$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e820cb29-b800-3927-87e6-08a4fe7db82e.roa File: e820cb29-b800-3927-87e6-08a4fe7db82e.roa (raw, json) Hash identifier: SbsKdeXkwmf70Hr9OFV1WJqs562LL36HujFuYfkqJTw= Subject key identifier: B2:0E:9B:42:13:23:F8:BE:8B:19:6B:29:53:28:1A:9E:C5:A2:C6:D2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B68FCA00D7AC2768524092300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e820cb29-b800-3927-87e6-08a4fe7db82e.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.218.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:a0:0d:7a:c2:76:85:24:09:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=dae06dff-1efd-4a42-a70d-e92d021a25ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:54:5e:09:46:35:58:29:2f:1f:30:02:25:ec: af:5d:08:37:36:37:96:f7:70:ba:1a:f5:80:4e:12: 10:dc:7f:b9:d0:cf:49:24:3e:52:a4:e0:61:a7:d0: ba:67:bb:4e:a2:bf:b3:9c:da:7b:f6:4b:78:eb:0c: d1:db:28:04:af:8c:71:46:b5:77:5a:6d:e1:dc:58: 83:ac:f9:12:25:55:72:a1:af:7d:48:a0:c6:f1:e6: e5:f0:bb:04:9e:76:2e:e7:df:44:77:1b:3a:2c:d2: da:3d:e8:12:47:8b:f1:97:a8:eb:86:eb:8f:45:dd: 24:ce:33:c8:99:ff:b9:bc:53:13:00:00:37:a3:e3: 67:9a:41:d2:d9:37:69:7a:0c:ba:ae:06:bd:ff:16: 2a:d5:18:11:a8:64:79:62:dc:50:08:13:5a:88:c5: 6c:54:fb:41:09:ee:84:7b:82:dc:92:7a:c7:fe:03: 0e:85:88:10:7f:73:c6:e9:02:2f:8c:72:7d:83:3e: 00:0f:b1:4d:1c:d4:95:52:1a:e4:88:20:73:79:d3: 75:bb:45:16:f9:fe:b2:dc:c0:db:24:1f:ab:16:fd: 28:f3:b1:53:bd:c3:ce:54:d1:62:99:df:8e:53:23: 19:49:6f:89:62:8d:5b:95:ed:9e:fe:c5:b7:6b:38: 32:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0E:9B:42:13:23:F8:BE:8B:19:6B:29:53:28:1A:9E:C5:A2:C6:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e820cb29-b800-3927-87e6-08a4fe7db82e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:32:89:c2:cb:9e:cf:db:0e:f0:df:3c:ad:2c:30:30:6a:b7: 4b:dd:ad:b8:d5:9c:c2:a8:36:de:27:b9:0f:5d:15:a8:19:4f: 23:6b:83:5d:96:7a:14:5b:11:c5:5e:64:7e:aa:a3:07:ad:c6: df:55:72:fe:cc:4a:8e:37:41:23:a4:5b:c3:8f:4f:2e:f4:2e: 9f:26:53:a7:54:e4:da:64:1c:f9:91:e9:5b:17:58:0a:2d:ec: ef:a7:87:ed:9f:d7:28:71:e5:a7:74:4a:92:2b:1b:d3:f3:13: ed:ae:c5:2f:d6:7a:11:4a:94:a4:66:f2:c3:22:c5:4c:78:5c: 96:3a:61:a4:ab:88:31:60:bd:6e:46:3a:21:d6:2c:aa:cd:73: e0:06:a0:9c:91:61:33:c6:ae:be:9c:53:3d:09:7b:1c:ca:02: b7:a2:a1:50:dd:83:03:ac:01:4a:15:b4:ab:c6:47:69:a4:65: b4:3c:05:23:de:30:86:db:31:54:3a:bb:4e:70:91:2b:c9:62: d6:9d:de:c4:fe:08:e6:47:d2:1f:db:db:f4:62:e1:55:d1:2b: 28:34:ea:69:0d:69:14:7d:ee:97:26:e4:33:87:71:b1:db:2b: ae:10:91:51:ec:17:c7:e4:8f:29:6e:39:a1:ef:76:81:6e:38: 2f:4c:13:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/KANesJ2hSQJIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk ZGFlMDZkZmYtMWVmZC00YTQyLWE3MGQtZTkyZDAyMWEyNWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllReCUY1WCkvHzACJeyvXQg3NjeW93C6GvWA ThIQ3H+50M9JJD5SpOBhp9C6Z7tOor+znNp79kt46wzR2ygEr4xxRrV3Wm3h3FiD rPkSJVVyoa99SKDG8ebl8LsEnnYu599Edxs6LNLaPegSR4vxl6jrhuuPRd0kzjPI mf+5vFMTAAA3o+NnmkHS2Tdpegy6rga9/xYq1RgRqGR5YtxQCBNaiMVsVPtBCe6E e4LcknrH/gMOhYgQf3PG6QIvjHJ9gz4AD7FNHNSVUhrkiCBzedN1u0UW+f6y3MDb JB+rFv0o87FTvcPOVNFimd+OUyMZSW+JYo1ble2e/sW3azgyRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIOm0ITI/i+ixlrKVMoGp7FosbSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTgyMGNiMjktYjgwMC0z OTI3LTg3ZTYtMDhhNGZlN2RiODJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9rWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsyicLLns/bDvDfPK0sMDBqt0vdrbjVnMKoNt4nuQ9dFagZTyNrg12W ehRbEcVeZH6qowetxt9Vcv7MSo43QSOkW8OPTy70Lp8mU6dU5NpkHPmR6VsXWAot 7O+nh+2f1yhx5ad0SpIrG9PzE+2uxS/WehFKlKRm8sMixUx4XJY6YaSriDFgvW5G OiHWLKrNc+AGoJyRYTPGrr6cUz0JexzKAreioVDdgwOsAUoVtKvGR2mkZbQ8BSPe MIbbMVQ6u05wkSvJYtad3sT+COZH0h/b2/Ri4VXRKyg06mkNaRR97pcm5DOHcbHb K64QkVHsF8fkjyluOaHvdoFuOC9ME74= -----END CERTIFICATE-----Generated at Mon Oct 20 02:34:27 2025 by rpki-client