:28:ae:f0:ad:cd:d1:02:2b:5b: 79:5b:69:58:aa:fd:0c:24:72:b4:dc:43:ea:03:09:0e:db:bd: 50:2d:ec:0f:78:17:8b:d6:09:18:5d:01:40:88:a5:d0:7d:ab: eb:d8:16:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2mu+gOIa1paHcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk N2FhNzQ2NWUtYjczZS00YjE3LWIxMTItZDc0ZmVmMjkwYTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpG5ithcqk77uoqtL0otgOpxCKbccS/ePZVe QAi9ETjoTF76U0d5N2gfiEghknt2wroBpy8li0eYcTYtINGsMwkkWIy5gL5nzXd+ jHG/veuU+0rR6CeBOTy7Hj0mT64XvrQtShHQkw8GqF5v1Q3/MwhOXXeivFH/roOv PqjDqdzRCUHv78Dn92RZF+AY2Pqqz5aqFISi8amODhWwjHSobdsb/kXriRZC10Rp MaMp5UMitfQVIHC1GKx78bUsIs4A0+4q/kL8L2R5vft/ostK772p5ERi26FZYwA1 VCMp0Keo2Hmw4nk7zAswxF+lPBKkW+0hgJqVBq27OitUmtVijwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjzl03jCdnwjRaWzb4DDLPkKzCvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2E3MGQ0MWQtNGEzZi0z MmQ4LTk3YjMtM2JlZTgyNTkwOWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9/oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSDmCLfh5h1noz3YjmUnxWyFUkT42Psf2jq7Bt/+4sXCIW/1CGHGvyw Tw892x9ucMAoMjbmoUd7h8DMnVL5JqQvQkSPi9fwz11E5GXQ3iihzQHEU5VrU5eO xS9eJxyUssEyWRQl2ioY7aeD226cXVExBdDx01tY84Sfy9r8mM+DAeIIeMq43XP2 je6vhISfUyuLBqCmkeG8BsxapXQLGw2v7cZK9wauETsKyWAnSWREEpGF1ibqD7WX gKB5TXRMx1mJXBe3AN/43pZDvKtvBiiu8K3N0QIrW3lbaViq/QwkcrTcQ+oDCQ7b vVAt7A94F4vWCRhdAUCIpdB9q+vYFo4= -----END CERTIFICATE-----Generated at Mon Oct 20 07:49:36 2025 by rpki-client