$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ac02742-5556-3eb7-85a2-f33b5f8fcd94.roa File: 9ac02742-5556-3eb7-85a2-f33b5f8fcd94.roa (raw, json) Hash identifier: 8n4HPohMqD6FA3e3mQ/MK/A/IYebFHrrYZw9NSCwYjI= Subject key identifier: DA:3B:5E:DB:44:37:0D:9D:3F:65:4C:55:CD:A3:28:BC:34:CE:B7:AC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC76DC0E77E4A85E81D8D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ac02742-5556-3eb7-85a2-f33b5f8fcd94.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.221.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:6d:c0:e7:7e:4a:85:e8:1d:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=c95dc69b-cc9d-47be-a408-4be61fd4ddca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3d:83:b8:4e:bf:dc:3b:a9:13:13:42:46:c6: 9d:20:ce:90:87:9e:46:f2:5a:33:9b:20:75:b1:4a: bd:18:c6:70:36:4a:1a:86:42:3c:e9:36:db:eb:47: cf:40:9d:80:e9:d9:45:f9:87:f8:f4:8e:eb:87:dc: 80:fd:ee:ef:86:7d:43:75:91:fb:c9:e2:63:73:b0: e6:5c:45:fa:c2:16:e6:ed:e4:f9:69:c4:5c:ae:69: 16:f5:4d:a5:6d:5b:f1:44:d6:5b:ad:44:fc:26:f8: 4e:74:ef:e1:a3:19:bd:dd:01:ef:27:12:56:1d:24: 38:07:9b:d2:c0:73:d0:84:e0:9b:ab:f1:fe:9b:f9: 48:7a:b5:50:76:b5:e7:82:e2:56:42:21:e4:77:99: 5d:b9:e1:16:f7:03:be:33:9f:a9:80:7c:84:00:9e: 7c:c9:35:24:7a:4d:9b:a9:99:78:62:be:09:43:fe: d7:52:68:45:57:2c:3e:9a:f4:cb:8f:b2:49:cc:16: 0c:06:c2:8c:ab:c6:86:e5:2e:01:09:65:d0:4f:17: 68:1d:ea:c1:92:3f:47:37:42:dc:86:d7:7f:69:10: 3c:1a:9e:dc:9a:78:b4:ce:6a:e8:a4:9f:6b:a8:9c: 40:ea:4a:d5:92:6d:c4:d3:37:1c:0d:1f:01:f7:0f: a6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3B:5E:DB:44:37:0D:9D:3F:65:4C:55:CD:A3:28:BC:34:CE:B7:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ac02742-5556-3eb7-85a2-f33b5f8fcd94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:73:36:e9:78:58:60:16:ec:51:dd:ea:4c:f8:04:d1:61:c4: e0:b8:4b:01:61:6f:57:44:35:e7:0f:b2:c5:76:02:f8:a4:4d: 58:1a:5c:ba:d2:1f:93:02:ac:a5:1b:73:b6:c2:f5:6e:f7:ca: 21:e2:ad:2e:49:17:98:46:ea:f4:b7:e6:c6:44:9b:12:12:75: 25:07:9a:37:e6:82:f2:f6:0d:15:18:3f:e9:37:e4:fc:76:df: 91:4e:00:94:8d:11:e9:37:a4:17:0a:74:c1:32:a2:c4:eb:f9: aa:50:a4:d0:ed:5f:47:49:24:23:95:87:a5:4f:3b:da:ab:66: 1c:b2:cf:17:e6:48:2f:1c:91:1d:40:a6:e5:78:89:2a:c5:70: c9:11:f6:bb:b7:fd:41:77:9b:ff:b9:2f:5e:a4:69:55:d7:19: 93:74:e5:dd:a6:ca:06:4e:34:d2:d4:25:79:c9:c4:67:b4:4c: 1b:ac:50:c8:78:fd:0e:e2:f3:28:01:bd:1b:c9:de:3e:1d:68: db:8a:6a:9f:48:b2:f7:75:ba:a0:e6:1d:75:2a:6f:81:49:83: 61:30:0e:0b:a3:a5:6c:78:ba:d6:a4:1b:a0:24:81:16:72:89: 34:15:e2:81:c1:30:f3:37:31:8c:b5:6a:bb:56:93:11:b0:d4: b6:29:ec:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx23A535KhegdjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk Yzk1ZGM2OWItY2M5ZC00N2JlLWE0MDgtNGJlNjFmZDRkZGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT2DuE6/3DupExNCRsadIM6Qh55G8lozmyB1 sUq9GMZwNkoahkI86Tbb60fPQJ2A6dlF+Yf49I7rh9yA/e7vhn1DdZH7yeJjc7Dm XEX6whbm7eT5acRcrmkW9U2lbVvxRNZbrUT8JvhOdO/hoxm93QHvJxJWHSQ4B5vS wHPQhOCbq/H+m/lIerVQdrXnguJWQiHkd5ldueEW9wO+M5+pgHyEAJ58yTUkek2b qZl4Yr4JQ/7XUmhFVyw+mvTLj7JJzBYMBsKMq8aG5S4BCWXQTxdoHerBkj9HN0Lc htd/aRA8Gp7cmni0zmropJ9rqJxA6krVkm3E0zccDR8B9w+myQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNo7XttENw2dP2VMVc2jKLw0zresMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWFjMDI3NDItNTU1Ni0z ZWI3LTg1YTItZjMzYjVmOGZjZDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF90WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRzNul4WGAW7FHd6kz4BNFhxOC4SwFhb1dENecPssV2AvikTVgaXLrS H5MCrKUbc7bC9W73yiHirS5JF5hG6vS35sZEmxISdSUHmjfmgvL2DRUYP+k35Px2 35FOAJSNEek3pBcKdMEyosTr+apQpNDtX0dJJCOVh6VPO9qrZhyyzxfmSC8ckR1A puV4iSrFcMkR9ru3/UF3m/+5L16kaVXXGZN05d2mygZONNLUJXnJxGe0TBusUMh4 /Q7i8ygBvRvJ3j4daNuKap9Isvd1uqDmHXUqb4FJg2EwDgujpWx4utakG6AkgRZy iTQV4oHBMPM3MYy1artWkxGw1LYp7N4= -----END CERTIFICATE-----Generated at Mon Oct 20 05:07:40 2025 by rpki-client