$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e9b6e0b-8959-3939-ae9d-c802adac750d.roa File: 8e9b6e0b-8959-3939-ae9d-c802adac750d.roa (raw, json) Hash identifier: /fQVY66Fv/UaiGQoN5nc9qzdf8BcpFL2Ma/uw2XotEQ= Subject key identifier: 76:72:3F:41:2D:FF:E2:D0:62:9B:90:CD:AD:71:11:90:5C:F3:FB:18 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B3556F99557B42C87D748BF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e9b6e0b-8959-3939-ae9d-c802adac750d.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.221.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:f9:95:57:b4:2c:87:d7:48:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=292a8671-7d06-4e50-a89b-8c45c1cf27d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:14:82:8c:81:5e:a3:65:19:0f:f2:3f:e5:ac: bd:c1:b6:6b:b1:7f:38:fe:d2:ba:40:18:18:12:cf: cf:24:38:49:7c:68:f9:34:34:a0:ab:a9:41:7f:5a: d8:9b:f2:e7:39:f2:1e:9e:df:7d:d1:cd:d3:67:4c: 98:d5:b8:a1:c1:90:75:cc:5a:19:cb:47:e7:8a:b6: 91:ba:d7:b7:f0:f5:0f:f9:50:5b:f7:38:03:dd:bd: 4f:73:72:67:9b:51:24:27:a2:a9:35:82:ef:62:ce: fc:2f:f1:2a:9d:80:3a:9d:58:c6:d5:d4:03:df:12: e4:a1:90:4a:0a:01:23:36:0f:0f:74:64:09:34:ea: 55:cc:9b:6c:02:9d:3b:5a:50:4f:69:47:cd:25:86: c1:b4:c3:5c:6b:35:0f:cd:2a:e3:4f:a9:6f:0c:e0: 59:46:79:94:e7:7d:88:8a:f5:8c:5b:70:35:1d:05: 74:03:5a:2b:ed:3a:ff:57:e6:e8:8f:a6:49:a6:fb: 51:f0:9c:97:12:1c:f7:e2:68:7e:86:48:82:33:80: f2:71:a9:b3:73:71:6b:15:22:f3:bf:22:44:fd:8d: 7a:28:b1:6f:6a:f7:4f:7c:a8:bd:01:2d:86:d1:9b: 1b:e3:8d:2b:f6:ba:54:82:1b:be:21:34:f7:03:e6: 02:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:72:3F:41:2D:FF:E2:D0:62:9B:90:CD:AD:71:11:90:5C:F3:FB:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e9b6e0b-8959-3939-ae9d-c802adac750d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:a7:23:5a:9a:7e:de:41:74:a5:d6:79:27:cb:de:5d:5f:02: 2f:74:4a:2c:07:ad:ad:4a:67:56:ec:b4:33:d9:3e:57:98:fa: 78:e6:65:a4:5e:85:59:ec:ec:6f:e5:cf:cc:52:df:86:ad:1a: 1e:8d:f7:82:72:4f:3c:4b:84:e8:b3:06:34:ac:86:07:d2:85: 39:af:78:fa:ec:f0:03:78:54:92:ac:5c:57:2b:ac:89:b1:b7: aa:60:0e:e1:7e:cc:c5:db:49:fb:d0:85:d0:76:4e:78:46:51: 42:26:d7:13:93:f5:73:64:61:08:9e:f1:06:98:c2:6f:93:bd: a5:28:2c:54:2e:9d:c1:fa:67:d4:e7:40:2c:08:84:f4:70:ce: 21:d0:87:35:ab:ed:15:ec:2c:9a:e9:95:e3:cc:3f:10:b8:49: 6c:c4:a7:3d:8c:21:b7:53:ba:7e:50:ed:4f:62:53:e0:57:d5: 35:99:73:b5:ee:5c:84:02:9e:1c:55:e6:cb:d6:6e:7c:c5:93: ee:ee:5e:92:e9:27:bd:e2:aa:aa:0a:52:56:78:c8:71:42:ab: 69:29:33:d8:6d:8e:c6:7e:bd:07:d1:29:15:99:ad:fa:79:e9: 83:62:7e:2f:5b:cb:fd:f0:c7:f2:9c:95:84:d7:2e:f5:88:9b: 94:f6:7b:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VvmVV7Qsh9dIvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk MjkyYTg2NzEtN2QwNi00ZTUwLWE4OWItOGM0NWMxY2YyN2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RSCjIFeo2UZD/I/5ay9wbZrsX84/tK6QBgY Es/PJDhJfGj5NDSgq6lBf1rYm/LnOfIent990c3TZ0yY1bihwZB1zFoZy0fniraR ute38PUP+VBb9zgD3b1Pc3Jnm1EkJ6KpNYLvYs78L/EqnYA6nVjG1dQD3xLkoZBK CgEjNg8PdGQJNOpVzJtsAp07WlBPaUfNJYbBtMNcazUPzSrjT6lvDOBZRnmU532I ivWMW3A1HQV0A1or7Tr/V+boj6ZJpvtR8JyXEhz34mh+hkiCM4Dycamzc3FrFSLz vyJE/Y16KLFvavdPfKi9AS2G0Zsb440r9rpUghu+ITT3A+YCYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZyP0Et/+LQYpuQza1xEZBc8/sYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGU5YjZlMGItODk1OS0z OTM5LWFlOWQtYzgwMmFkYWM3NTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF93MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOnI1qaft5BdKXWeSfL3l1fAi90SiwHra1KZ1bstDPZPleY+njmZaRe hVns7G/lz8xS34atGh6N94JyTzxLhOizBjSshgfShTmvePrs8AN4VJKsXFcrrImx t6pgDuF+zMXbSfvQhdB2TnhGUUIm1xOT9XNkYQie8QaYwm+TvaUoLFQuncH6Z9Tn QCwIhPRwziHQhzWr7RXsLJrplePMPxC4SWzEpz2MIbdTun5Q7U9iU+BX1TWZc7Xu XIQCnhxV5svWbnzFk+7uXpLpJ73iqqoKUlZ4yHFCq2kpM9htjsZ+vQfRKRWZrfp5 6YNifi9by/3wx/KclYTXLvWIm5T2e0o= -----END CERTIFICATE-----Generated at Mon Oct 20 02:35:21 2025 by rpki-client