$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7017d65-aa7c-3b4d-8fe9-a16abdac4672.roa File: c7017d65-aa7c-3b4d-8fe9-a16abdac4672.roa (raw, json) Hash identifier: 13L4Ox7eGsle5HAM3PKxu1mH3HlzIc1GSIapTVaBB9k= Subject key identifier: D7:23:10:72:A9:FD:EE:AE:BF:2E:A3:98:AC:BB:2F:A2:9C:86:90:43 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC76384ED81FC3CEB59EF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7017d65-aa7c-3b4d-8fe9-a16abdac4672.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.220.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:63:84:ed:81:fc:3c:eb:59:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=52fbadcd-2429-4a03-ab7f-19a28c6df6da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d3:56:d2:99:91:67:1d:16:ee:15:bc:ec:af: 98:31:28:7b:ed:bd:46:8d:1b:0a:78:81:21:6f:5b: 21:77:ed:84:57:27:6b:71:f2:65:61:66:3f:73:ad: a1:c8:97:3f:be:a1:c8:6d:71:76:2e:a6:f2:a1:d3: 65:75:15:fb:c4:98:cb:a8:87:88:80:18:c7:59:1b: 15:7e:be:bd:2f:67:44:66:77:e9:ef:07:3c:86:a8: bd:fa:de:9f:16:fe:0d:f8:dc:ac:2c:40:ca:f4:d5: c5:4b:62:44:72:cf:67:5e:e3:35:55:75:c8:2c:6e: ee:94:fe:b8:7c:ca:c6:e4:07:c5:7e:da:56:72:27: a8:25:c0:10:e4:b1:28:96:6d:0c:2b:17:dc:98:73: 46:f2:4e:31:56:e3:ad:4f:c6:bd:11:b9:d9:30:3f: c6:79:3f:1b:0a:d8:94:01:9a:ca:d2:fd:50:1e:4c: 2a:03:b3:d2:86:87:5f:d7:bc:50:45:e5:ec:e5:d7: 51:b2:8e:f7:97:61:0e:69:f1:fa:35:81:46:f8:ff: 78:99:86:2d:fc:46:68:3d:b0:6c:49:1b:c0:73:da: 8e:7d:62:68:1e:fc:f4:c1:58:6b:e5:a6:eb:e7:69: ec:b3:b0:9f:1b:4c:d4:f2:60:7b:ed:e2:68:0e:57: dc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:23:10:72:A9:FD:EE:AE:BF:2E:A3:98:AC:BB:2F:A2:9C:86:90:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7017d65-aa7c-3b4d-8fe9-a16abdac4672.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:6d:76:dc:91:df:e6:58:35:c1:3a:a4:aa:15:26:2e:a6:df: 08:ab:81:61:c8:24:cf:16:32:50:74:1c:8e:56:42:d9:c4:c0: a2:de:72:20:f9:ac:18:b5:6f:84:82:ad:21:2f:1f:28:26:01: 1a:0e:47:39:b9:6a:ca:9d:5c:6d:17:da:87:37:f0:7d:34:f2: d0:93:25:5b:62:4c:56:c4:91:e8:23:32:f8:0c:4c:68:06:e8: eb:40:dc:74:d9:b7:9d:80:67:ba:86:65:c5:69:fd:07:10:5d: 80:b9:0f:f2:9b:14:9c:a0:00:f7:21:cf:45:dc:09:1f:82:9a: 70:16:6f:e8:d3:b1:eb:db:d2:bd:5c:53:e4:90:03:a5:1c:04: cd:e8:70:ff:0c:1e:6c:d4:3e:6a:04:56:ab:6c:47:fd:27:e9: 74:5a:fa:0d:60:87:87:08:b8:cc:93:51:bc:fb:fe:f6:10:14: e3:1a:11:4d:a2:d7:48:72:f9:bd:94:c0:a5:ab:1f:a8:3b:27: 44:c5:33:91:5f:45:1c:b7:7c:c0:ab:e2:ea:a8:15:a8:9c:62: c1:3d:fa:e3:16:d4:d0:6a:b2:65:a3:15:9b:5e:14:59:6f:66: af:cd:13:19:45:34:03:c7:06:5d:cc:9c:f4:df:e6:13:5e:17: 52:97:74:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2OE7YH8POtZ74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NTJmYmFkY2QtMjQyOS00YTAzLWFiN2YtMTlhMjhjNmRmNmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldNW0pmRZx0W7hW87K+YMSh77b1GjRsKeIEh b1shd+2EVydrcfJlYWY/c62hyJc/vqHIbXF2LqbyodNldRX7xJjLqIeIgBjHWRsV fr69L2dEZnfp7wc8hqi9+t6fFv4N+NysLEDK9NXFS2JEcs9nXuM1VXXILG7ulP64 fMrG5AfFftpWcieoJcAQ5LEolm0MKxfcmHNG8k4xVuOtT8a9EbnZMD/GeT8bCtiU AZrK0v1QHkwqA7PShodf17xQReXs5ddRso73l2EOafH6NYFG+P94mYYt/EZoPbBs SRvAc9qOfWJoHvz0wVhr5abr52nss7CfG0zU8mB77eJoDlfczwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcjEHKp/e6uvy6jmKy7L6KchpBDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzcwMTdkNjUtYWE3Yy0z YjRkLThmZTktYTE2YWJkYWM0NjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9z4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHltdtyR3+ZYNcE6pKoVJi6m3wirgWHIJM8WMlB0HI5WQtnEwKLeciD5 rBi1b4SCrSEvHygmARoORzm5asqdXG0X2oc38H008tCTJVtiTFbEkegjMvgMTGgG 6OtA3HTZt52AZ7qGZcVp/QcQXYC5D/KbFJygAPchz0XcCR+CmnAWb+jTsevb0r1c U+SQA6UcBM3ocP8MHmzUPmoEVqtsR/0n6XRa+g1gh4cIuMyTUbz7/vYQFOMaEU2i 10hy+b2UwKWrH6g7J0TFM5FfRRy3fMCr4uqoFaicYsE9+uMW1NBqsmWjFZteFFlv Zq/NExlFNAPHBl3MnPTf5hNeF1KXdLE= -----END CERTIFICATE-----Generated at Mon Oct 20 18:07:07 2025 by rpki-client