$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5cb6eb7-d5cc-300a-a286-50e67e043794.roa File: c5cb6eb7-d5cc-300a-a286-50e67e043794.roa (raw, json) Hash identifier: ZlrrDLyAxynGe/pUxIvUR5wZWqqlvEEw3q87kqbfsnc= Subject key identifier: 21:F3:B2:B9:E9:63:81:E6:AB:AC:A2:B0:B6:33:DC:7A:AA:46:22:C3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC771ABC794E2FFF2CE6280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5cb6eb7-d5cc-300a-a286-50e67e043794.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.223.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:71:ab:c7:94:e2:ff:f2:ce:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=b4069415-e331-458d-8dbe-e0432d62d287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:29:81:bb:72:da:c8:e9:1b:87:1c:ba:29:89: fd:42:fd:68:f4:e3:9a:42:df:86:46:41:cd:fa:9f: f3:d4:14:a0:72:19:01:11:ac:bf:f5:f3:ba:f8:f5: 4a:c5:9d:d1:eb:f3:21:53:f6:43:ac:91:64:6f:81: e1:b6:ba:1a:12:de:ff:35:9a:cb:19:64:83:a9:2b: 99:dd:80:46:4c:4a:fc:3c:7e:1b:18:ff:00:79:df: 3f:df:45:8b:74:2b:9c:05:8d:21:30:53:f7:89:5b: fa:cf:88:b3:b4:bc:0c:d3:12:16:d5:09:78:8a:ed: b9:2a:2f:de:3e:2c:31:b4:93:99:2f:f9:06:6f:f4: 62:57:d5:e9:04:a3:d5:7d:4b:cf:97:84:94:89:dd: 7f:e6:d4:d3:9a:06:13:97:15:21:d7:97:27:52:a3: 66:bc:25:be:27:33:08:29:f9:f3:b3:ec:fd:86:86: 83:79:ef:e8:6e:b3:cc:6a:d3:18:84:72:6c:79:36: a3:11:a5:d8:6c:0e:59:cd:36:6c:38:75:b1:d4:5f: 56:c3:ff:22:8c:84:e2:21:df:fc:78:2c:23:43:35: 0e:fa:f8:b8:79:f0:77:a5:e9:cc:76:26:8c:1c:ca: 31:8d:d8:de:66:11:46:88:c9:28:05:39:34:2e:bc: 67:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F3:B2:B9:E9:63:81:E6:AB:AC:A2:B0:B6:33:DC:7A:AA:46:22:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5cb6eb7-d5cc-300a-a286-50e67e043794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:0a:b1:66:0c:4d:62:63:2c:55:8e:a3:14:92:5a:60:40:d7: ac:f1:dc:9f:f9:22:e4:48:90:71:ba:6f:ab:67:b1:74:91:8b: b6:66:f3:b6:42:7b:2e:62:8c:4c:5d:1e:99:a7:9e:53:a9:fa: 37:19:47:7a:a8:af:2d:d2:06:6e:19:26:b1:c7:83:f4:e4:de: 46:8e:26:b3:82:48:01:f6:d5:dd:42:e0:ad:20:f1:c4:54:b8: fd:a1:4b:1f:02:f4:43:7a:85:17:6e:5a:2a:68:93:6d:e7:17: 2d:b4:37:08:e5:d9:59:38:3c:73:68:f2:42:06:e9:1b:6c:3a: 17:35:5b:c0:4a:a1:c6:10:f5:7a:c7:73:ca:48:a7:44:25:96: e5:3b:d6:2a:d9:06:7d:2e:52:8f:1c:fb:6c:27:ef:47:2d:d9: 7a:87:8d:72:73:3e:eb:a7:05:50:99:77:e2:16:57:75:39:8e: 9e:29:ea:a0:18:4a:2d:70:cd:6b:63:16:81:19:df:f8:24:bf: 1a:00:67:d0:b2:37:73:6d:d5:2b:2c:f3:14:9b:33:d6:e6:34: 8c:54:9b:51:05:85:25:85:f7:8b:e0:51:e6:c8:f1:2a:11:98: f7:6d:cb:b8:ac:1d:7c:e6:6c:e4:06:03:77:66:92:8b:0b:8a: b7:a2:f2:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3Grx5Ti//LOYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk YjQwNjk0MTUtZTMzMS00NThkLThkYmUtZTA0MzJkNjJkMjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiymBu3LayOkbhxy6KYn9Qv1o9OOaQt+GRkHN +p/z1BSgchkBEay/9fO6+PVKxZ3R6/MhU/ZDrJFkb4HhtroaEt7/NZrLGWSDqSuZ 3YBGTEr8PH4bGP8Aed8/30WLdCucBY0hMFP3iVv6z4iztLwM0xIW1Ql4iu25Ki/e PiwxtJOZL/kGb/RiV9XpBKPVfUvPl4SUid1/5tTTmgYTlxUh15cnUqNmvCW+JzMI Kfnzs+z9hoaDee/obrPMatMYhHJseTajEaXYbA5ZzTZsOHWx1F9Ww/8ijITiId/8 eCwjQzUO+vi4efB3penMdiaMHMoxjdjeZhFGiMkoBTk0LrxnkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHzsrnpY4Hmq6yisLYz3HqqRiLDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzVjYjZlYjctZDVjYy0z MDBhLWEyODYtNTBlNjdlMDQzNzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4KsWYMTWJjLFWOoxSSWmBA16zx3J/5IuRIkHG6b6tnsXSRi7Zm87ZC ey5ijExdHpmnnlOp+jcZR3qory3SBm4ZJrHHg/Tk3kaOJrOCSAH21d1C4K0g8cRU uP2hSx8C9EN6hRduWipok23nFy20Nwjl2Vk4PHNo8kIG6RtsOhc1W8BKocYQ9XrH c8pIp0QlluU71irZBn0uUo8c+2wn70ct2XqHjXJzPuunBVCZd+IWV3U5jp4p6qAY Si1wzWtjFoEZ3/gkvxoAZ9CyN3Nt1Sss8xSbM9bmNIxUm1EFhSWF94vgUebI8SoR mPdty7isHXzmbOQGA3dmkosLirei8l4= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:20 2025 by rpki-client