$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7fa066c5-c467-3cef-9ff1-178818b54288.roa File: 7fa066c5-c467-3cef-9ff1-178818b54288.roa (raw, json) Hash identifier: P8glzHiFsNO4GKZIMV9koO5bX0YHrXJKwivFyeqqSAc= Subject key identifier: BF:DF:59:8B:96:AB:AA:5E:0B:1C:62:1A:45:58:CE:3A:BD:2D:24:C0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B328C475759547077459C3100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7fa066c5-c467-3cef-9ff1-178818b54288.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.207.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:47:57:59:54:70:77:45:9c:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=32f63040-2f8b-4e2d-9da2-e33f78a64da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:73:58:f7:60:1a:13:ab:d3:7f:ec:af:b2:69: 19:bf:47:bb:c0:3d:5a:3a:c2:a5:7b:c8:16:2f:ca: c8:0a:03:77:3c:0c:ec:ee:8e:e4:b2:c7:44:0d:76: 01:4f:c5:7c:bf:c7:fe:06:43:4d:13:5c:58:14:5a: 5c:04:01:27:1d:66:a0:f7:c5:76:d0:3b:25:b0:3b: 3f:10:38:7f:dd:e5:c6:95:36:42:84:89:91:4b:41: 71:63:91:6b:92:cf:09:6e:a7:6e:74:85:a6:1d:97: f6:22:71:4e:56:7a:37:ca:d6:36:38:e4:fa:fb:38: 4b:ef:5e:41:81:7a:55:5f:43:64:cb:4f:43:73:9b: 8d:97:44:d4:7e:b3:04:2c:f9:fe:51:bd:38:9d:5d: bd:8c:4a:a1:05:53:9a:f7:18:88:9d:5a:18:a1:81: b2:1d:eb:f5:03:3f:6b:49:bd:94:df:5c:28:c2:b1: d8:ad:69:0c:20:53:a6:51:f9:85:45:80:eb:f8:54: 79:14:93:9b:68:4f:27:af:12:f0:c8:46:28:0c:dc: 33:47:2b:f9:ce:f3:49:7c:36:5e:07:8b:a7:3f:77: c2:56:3c:69:c2:65:ca:6b:3e:b2:1f:30:78:43:b4: 2f:11:34:fd:11:1c:b3:82:49:2d:94:03:06:c1:1f: 8a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DF:59:8B:96:AB:AA:5E:0B:1C:62:1A:45:58:CE:3A:BD:2D:24:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7fa066c5-c467-3cef-9ff1-178818b54288.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:4e:7a:9d:bf:89:5b:d7:c3:8e:9c:c4:b9:8a:9f:12:e3:12: 75:e5:cb:72:0a:a9:2b:9d:46:40:f7:6b:87:59:2b:c2:54:aa: e3:00:0e:24:07:0c:02:e9:04:05:4a:96:f9:43:6a:43:26:17: 3f:f3:69:8d:c1:09:c5:93:a9:ac:88:31:7b:5a:9f:7a:4a:69: b1:33:71:f5:53:73:fc:6c:fa:5d:be:76:6a:a6:03:b9:76:0d: b7:c4:e4:a4:ff:7b:5e:dc:4f:aa:ba:6c:96:2f:53:20:c6:4e: 8f:65:b3:72:43:35:25:87:5d:8b:3c:b3:3e:21:ab:b5:97:20: 11:25:32:c4:92:43:db:8c:a8:c6:42:1b:7c:64:aa:79:23:25: d0:a6:70:88:b3:17:6f:92:38:4d:4f:65:f8:2b:4c:57:49:97: 6e:fc:0f:08:80:32:bd:14:59:49:dd:67:82:8b:09:08:e3:62: 2e:01:5d:36:3b:52:78:c8:3e:f5:01:34:7a:40:85:3c:7d:74: d8:d6:3a:38:e2:6b:b5:35:af:c3:75:73:7b:e2:7c:e6:c0:36: 70:51:2d:4a:0b:07:c9:bd:24:3f:4d:a7:e3:3e:b7:06:63:bd: 9b:68:47:1d:8b:48:e7:97:26:45:96:6f:c5:4b:eb:8f:a3:93: ac:75:83:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjEdXWVRwd0WcMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk MzJmNjMwNDAtMmY4Yi00ZTJkLTlkYTItZTMzZjc4YTY0ZGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3NY92AaE6vTf+yvsmkZv0e7wD1aOsKle8gW L8rICgN3PAzs7o7kssdEDXYBT8V8v8f+BkNNE1xYFFpcBAEnHWag98V20DslsDs/ EDh/3eXGlTZChImRS0FxY5Frks8JbqdudIWmHZf2InFOVno3ytY2OOT6+zhL715B gXpVX0Nky09Dc5uNl0TUfrMELPn+Ub04nV29jEqhBVOa9xiInVoYoYGyHev1Az9r Sb2U31wowrHYrWkMIFOmUfmFRYDr+FR5FJObaE8nrxLwyEYoDNwzRyv5zvNJfDZe B4unP3fCVjxpwmXKaz6yHzB4Q7QvETT9ERyzgkktlAMGwR+KawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/fWYuWq6peCxxiGkVYzjq9LSTAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2ZhMDY2YzUtYzQ2Ny0z Y2VmLTlmZjEtMTc4ODE4YjU0Mjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxOep2/iVvXw46cxLmKnxLjEnXly3IKqSudRkD3a4dZK8JUquMADiQH DALpBAVKlvlDakMmFz/zaY3BCcWTqayIMXtan3pKabEzcfVTc/xs+l2+dmqmA7l2 DbfE5KT/e17cT6q6bJYvUyDGTo9ls3JDNSWHXYs8sz4hq7WXIBElMsSSQ9uMqMZC G3xkqnkjJdCmcIizF2+SOE1PZfgrTFdJl278DwiAMr0UWUndZ4KLCQjjYi4BXTY7 UnjIPvUBNHpAhTx9dNjWOjjia7U1r8N1c3vifObANnBRLUoLB8m9JD9Np+M+twZj vZtoRx2LSOeXJkWWb8VL64+jk6x1g7Q= -----END CERTIFICATE-----Generated at Mon Oct 20 07:49:52 2025 by rpki-client