$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e90f9101-cc21-3bae-aad5-7a6e46f27b13.roa File: e90f9101-cc21-3bae-aad5-7a6e46f27b13.roa (raw, json) Hash identifier: gEEoL2l4wuIIxYJ/4qSkrYIl9E2U1m4D9eeHMNXLYXw= Subject key identifier: 2F:22:E3:F4:EE:DB:DB:65:BF:D7:96:A4:56:1A:8F:3C:8E:6A:20:B9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC768A8110CCA9276712400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e90f9101-cc21-3bae-aad5-7a6e46f27b13.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.223.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:68:a8:11:0c:ca:92:76:71:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=cfbc9e7d-7122-4b13-b57b-ee80fff3c925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:3e:2d:57:3a:a9:76:eb:ec:5d:19:f4:84:18: ed:ec:a8:ec:f1:83:8d:41:54:70:73:47:da:23:32: 86:27:b4:07:f0:e7:78:21:94:b6:ed:a1:fc:ee:7e: ac:ba:95:a1:d1:e1:b6:9f:75:bd:4b:f4:a7:7b:3a: 96:db:e4:87:49:8f:7e:bc:65:64:b2:e3:97:d1:1d: ef:84:bd:6b:e1:87:26:22:cd:9c:a1:ae:4c:ef:81: 58:21:a4:26:64:37:9d:4d:4a:2a:c9:9e:e2:49:98: 9a:00:8a:8a:64:b3:f1:d4:2c:be:56:99:77:32:b4: a9:03:13:92:fa:53:20:90:1e:d2:71:79:0e:ce:a1: e7:fe:32:08:ea:e9:53:cf:dd:4b:57:5b:ea:6e:91: b4:06:aa:ec:e8:7f:6b:77:77:17:20:d6:11:44:6a: 74:33:da:a5:aa:d4:93:3c:6b:42:59:d8:39:5c:67: 32:d6:d8:8e:0f:d2:19:60:a0:79:af:6f:66:e3:b5: 77:d0:fd:0b:ce:44:eb:fb:d7:a9:29:df:98:21:71: 80:95:ac:c2:d5:1d:d2:2d:ae:fc:c6:ea:df:90:8b: b4:aa:06:bd:04:cc:86:1d:93:97:3d:80:60:0f:c5: be:ae:03:0a:cb:45:3d:f3:b5:32:f4:91:da:3f:1c: 3b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:22:E3:F4:EE:DB:DB:65:BF:D7:96:A4:56:1A:8F:3C:8E:6A:20:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e90f9101-cc21-3bae-aad5-7a6e46f27b13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:38:94:88:75:ae:18:12:eb:e5:6d:6e:85:8e:2f:d0:9e:c5: c9:b6:8e:38:39:1f:d4:b5:ca:a8:6a:f7:42:dd:ba:b0:96:1c: 54:d5:8b:30:59:2f:f1:37:3a:6c:5c:14:6a:28:2c:7f:68:73: 20:1b:c7:0f:c3:48:5f:13:d1:50:ee:d4:5b:49:9c:84:9d:1c: c9:be:86:85:5d:a1:54:1c:b8:a0:84:e0:86:d8:dc:ec:15:79: e6:f7:cf:25:49:23:f3:82:d8:f9:55:17:42:8e:4d:6f:72:09: 21:ad:7d:27:99:e4:c7:d5:6c:30:c7:a7:7b:a1:7e:7d:e6:13: f4:cc:92:25:90:28:d8:33:b0:ec:82:08:d3:29:ec:95:ce:5e: 47:c1:02:c0:ac:bf:58:a8:56:07:11:1e:27:49:04:af:7f:3e: f9:a1:b7:db:16:f7:e0:1e:d7:07:33:76:8e:a8:3b:87:b2:2a: 61:7c:bf:56:65:a8:87:fe:a3:72:f6:c9:37:9b:ca:aa:3d:94: 3e:26:c0:5f:f0:91:c5:00:f8:a0:9a:6a:ba:bc:c7:f1:18:13: 1d:05:4b:90:d7:ce:2f:b1:1b:f5:30:0c:68:a5:f5:d6:5c:ff: 91:0c:c6:4d:87:b6:66:eb:d2:97:4f:2e:8c:36:7b:13:17:f1: 4e:55:18:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2ioEQzKknZxJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk Y2ZiYzllN2QtNzEyMi00YjEzLWI1N2ItZWU4MGZmZjNjOTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5j4tVzqpduvsXRn0hBjt7Kjs8YONQVRwc0fa IzKGJ7QH8Od4IZS27aH87n6supWh0eG2n3W9S/SnezqW2+SHSY9+vGVksuOX0R3v hL1r4YcmIs2coa5M74FYIaQmZDedTUoqyZ7iSZiaAIqKZLPx1Cy+Vpl3MrSpAxOS +lMgkB7ScXkOzqHn/jII6ulTz91LV1vqbpG0Bqrs6H9rd3cXINYRRGp0M9qlqtST PGtCWdg5XGcy1tiOD9IZYKB5r29m47V30P0LzkTr+9epKd+YIXGAlazC1R3SLa78 xurfkIu0qga9BMyGHZOXPYBgD8W+rgMKy0U987Uy9JHaPxw7xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8i4/Tu29tlv9eWpFYajzyOaiC5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTkwZjkxMDEtY2MyMS0z YmFlLWFhZDUtN2E2ZTQ2ZjI3YjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHg4lIh1rhgS6+VtboWOL9Cexcm2jjg5H9S1yqhq90LdurCWHFTVizBZ L/E3OmxcFGooLH9ocyAbxw/DSF8T0VDu1FtJnISdHMm+hoVdoVQcuKCE4IbY3OwV eeb3zyVJI/OC2PlVF0KOTW9yCSGtfSeZ5MfVbDDHp3uhfn3mE/TMkiWQKNgzsOyC CNMp7JXOXkfBAsCsv1ioVgcRHidJBK9/Pvmht9sW9+Ae1wczdo6oO4eyKmF8v1Zl qIf+o3L2yTebyqo9lD4mwF/wkcUA+KCaarq8x/EYEx0FS5DXzi+xG/UwDGil9dZc /5EMxk2Htmbr0pdPLow2exMX8U5VGMg= -----END CERTIFICATE-----Generated at Mon Oct 20 02:30:30 2025 by rpki-client