$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc01fc0c-00dc-3d37-b1de-a080c4fe6116.roa File: cc01fc0c-00dc-3d37-b1de-a080c4fe6116.roa (raw, json) Hash identifier: OtT5HwFPGCFOTqYXuhlrnMhHKFUa/aUlVacDfgAvOGc= Subject key identifier: 26:D0:1C:F5:24:37:E6:EC:42:B5:6F:D3:44:7F:B3:91:9C:40:AA:10 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC768BC19CBCFE2811A0DA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc01fc0c-00dc-3d37-b1de-a080c4fe6116.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 16625 IP address blocks: 23.223.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:68:bc:19:cb:cf:e2:81:1a:0d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=35a3df9f-51d4-452f-89d3-ab5e03eaa24e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:97:26:be:a9:3f:24:06:67:94:c7:9c:0d:62: 81:d8:f5:6d:ce:3b:d6:f3:fe:1e:ef:12:95:94:1a: 07:3e:64:78:f5:e4:00:e9:d2:a3:64:40:ca:4f:0a: 01:cb:8e:8e:23:52:d9:9f:90:f1:23:74:1a:0d:e3: aa:89:56:89:fc:66:a2:23:18:f5:bd:7f:8d:31:27: 5f:b1:97:4a:38:e2:8f:8f:56:7c:0a:20:e7:9f:0d: f0:d1:63:14:85:d6:fa:f7:1f:3f:d1:91:48:cf:d6: 11:4e:c6:e8:62:eb:18:ee:57:24:55:55:e0:a0:79: 05:83:b8:1c:69:ea:ca:df:38:fb:d4:85:ea:3c:43: a9:5c:e6:d8:99:e0:4e:c8:d4:ca:18:f6:db:64:b9: 84:fa:0a:63:93:5a:bc:5c:59:02:4f:fd:67:9b:55: 72:06:e3:92:46:8d:b1:96:5a:46:68:c8:4e:59:83: 8b:2c:06:fb:f5:34:d6:37:63:63:c4:22:42:44:e1: e3:ce:f0:16:f7:7a:78:46:cf:1b:dc:69:69:8c:32: 50:fc:48:39:81:04:63:4f:0d:58:2b:79:a2:76:bb: 0c:de:bd:11:98:da:cb:9e:5f:45:b6:57:bc:3a:c7: 5c:08:89:ef:9f:ec:8b:e2:ef:7b:4e:97:e4:02:5b: 6b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D0:1C:F5:24:37:E6:EC:42:B5:6F:D3:44:7F:B3:91:9C:40:AA:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc01fc0c-00dc-3d37-b1de-a080c4fe6116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:d7:f3:68:02:2c:c4:bb:82:15:55:fe:0a:b4:b9:11:11:ac: a2:ba:1c:34:d0:86:8b:2e:17:30:50:94:eb:f8:10:d5:b8:1a: b5:78:69:97:90:44:ec:51:90:b8:78:f5:51:66:c3:16:fe:81: 99:b1:fd:04:d7:4c:91:ad:56:9c:c8:b0:d1:45:1e:b5:8c:51: fc:92:d6:5d:34:82:ff:32:3d:57:13:7b:37:7b:16:7a:ab:f3: c4:84:38:db:64:62:9d:4f:54:d2:7d:d8:84:dd:a5:57:8b:4f: 51:a6:71:84:bd:e0:d0:d9:0c:0b:a9:5a:9b:96:a4:c3:8b:76: 96:8f:78:e6:bd:6d:94:16:14:ba:69:a0:75:3d:cf:9e:19:79: a9:0e:da:21:12:da:d9:80:5e:7d:fa:78:33:e5:2a:bc:be:78: 32:62:fc:18:93:4c:e2:56:b6:74:99:93:29:fe:84:aa:0e:40: af:4f:f4:d7:d5:9b:25:5f:c0:5c:54:90:bf:aa:fd:b1:0a:5e: ff:70:cc:f4:c1:f6:58:c8:9c:95:55:88:26:f2:d8:44:90:c2: bb:a2:65:0b:67:ed:83:f4:ba:28:83:28:e6:57:14:46:59:ab: 78:92:79:54:fc:84:1c:eb:29:06:38:43:18:e1:c6:4f:ad:3a: 80:04:ba:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2i8GcvP4oEaDaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MzVhM2RmOWYtNTFkNC00NTJmLTg5ZDMtYWI1ZTAzZWFhMjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5cmvqk/JAZnlMecDWKB2PVtzjvW8/4e7xKV lBoHPmR49eQA6dKjZEDKTwoBy46OI1LZn5DxI3QaDeOqiVaJ/GaiIxj1vX+NMSdf sZdKOOKPj1Z8CiDnnw3w0WMUhdb69x8/0ZFIz9YRTsboYusY7lckVVXgoHkFg7gc aerK3zj71IXqPEOpXObYmeBOyNTKGPbbZLmE+gpjk1q8XFkCT/1nm1VyBuOSRo2x llpGaMhOWYOLLAb79TTWN2NjxCJCROHjzvAW93p4Rs8b3GlpjDJQ/Eg5gQRjTw1Y K3midrsM3r0RmNrLnl9Ftle8OsdcCInvn+yL4u97TpfkAltryQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbQHPUkN+bsQrVv00R/s5GcQKoQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2MwMWZjMGMtMDBkYy0z ZDM3LWIxZGUtYTA4MGM0ZmU2MTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF9+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXX82gCLMS7ghVV/gq0uRERrKK6HDTQhosuFzBQlOv4ENW4GrV4aZeQ ROxRkLh49VFmwxb+gZmx/QTXTJGtVpzIsNFFHrWMUfyS1l00gv8yPVcTezd7Fnqr 88SEONtkYp1PVNJ92ITdpVeLT1GmcYS94NDZDAupWpuWpMOLdpaPeOa9bZQWFLpp oHU9z54ZeakO2iES2tmAXn36eDPlKry+eDJi/BiTTOJWtnSZkyn+hKoOQK9P9NfV myVfwFxUkL+q/bEKXv9wzPTB9ljInJVViCby2ESQwruiZQtn7YP0uiiDKOZXFEZZ q3iSeVT8hBzrKQY4Qxjhxk+tOoAEuoc= -----END CERTIFICATE-----Generated at Mon Oct 20 09:51:18 2025 by rpki-client