$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cdc814f2-d5fc-38ab-8808-35720ea3e7ec.roa File: cdc814f2-d5fc-38ab-8808-35720ea3e7ec.roa (raw, json) Hash identifier: bIdJBgyCYo0vZ8FeNMJ8cA9z9VP+QizAZMg5ECmYMdI= Subject key identifier: D8:0D:C9:05:D7:4F:8B:63:DA:10:4C:F7:36:34:59:9D:1E:01:1C:27 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC764F502BD2817F4C28FC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cdc814f2-d5fc-38ab-8808-35720ea3e7ec.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.221.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:64:f5:02:bd:28:17:f4:c2:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=5996ca4a-e761-443d-a4c0-b7251b1e0ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7d:0a:a7:49:18:b1:fb:e4:f2:60:83:54:1b: 9e:f3:43:6b:fd:50:74:f6:3d:98:11:1f:35:11:c8: a3:24:42:6b:08:9a:d1:87:4d:2f:c4:d6:d3:18:ba: df:e9:1c:44:84:6e:6c:32:5d:1a:3d:15:1a:d8:b2: 89:27:c7:c2:6e:62:0b:42:9e:49:c9:55:b9:64:93: 9d:9c:cd:4a:c4:71:d4:2d:25:97:6b:61:97:17:94: 4a:eb:e9:bf:9f:d6:3c:28:1f:e0:74:82:7c:e2:48: 47:d4:17:2f:7f:1b:07:d2:48:7b:02:06:08:8f:5e: b5:44:61:19:6b:42:b3:15:bf:4d:39:67:48:a5:39: 43:f2:a0:c9:da:40:0d:34:56:2a:d9:71:fc:e5:98: 57:f6:81:85:92:6a:e9:06:4b:e8:5f:a1:71:3f:cc: 5c:91:da:a5:0c:ae:ae:20:a8:90:03:84:f0:ea:fe: da:48:70:98:d6:72:20:4f:9f:38:13:b4:0c:e8:c5: aa:4c:e1:cf:34:07:df:d8:3f:c0:05:7f:de:64:6e: 92:aa:d0:39:df:52:ac:f4:29:9a:19:c5:b6:c3:81: e8:cb:80:d3:a1:e5:14:51:18:35:44:ed:25:9c:e3: 73:81:26:91:5a:1b:79:fa:6d:60:a4:81:74:a4:d7: 56:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0D:C9:05:D7:4F:8B:63:DA:10:4C:F7:36:34:59:9D:1E:01:1C:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cdc814f2-d5fc-38ab-8808-35720ea3e7ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:bb:23:10:5c:19:92:a5:5b:4e:1a:18:24:f3:25:77:48:db: a6:3f:cd:59:80:9a:45:6c:b0:9e:52:3b:54:0e:4f:8f:55:4e: 10:ae:e7:68:3b:87:98:08:0a:69:31:10:c5:0b:71:67:d8:13: 84:0e:f0:74:00:b5:d1:43:31:e4:6e:8b:d2:59:af:22:35:1b: 4b:01:1c:47:a4:c1:66:94:b6:28:a6:49:fc:fc:94:46:6a:c5: f2:3d:af:3d:b7:fd:6c:cb:d1:f4:ad:db:3e:f4:de:87:15:77: 07:36:48:02:d8:6a:af:65:0c:0e:e4:6c:70:64:6b:42:ee:c6: 6c:ad:64:95:21:63:79:df:db:91:87:da:d5:80:70:98:ca:82: da:57:fd:e2:ea:02:8a:c9:73:15:13:c3:a6:47:51:28:91:cb: 37:92:07:96:09:9c:a8:08:c7:90:fa:27:b4:f7:91:e9:3f:ca: ab:59:6e:9b:6e:f9:79:bc:da:39:08:7e:10:b3:a3:e1:0b:c1: 36:40:2b:4f:c8:f5:a9:3b:75:20:a9:93:bb:6b:7f:3c:f1:b6: 10:cc:84:2b:8b:4f:35:d4:06:84:ea:91:d2:00:db:e1:51:25: 77:85:d9:ce:f7:47:e2:97:01:7a:b2:39:11:ea:c2:34:02:56: 66:16:b8:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2T1Ar0oF/TCj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NTk5NmNhNGEtZTc2MS00NDNkLWE0YzAtYjcyNTFiMWUwZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy30Kp0kYsfvk8mCDVBue80Nr/VB09j2YER81 EcijJEJrCJrRh00vxNbTGLrf6RxEhG5sMl0aPRUa2LKJJ8fCbmILQp5JyVW5ZJOd nM1KxHHULSWXa2GXF5RK6+m/n9Y8KB/gdIJ84khH1BcvfxsH0kh7AgYIj161RGEZ a0KzFb9NOWdIpTlD8qDJ2kANNFYq2XH85ZhX9oGFkmrpBkvoX6FxP8xckdqlDK6u IKiQA4Tw6v7aSHCY1nIgT584E7QM6MWqTOHPNAff2D/ABX/eZG6SqtA531Ks9Cma GcW2w4Hoy4DToeUUURg1RO0lnONzgSaRWht5+m1gpIF0pNdWgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgNyQXXT4tj2hBM9zY0WZ0eARwnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2RjODE0ZjItZDVmYy0z OGFiLTg4MDgtMzU3MjBlYTNlN2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF93gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJG7IxBcGZKlW04aGCTzJXdI26Y/zVmAmkVssJ5SO1QOT49VThCu52g7 h5gICmkxEMULcWfYE4QO8HQAtdFDMeRui9JZryI1G0sBHEekwWaUtiimSfz8lEZq xfI9rz23/WzL0fSt2z703ocVdwc2SALYaq9lDA7kbHBka0LuxmytZJUhY3nf25GH 2tWAcJjKgtpX/eLqAorJcxUTw6ZHUSiRyzeSB5YJnKgIx5D6J7T3kek/yqtZbptu +Xm82jkIfhCzo+ELwTZAK0/I9ak7dSCpk7trfzzxthDMhCuLTzXUBoTqkdIA2+FR JXeF2c73R+KXAXqyORHqwjQCVmYWuOk= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:24 2025 by rpki-client