$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa05ac2c-04b2-37cb-998b-515c8a033ab8.roa File: aa05ac2c-04b2-37cb-998b-515c8a033ab8.roa (raw, json) Hash identifier: ZJmDnMPL+RBWOEuQuMiP7hFGhpwBtJ2xhJtnhHwuV+0= Subject key identifier: B9:0C:60:7F:59:50:94:A7:3E:D9:B5:88:28:B2:49:C1:60:58:0A:18 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC7699C07BAC02A2595CB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa05ac2c-04b2-37cb-998b-515c8a033ab8.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 16625 IP address blocks: 23.223.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:69:9c:07:ba:c0:2a:25:95:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=657a6c84-3bd6-4744-a9d0-e05ef846a497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:47:86:63:0e:00:0e:12:0c:6f:f9:35:bd:1c: 0b:f7:b6:58:e2:22:7c:e0:43:52:b2:08:79:bd:96: 8d:1d:45:57:da:47:13:81:a5:79:ae:59:d5:3a:38: af:6d:9a:a0:d1:65:95:9c:a6:6c:6d:ff:9f:58:df: 1c:37:7a:6a:b7:f8:78:97:fc:d9:38:5e:ec:3b:aa: be:50:6d:81:bf:4c:e4:04:96:cd:ae:66:49:78:69: 23:23:38:bf:e1:9f:e7:0e:97:3f:10:7d:e5:67:65: 75:da:19:f1:42:3d:76:45:14:47:34:9b:73:f1:e7: c5:db:43:c0:34:75:eb:81:2f:52:a8:1d:b0:da:08: 91:df:d9:85:db:aa:49:be:9e:ed:bb:bb:4d:01:ed: ec:3f:c2:4e:5e:9a:1c:58:50:ca:b2:2b:af:a2:e5: 6c:8e:fd:f4:95:07:ec:34:e4:d5:4d:2c:be:58:27: 93:a7:ee:07:bf:30:3a:55:03:e2:92:95:c6:35:dd: 7f:8d:cd:d3:73:c3:1b:81:ce:50:64:87:3e:05:0d: b9:eb:9b:ca:98:a1:d6:96:23:36:22:71:8d:8a:2d: 43:97:25:8e:58:69:af:ab:b6:ca:47:87:60:9d:78: 54:00:2e:88:10:a1:06:19:fa:77:d6:aa:2f:0c:07: f8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0C:60:7F:59:50:94:A7:3E:D9:B5:88:28:B2:49:C1:60:58:0A:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa05ac2c-04b2-37cb-998b-515c8a033ab8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:6b:64:16:8a:b2:54:c9:7b:7e:3e:72:c2:68:50:fe:bd:fb: 30:3e:83:e8:5b:2b:3d:85:b8:58:26:e9:b7:03:03:19:25:46: 57:7a:7b:8d:e6:b8:0b:83:a7:1b:8e:b5:36:a6:b8:eb:b4:bd: ee:b5:50:c0:2b:d4:1b:f5:aa:3c:9a:be:f7:1d:0c:71:1b:13: 3e:49:fa:9f:09:42:23:1c:6b:5d:24:2f:55:59:40:fb:18:62: 9b:1b:f8:51:28:ca:ff:3e:90:2e:9c:32:ad:01:ae:1a:65:c1: 3f:1b:bc:13:32:03:58:72:3a:9d:4f:e4:d1:89:a2:7d:20:9b: 00:d5:2f:b8:f2:92:20:5f:30:f6:d2:4e:fe:b4:6b:b3:93:8d: 25:39:37:fa:d2:eb:1f:bc:c5:80:16:92:0f:e6:1d:7f:ba:f0: 02:78:82:e6:26:96:8d:f6:2b:43:ee:65:64:06:3e:e1:9f:a8: be:e8:47:b0:48:95:e8:c4:8e:af:d3:01:7d:25:2b:66:bf:f4: 1a:90:6f:e8:9c:6e:55:4f:b9:88:4a:da:8b:66:a6:b1:38:2c: 8f:21:89:00:ad:8c:75:81:35:af:69:d6:d5:15:f4:49:83:e5: 00:b3:0d:49:b9:17:d5:46:7a:e4:75:17:2c:37:3f:c0:ac:a7: 08:22:30:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2mcB7rAKiWVy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NjU3YTZjODQtM2JkNi00NzQ0LWE5ZDAtZTA1ZWY4NDZhNDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikeGYw4ADhIMb/k1vRwL97ZY4iJ84ENSsgh5 vZaNHUVX2kcTgaV5rlnVOjivbZqg0WWVnKZsbf+fWN8cN3pqt/h4l/zZOF7sO6q+ UG2Bv0zkBJbNrmZJeGkjIzi/4Z/nDpc/EH3lZ2V12hnxQj12RRRHNJtz8efF20PA NHXrgS9SqB2w2giR39mF26pJvp7tu7tNAe3sP8JOXpocWFDKsiuvouVsjv30lQfs NOTVTSy+WCeTp+4HvzA6VQPikpXGNd1/jc3Tc8Mbgc5QZIc+BQ2565vKmKHWliM2 InGNii1DlyWOWGmvq7bKR4dgnXhUAC6IEKEGGfp31qovDAf4kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkMYH9ZUJSnPtm1iCiyScFgWAoYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWEwNWFjMmMtMDRiMi0z N2NiLTk5OGItNTE1YzhhMDMzYWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBrZBaKslTJe34+csJoUP69+zA+g+hbKz2FuFgm6bcDAxklRld6e43m uAuDpxuOtTamuOu0ve61UMAr1Bv1qjyavvcdDHEbEz5J+p8JQiMca10kL1VZQPsY Ypsb+FEoyv8+kC6cMq0BrhplwT8bvBMyA1hyOp1P5NGJon0gmwDVL7jykiBfMPbS Tv60a7OTjSU5N/rS6x+8xYAWkg/mHX+68AJ4guYmlo32K0PuZWQGPuGfqL7oR7BI lejEjq/TAX0lK2a/9BqQb+icblVPuYhK2otmprE4LI8hiQCtjHWBNa9p1tUV9EmD 5QCzDUm5F9VGeuR1Fyw3P8CspwgiMCY= -----END CERTIFICATE-----Generated at Mon Oct 20 17:36:58 2025 by rpki-client