$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e072b321-b5de-3db9-9586-f36aa07341e4.roa File: e072b321-b5de-3db9-9586-f36aa07341e4.roa (raw, json) Hash identifier: qj7INWWS3ILmPl8DRHaUB+AwTLknFV+Btw4/cog2Bws= Subject key identifier: 28:D5:80:DC:F2:26:37:F3:C7:1D:43:70:D2:E3:BD:0E:CC:13:2A:07 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC76EA40FE4466CC4787400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e072b321-b5de-3db9-9586-f36aa07341e4.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.221.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:6e:a4:0f:e4:46:6c:c4:78:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=b0825baa-775e-4766-972c-70d43ad06164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ed:66:9d:be:0a:6c:46:e1:31:fc:da:45:dd: 5a:10:14:29:7f:bb:35:f8:ed:27:95:a9:8c:0d:2d: e8:bc:8f:46:6c:44:9b:2d:58:ab:ed:96:51:c0:53: 1a:c0:7e:a9:d4:1e:76:22:30:88:64:f6:bd:ac:95: 1d:57:80:30:5c:41:be:0e:70:0a:8a:a5:c0:2d:f5: e6:1e:77:66:40:1f:9f:21:9d:12:e2:6f:15:5f:5d: d2:24:31:27:0c:74:b0:b5:91:47:27:f1:7c:93:36: 63:aa:f5:8a:48:a4:4f:fe:f1:3b:cb:a2:da:b0:16: 71:f7:c3:1e:6a:08:a9:82:aa:b2:96:11:58:e9:b6: eb:d8:dd:03:6a:37:1f:a2:55:95:67:47:7c:99:66: 5c:39:83:e8:20:e0:6d:6f:21:95:e1:0e:db:8b:9d: ef:2c:db:00:25:f4:51:8c:92:0d:b7:2a:2f:da:a8: d9:af:3f:5b:04:3a:32:47:5f:ab:ec:6b:72:a0:bb: 57:ec:81:a1:c6:f1:54:b2:ff:db:4d:6e:28:b0:b3: b7:6a:12:3d:4f:32:c7:a3:9b:1d:00:18:51:6f:58: 8e:39:fc:f9:50:af:cc:ab:23:e0:ac:6a:c1:8e:1d: e0:02:18:c4:cc:cb:e5:9a:a4:03:ac:38:ee:44:29: 62:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D5:80:DC:F2:26:37:F3:C7:1D:43:70:D2:E3:BD:0E:CC:13:2A:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e072b321-b5de-3db9-9586-f36aa07341e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:a6:b3:30:d2:3c:6e:3a:ec:37:ad:23:0d:ab:4e:57:a5:95: 58:21:53:8c:9a:77:8a:a5:e0:2a:e3:0a:99:e7:10:a0:92:f4: 7b:d5:6b:49:43:34:6b:33:f1:a7:f6:52:ee:d8:9d:c6:aa:2c: aa:34:43:43:ee:54:89:89:e2:ea:42:04:70:d4:c5:0a:31:d6: 62:06:e5:f2:71:47:7d:f4:7f:66:a7:59:a3:ee:98:20:0a:4f: 5c:34:97:bc:59:6c:43:8c:9f:35:4b:4d:c6:05:47:ef:cb:05: 3f:c1:6b:f0:21:e3:5f:72:08:3e:c2:34:18:51:79:a5:4c:7a: 69:e3:19:a2:e5:80:65:55:8d:af:47:5b:4d:5f:4d:4c:e3:dd: fb:c8:2c:5d:4d:56:41:06:1a:23:25:9e:b6:a8:da:da:db:b5: 23:ee:4d:1f:0f:cb:9b:32:f3:44:3d:53:af:a6:d3:97:79:2e: a6:dd:92:65:72:0f:7b:60:a3:d0:99:1f:1f:89:65:87:d7:c1: 5b:9c:2b:a6:52:16:06:cf:f5:d9:d7:2c:44:10:fe:79:34:22: 23:95:ac:7f:6a:55:51:a9:a1:e1:94:65:b0:8d:38:a7:16:6c: 0e:28:2f:a1:bf:e8:73:cd:00:6e:bf:85:42:49:15:c6:08:87: 26:c7:ad:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx26kD+RGbMR4dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk YjA4MjViYWEtNzc1ZS00NzY2LTk3MmMtNzBkNDNhZDA2MTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu1mnb4KbEbhMfzaRd1aEBQpf7s1+O0nlamM DS3ovI9GbESbLVir7ZZRwFMawH6p1B52IjCIZPa9rJUdV4AwXEG+DnAKiqXALfXm HndmQB+fIZ0S4m8VX13SJDEnDHSwtZFHJ/F8kzZjqvWKSKRP/vE7y6LasBZx98Me agipgqqylhFY6bbr2N0DajcfolWVZ0d8mWZcOYPoIOBtbyGV4Q7bi53vLNsAJfRR jJINtyov2qjZrz9bBDoyR1+r7GtyoLtX7IGhxvFUsv/bTW4osLO3ahI9TzLHo5sd ABhRb1iOOfz5UK/MqyPgrGrBjh3gAhjEzMvlmqQDrDjuRClivwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjVgNzyJjfzxx1DcNLjvQ7MEyoHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTA3MmIzMjEtYjVkZS0z ZGI5LTk1ODYtZjM2YWEwNzM0MWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF93RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6mszDSPG467DetIw2rTlellVghU4yad4ql4CrjCpnnEKCS9HvVa0lD NGsz8af2Uu7YncaqLKo0Q0PuVImJ4upCBHDUxQox1mIG5fJxR330f2anWaPumCAK T1w0l7xZbEOMnzVLTcYFR+/LBT/Ba/Ah419yCD7CNBhReaVMemnjGaLlgGVVja9H W01fTUzj3fvILF1NVkEGGiMlnrao2trbtSPuTR8Py5sy80Q9U6+m05d5LqbdkmVy D3tgo9CZHx+JZYfXwVucK6ZSFgbP9dnXLEQQ/nk0IiOVrH9qVVGpoeGUZbCNOKcW bA4oL6G/6HPNAG6/hUJJFcYIhybHrXU= -----END CERTIFICATE-----Generated at Mon Oct 20 02:32:33 2025 by rpki-client