$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4aaf835-035d-3087-b131-ce7386d0e1c7.roa File: c4aaf835-035d-3087-b131-ce7386d0e1c7.roa (raw, json) Hash identifier: mHG8vOFspl3TbNVzjsk4ZPeP0IpHNJEq0nhiEdr5mCo= Subject key identifier: 97:A1:0D:5E:8B:A6:FC:5B:5A:34:44:34:EB:81:B1:83:0C:B3:5D:41 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC764E0EEF97404FBB65BD0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4aaf835-035d-3087-b131-ce7386d0e1c7.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.221.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:64:e0:ee:f9:74:04:fb:b6:5b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=08b4733e-7d90-4957-a64a-1ff4e96dc492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ed:f7:46:70:4b:aa:93:ae:b6:df:23:86:67: 5b:49:7e:13:96:12:3b:5f:c7:c8:df:31:f2:ba:d7: 2a:89:ae:e5:20:f9:17:57:9e:c2:76:78:fe:71:a2: f6:56:41:96:6f:50:e9:b0:c6:d6:4a:57:25:f7:f2: 31:a0:d8:3a:6b:2f:db:31:3f:66:9a:e6:26:46:4f: 3b:01:d9:25:fa:52:2d:0c:d4:a6:0b:62:32:8e:09: ef:db:98:77:74:df:90:b4:9e:83:13:27:bc:69:98: 6e:9b:a6:e9:50:ef:8a:c3:f4:1e:6d:80:26:61:77: 23:7d:a6:3b:34:8e:f9:69:ea:bc:e7:77:30:a8:c1: ea:80:4b:4a:ab:ab:f9:eb:b6:58:7f:0b:b5:59:b1: 95:91:37:a2:a9:11:85:ff:a6:7c:a7:89:23:a5:3c: e3:fc:89:eb:a2:5c:41:cf:ae:0d:7b:f3:ac:3a:2b: c3:82:be:1b:80:6d:c0:bc:d4:b3:a7:e6:a0:8d:c7: a7:83:f3:e5:ea:c6:96:c8:04:bf:0c:37:f5:09:e1: 0c:4f:3b:94:ab:67:58:9a:7b:a4:b2:f0:19:ef:72: 4f:02:4d:92:24:08:bb:72:52:2d:6c:8d:f3:2c:f1: 6b:df:a8:ca:cf:9c:2b:0c:49:0c:0d:f4:25:20:74: ed:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A1:0D:5E:8B:A6:FC:5B:5A:34:44:34:EB:81:B1:83:0C:B3:5D:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4aaf835-035d-3087-b131-ce7386d0e1c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:63:e7:72:45:e7:da:bb:83:08:72:a8:50:3f:e4:4f:54:41: 29:02:1b:11:84:dd:4a:9b:a6:79:a0:c5:cc:e4:c5:0f:2a:ea: bf:02:5f:cf:a5:70:3b:c3:27:a7:e5:ec:bf:ca:a3:30:a2:ee: a2:4c:f8:d8:00:4d:5f:63:00:0a:d6:fd:2f:ec:dd:e1:04:6b: af:fc:eb:09:55:ed:c4:9f:01:3d:6b:76:90:d2:b1:e9:f5:a4: 80:9c:3c:61:c2:7e:73:be:4c:fa:74:ec:21:29:a1:72:5b:4f: 24:d3:ae:94:0d:fa:73:b4:d3:07:2c:ba:b7:f0:92:b3:1b:0e: 73:ca:27:12:cd:5e:b9:65:17:a4:91:3b:fb:3d:e6:5b:c1:48: 3a:1e:3d:ef:18:77:2f:3a:83:9b:59:1c:db:4d:8e:7a:39:ae: 42:18:c6:4a:63:f5:a7:8b:98:51:e0:3a:24:79:2f:bd:1f:1b: b1:49:4d:ca:f2:63:61:f9:74:8a:6d:95:2b:c0:59:5f:aa:e2: 6d:16:e8:8e:13:93:bf:5b:cb:0f:5e:0a:52:04:14:82:c3:42: 47:7b:46:7c:50:c7:36:f0:16:1a:d2:f4:33:de:f7:46:4f:c9: 9d:d5:2d:80:c0:af:73:b5:c6:e5:98:e4:26:7b:fd:b9:00:c0: bc:29:fe:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2Tg7vl0BPu2W9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MDhiNDczM2UtN2Q5MC00OTU3LWE2NGEtMWZmNGU5NmRjNDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+33RnBLqpOutt8jhmdbSX4TlhI7X8fI3zHy utcqia7lIPkXV57Cdnj+caL2VkGWb1DpsMbWSlcl9/IxoNg6ay/bMT9mmuYmRk87 Adkl+lItDNSmC2Iyjgnv25h3dN+QtJ6DEye8aZhum6bpUO+Kw/QebYAmYXcjfaY7 NI75aeq853cwqMHqgEtKq6v567ZYfwu1WbGVkTeiqRGF/6Z8p4kjpTzj/InrolxB z64Ne/OsOivDgr4bgG3AvNSzp+agjceng/Pl6saWyAS/DDf1CeEMTzuUq2dYmnuk svAZ73JPAk2SJAi7clItbI3zLPFr36jKz5wrDEkMDfQlIHTtZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJehDV6LpvxbWjRENOuBsYMMs11BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzRhYWY4MzUtMDM1ZC0z MDg3LWIxMzEtY2U3Mzg2ZDBlMWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF93eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVj53JF59q7gwhyqFA/5E9UQSkCGxGE3UqbpnmgxczkxQ8q6r8CX8+l cDvDJ6fl7L/KozCi7qJM+NgATV9jAArW/S/s3eEEa6/86wlV7cSfAT1rdpDSsen1 pICcPGHCfnO+TPp07CEpoXJbTyTTrpQN+nO00wcsurfwkrMbDnPKJxLNXrllF6SR O/s95lvBSDoePe8Ydy86g5tZHNtNjno5rkIYxkpj9aeLmFHgOiR5L70fG7FJTcry Y2H5dIptlSvAWV+q4m0W6I4Tk79byw9eClIEFILDQkd7RnxQxzbwFhrS9DPe90ZP yZ3VLYDAr3O1xuWY5CZ7/bkAwLwp/lo= -----END CERTIFICATE-----Generated at Mon Oct 20 05:29:24 2025 by rpki-client