$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/813a5ad6-be31-37cb-80ca-83d56b916e9f.roa File: 813a5ad6-be31-37cb-80ca-83d56b916e9f.roa (raw, json) Hash identifier: kjXURnMaPqTzyqDR2/Fy1gpPKjn4AbqdsJ66gw9Jaf4= Subject key identifier: E9:B5:5A:6B:F6:38:C2:6B:29:A8:D0:A6:6C:25:60:0A:C4:11:B0:CA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC764CE00FC543A3E715280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/813a5ad6-be31-37cb-80ca-83d56b916e9f.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.221.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:64:ce:00:fc:54:3a:3e:71:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=4ad79275-e5dc-465b-9d73-dc53a383ee86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3b:f4:fe:ac:d3:1f:c6:d9:43:ec:7a:b1:51: 42:c9:11:4f:3a:1e:62:60:24:a9:b4:46:ee:19:42: 05:7a:32:4f:4f:76:ef:a5:f2:99:de:7b:a9:7e:b1: d0:19:05:78:a9:25:74:d0:29:cb:99:c9:d6:2e:19: 12:23:23:b1:df:f9:73:d6:36:f7:18:dd:4c:b8:7b: 1f:0f:d8:e2:8b:53:d7:fd:eb:95:c1:fd:4c:51:63: 5d:94:4e:e4:22:a7:d1:d0:e2:7a:15:b8:82:85:f0: 2b:b9:14:82:13:76:0d:99:fe:1c:dc:db:6e:42:1d: ba:8d:09:39:fd:46:8e:1c:7e:46:b6:69:0a:15:6e: a2:40:fc:df:e3:cf:d3:b6:a6:9d:99:00:2a:31:77: dd:06:61:74:dd:78:94:07:64:2c:17:29:cd:68:37: 17:1a:89:e0:2d:34:9b:07:8f:78:aa:b9:3c:ea:70: 54:46:70:40:2b:bb:66:8a:ee:f6:33:14:5c:41:09: 83:52:17:ce:a2:c8:42:12:4a:83:7b:80:48:c9:fc: 2c:bf:d4:b3:30:76:66:8e:13:29:84:e3:78:6e:08: 5f:3e:a9:7c:83:cb:f2:49:8a:ba:9d:f0:71:a9:66: 30:c7:14:7f:34:1b:f8:dc:9e:70:1b:07:1c:7a:c4: fb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B5:5A:6B:F6:38:C2:6B:29:A8:D0:A6:6C:25:60:0A:C4:11:B0:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/813a5ad6-be31-37cb-80ca-83d56b916e9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:2b:f5:cb:d5:f8:e3:0d:d0:fe:d4:c2:2e:5f:79:0e:c8:e6: 31:ef:90:98:c7:cb:a3:90:4f:30:7a:14:2c:8d:d6:e3:ff:7d: dd:e5:a0:52:c4:d2:55:80:a2:85:98:55:e4:9f:1e:60:93:61: 20:48:f6:41:33:6f:01:2e:cf:56:12:04:37:dd:30:79:a4:8d: 32:ab:37:ef:56:c0:b2:05:3b:f4:3f:61:43:16:b0:ce:a6:8c: f8:37:55:94:87:1e:49:51:3f:e9:05:0f:5e:b7:cc:51:c1:bf: 27:9c:48:12:b2:ff:b2:a7:8e:7a:d6:1b:c8:e7:00:11:6c:5a: 4b:26:11:88:15:5b:e0:6a:bc:62:9a:6f:e6:c8:47:4c:fd:4a: 41:9f:84:b0:04:b6:04:a6:ac:1c:8b:d9:a1:29:b6:b4:80:44: df:3b:6e:a3:54:77:ff:ff:e5:85:b4:cb:b5:2e:d1:a8:79:dd: 90:98:9c:41:d6:c6:fd:18:cf:0a:22:ba:5e:21:21:57:da:e4: 12:99:b7:42:78:47:f4:bf:f9:93:0e:04:0a:92:d2:e6:e8:8b: 29:be:47:bd:2b:12:82:7c:b8:1a:34:15:3d:7f:d0:9c:c3:d2: 0b:5f:ee:4b:e5:3f:2e:43:f0:7d:78:4a:0d:06:92:e9:2f:66: c3:95:94:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2TOAPxUOj5xUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NGFkNzkyNzUtZTVkYy00NjViLTlkNzMtZGM1M2EzODNlZTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzv0/qzTH8bZQ+x6sVFCyRFPOh5iYCSptEbu GUIFejJPT3bvpfKZ3nupfrHQGQV4qSV00CnLmcnWLhkSIyOx3/lz1jb3GN1MuHsf D9jii1PX/euVwf1MUWNdlE7kIqfR0OJ6FbiChfAruRSCE3YNmf4c3NtuQh26jQk5 /UaOHH5GtmkKFW6iQPzf48/TtqadmQAqMXfdBmF03XiUB2QsFynNaDcXGongLTSb B494qrk86nBURnBAK7tmiu72MxRcQQmDUhfOoshCEkqDe4BIyfwsv9SzMHZmjhMp hON4bghfPql8g8vySYq6nfBxqWYwxxR/NBv43J5wGwccesT7mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOm1Wmv2OMJrKajQpmwlYArEEbDKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODEzYTVhZDYtYmUzMS0z N2NiLTgwY2EtODNkNTZiOTE2ZTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF93XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUr9cvV+OMN0P7Uwi5feQ7I5jHvkJjHy6OQTzB6FCyN1uP/fd3loFLE 0lWAooWYVeSfHmCTYSBI9kEzbwEuz1YSBDfdMHmkjTKrN+9WwLIFO/Q/YUMWsM6m jPg3VZSHHklRP+kFD163zFHBvyecSBKy/7KnjnrWG8jnABFsWksmEYgVW+BqvGKa b+bIR0z9SkGfhLAEtgSmrByL2aEptrSARN87bqNUd///5YW0y7Uu0ah53ZCYnEHW xv0Yzwoiul4hIVfa5BKZt0J4R/S/+ZMOBAqS0uboiym+R70rEoJ8uBo0FT1/0JzD 0gtf7kvlPy5D8H14Sg0GkukvZsOVlP8= -----END CERTIFICATE-----Generated at Mon Oct 20 02:34:30 2025 by rpki-client