$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b0c1977-2816-3d26-8641-1dd2ed1f9bca.roa File: 8b0c1977-2816-3d26-8641-1dd2ed1f9bca.roa (raw, json) Hash identifier: qQrCgGkwZeOgJJBMn8gWnq8wsCG+9gxxEal2SOCvX+M= Subject key identifier: A4:70:C3:19:D6:BF:76:33:0A:7E:48:6C:02:CF:C0:F4:23:FF:AD:41 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC76E92AAD9CF0E3857DCA8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b0c1977-2816-3d26-8641-1dd2ed1f9bca.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 16625 IP address blocks: 23.221.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:6e:92:aa:d9:cf:0e:38:57:dc:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=af3a6db4-36a8-42b0-943f-c07152043970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e9:e6:ba:41:d3:4b:12:9e:6f:30:36:09:71: 2f:f6:a9:9f:eb:ba:9e:2d:8a:aa:4e:52:ca:10:fe: a0:34:37:33:b7:47:38:cf:48:f6:b7:68:37:e0:bf: 29:e8:25:29:9b:40:08:cb:38:5f:1b:23:39:d9:5d: f7:86:da:f2:a5:11:50:14:02:b2:84:47:57:1f:a3: 32:b3:56:ef:bd:ca:fc:0e:26:cc:d4:3b:22:c8:1c: fe:37:ad:0b:35:e1:0e:3d:5c:74:03:7c:32:bd:57: 92:af:d2:ed:89:7c:83:75:4d:37:f3:42:e1:fe:99: e2:ab:e6:25:01:ef:53:e0:07:e4:87:67:bf:ec:3f: 45:7f:57:14:8d:77:c1:b6:68:2b:cc:a1:bc:7b:4f: 5e:d4:33:33:0f:bf:a0:05:11:45:27:44:91:f5:a3: 34:a3:45:ce:2a:1c:ac:32:a2:7e:a6:e6:34:bc:7b: c3:29:ef:61:2d:36:29:59:27:5b:56:73:6b:1c:35: af:4f:57:cb:e3:fe:b9:53:0c:25:36:94:85:33:7c: 52:73:47:8f:27:cd:5b:43:a2:a0:ac:83:04:da:7d: ba:c7:71:e7:a7:c1:a4:00:64:e9:2a:2e:ac:2d:c5: f9:3b:c4:dd:f0:5e:0c:ea:eb:10:5f:2d:3b:b2:ae: 27:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:70:C3:19:D6:BF:76:33:0A:7E:48:6C:02:CF:C0:F4:23:FF:AD:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b0c1977-2816-3d26-8641-1dd2ed1f9bca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:7d:72:82:69:ae:64:0b:a8:87:c7:6b:3d:97:a4:4e:9a:be: 0a:37:ad:3d:7b:a1:eb:c8:89:77:bc:48:40:9e:79:20:11:27: b2:b7:04:36:ca:44:70:35:42:60:90:6f:03:e9:bd:03:b0:6e: 7f:7f:2f:95:49:43:65:10:c3:75:bb:fc:56:9e:52:45:5a:d5: 1e:8b:20:97:a0:68:8f:36:ff:8c:82:88:2b:e7:0f:85:64:25: 5a:2b:84:e2:74:19:90:fe:ed:c5:3b:bc:0a:01:13:65:60:27: 90:5c:19:39:c0:63:05:02:ba:3a:fb:d4:df:22:83:78:31:4a: ea:37:25:9a:6b:c3:f5:27:36:ae:06:da:17:74:77:15:f3:bd: d4:f1:e2:f2:41:4c:51:09:81:b9:49:03:dc:e8:d0:1f:56:75: 22:2a:ee:34:f0:da:7e:0d:1f:82:3b:12:ed:dc:42:7a:53:57: 98:2d:9f:58:07:22:6e:0f:65:e7:6b:42:58:a2:d9:9e:82:35: 6d:43:ca:ef:4f:7a:3c:29:8e:77:2f:24:47:11:1b:7a:93:dc: 3d:ec:67:ec:e5:6a:67:8e:84:ba:25:c0:1c:5a:ff:b5:bc:e8: 95:09:1d:18:cf:d8:8d:00:a0:9c:5e:19:07:79:01:85:a2:7a: e7:20:08:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx26SqtnPDjhX3KgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk YWYzYTZkYjQtMzZhOC00MmIwLTk0M2YtYzA3MTUyMDQzOTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqenmukHTSxKebzA2CXEv9qmf67qeLYqqTlLK EP6gNDczt0c4z0j2t2g34L8p6CUpm0AIyzhfGyM52V33htrypRFQFAKyhEdXH6My s1bvvcr8DibM1DsiyBz+N60LNeEOPVx0A3wyvVeSr9LtiXyDdU0380Lh/pniq+Yl Ae9T4Afkh2e/7D9Ff1cUjXfBtmgrzKG8e09e1DMzD7+gBRFFJ0SR9aM0o0XOKhys MqJ+puY0vHvDKe9hLTYpWSdbVnNrHDWvT1fL4/65UwwlNpSFM3xSc0ePJ81bQ6Kg rIME2n26x3Hnp8GkAGTpKi6sLcX5O8Td8F4M6usQXy07sq4n8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRwwxnWv3YzCn5IbALPwPQj/61BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGIwYzE5NzctMjgxNi0z ZDI2LTg2NDEtMWRkMmVkMWY5YmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF93IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJ9coJprmQLqIfHaz2XpE6avgo3rT17oevIiXe8SECeeSARJ7K3BDbK RHA1QmCQbwPpvQOwbn9/L5VJQ2UQw3W7/FaeUkVa1R6LIJegaI82/4yCiCvnD4Vk JVorhOJ0GZD+7cU7vAoBE2VgJ5BcGTnAYwUCujr71N8ig3gxSuo3JZprw/UnNq4G 2hd0dxXzvdTx4vJBTFEJgblJA9zo0B9WdSIq7jTw2n4NH4I7Eu3cQnpTV5gtn1gH Im4PZedrQlii2Z6CNW1Dyu9PejwpjncvJEcRG3qT3D3sZ+zlameOhLolwBxa/7W8 6JUJHRjP2I0AoJxeGQd5AYWieucgCE8= -----END CERTIFICATE-----Generated at Mon Oct 20 07:43:09 2025 by rpki-client