$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d007c34d-200e-36cf-82e4-f2b38f2075de.roa File: d007c34d-200e-36cf-82e4-f2b38f2075de.roa (raw, json) Hash identifier: Z8vDfVsTm/+48XCm04bERubzC18Rrtkx5kCzIsZBEQw= Subject key identifier: 61:F5:76:D6:9D:D2:25:B2:0A:09:4C:1C:3B:0F:89:BE:CF:00:88:38 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B68FCA657871D84867701F980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d007c34d-200e-36cf-82e4-f2b38f2075de.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.219.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:a6:57:87:1d:84:86:77:01:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=405e92a3-5ba0-416e-9a41-1585bdeec501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bc:c8:dd:bd:2b:d2:82:d0:ed:ac:20:fd:03: 6d:d6:29:c0:0a:1e:98:dd:22:05:af:13:4a:8e:0c: b3:d7:d0:20:63:e4:6e:88:46:8d:74:6f:cf:4b:53: d1:71:71:bf:00:50:56:89:ea:e5:80:63:70:9d:b2: e5:ed:06:ab:e8:44:0b:01:02:c4:19:cc:12:f3:06: 02:b2:87:0f:48:91:93:1f:f4:3a:cc:42:b3:dd:91: c2:51:d9:7f:e0:c1:be:04:80:d9:43:80:95:eb:59: e5:42:bf:c2:5f:8e:e1:ff:ec:3f:91:c1:e5:f6:b6: 6c:5e:0a:97:77:ba:f4:e1:2c:c3:30:5a:a1:a8:2b: 66:59:dc:4c:dc:c6:ad:48:02:53:f6:c9:b7:22:8c: d7:98:8d:da:0c:61:ce:e4:48:e4:a8:f3:6c:86:2b: 99:31:6a:f0:84:26:16:5d:6e:9f:69:83:03:4e:b1: 4b:3d:8e:2f:08:5d:89:1e:63:53:9f:8a:1b:dd:47: 7f:e4:b3:7c:05:20:01:a6:6e:bc:09:82:d2:f3:61: b4:59:54:c0:37:f0:d1:62:eb:20:93:b4:1e:6e:c7: 7f:a4:9b:7c:c1:47:13:a2:d6:23:11:65:e5:c5:d2: 64:b2:cd:6f:ca:e6:c7:87:91:49:6c:80:b1:52:69: a6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F5:76:D6:9D:D2:25:B2:0A:09:4C:1C:3B:0F:89:BE:CF:00:88:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d007c34d-200e-36cf-82e4-f2b38f2075de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:e0:a6:2a:64:30:53:8a:6d:74:e1:af:d6:98:29:c1:7f:cd: a9:3c:c3:13:a5:dd:d5:67:85:28:27:d4:a2:da:05:a4:e7:19: 81:c5:e4:c7:26:55:7e:89:fb:4e:19:95:64:98:ff:24:27:d6: 70:29:b7:f8:3d:72:4a:aa:59:b2:f2:6f:61:e9:25:f4:4e:f9: b1:02:70:0b:22:95:2e:96:38:fd:9a:11:0c:d4:ee:0a:1a:db: 8b:3f:04:75:f7:4a:3e:06:f2:fa:d5:80:f5:9a:af:86:a2:e5: 40:36:84:2f:ff:ab:23:0a:86:02:05:e3:3b:9e:d3:a0:02:dc: 59:72:fe:44:1c:d9:57:53:1b:41:f1:db:41:23:ae:b3:f5:34: 00:5f:ec:c9:5c:56:95:68:9d:71:7c:38:ee:29:d9:bd:97:bb: 98:da:46:24:cd:4d:a5:da:fd:e1:dc:19:68:f3:b5:02:a4:43: cd:10:ac:e2:ca:63:39:64:98:48:63:04:33:ab:2d:81:b2:78: 58:87:3d:73:3b:65:5c:8a:a1:21:ac:44:0f:37:22:e0:21:57: e4:81:69:c7:f5:2e:fa:1e:18:1a:2b:8f:3f:18:2f:d4:f2:84: 2d:72:24:73:fa:6e:48:15:2e:42:db:bd:38:a3:15:05:b7:f5: ef:df:bb:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/KZXhx2EhncB+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk NDA1ZTkyYTMtNWJhMC00MTZlLTlhNDEtMTU4NWJkZWVjNTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbzI3b0r0oLQ7awg/QNt1inACh6Y3SIFrxNK jgyz19AgY+RuiEaNdG/PS1PRcXG/AFBWierlgGNwnbLl7Qar6EQLAQLEGcwS8wYC socPSJGTH/Q6zEKz3ZHCUdl/4MG+BIDZQ4CV61nlQr/CX47h/+w/kcHl9rZsXgqX d7r04SzDMFqhqCtmWdxM3MatSAJT9sm3IozXmI3aDGHO5EjkqPNshiuZMWrwhCYW XW6faYMDTrFLPY4vCF2JHmNTn4ob3Ud/5LN8BSABpm68CYLS82G0WVTAN/DRYusg k7Qebsd/pJt8wUcTotYjEWXlxdJkss1vyubHh5FJbICxUmmm4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGH1dtad0iWyCglMHDsPib7PAIg4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDAwN2MzNGQtMjAwZS0z NmNmLTgyZTQtZjJiMzhmMjA3NWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9sBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTgpipkMFOKbXThr9aYKcF/zak8wxOl3dVnhSgn1KLaBaTnGYHF5Mcm VX6J+04ZlWSY/yQn1nApt/g9ckqqWbLyb2HpJfRO+bECcAsilS6WOP2aEQzU7goa 24s/BHX3Sj4G8vrVgPWar4ai5UA2hC//qyMKhgIF4zue06AC3Fly/kQc2VdTG0Hx 20EjrrP1NABf7MlcVpVonXF8OO4p2b2Xu5jaRiTNTaXa/eHcGWjztQKkQ80QrOLK YzlkmEhjBDOrLYGyeFiHPXM7ZVyKoSGsRA83IuAhV+SBacf1LvoeGBorjz8YL9Ty hC1yJHP6bkgVLkLbvTijFQW39e/fu4U= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:04 2025 by rpki-client