$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ead6bb10-2c6e-3ae4-901b-c46ff0d444ac.roa File: ead6bb10-2c6e-3ae4-901b-c46ff0d444ac.roa (raw, json) Hash identifier: j7opUAv7g0BJQe7sKyaFtRKqE2G4lzlJLwXJp8eu0rA= Subject key identifier: 3C:46:AE:3D:74:DB:8F:99:13:AC:CD:CC:8C:ED:E5:45:58:EC:55:D1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC76CD48E3BC5C49DB16600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ead6bb10-2c6e-3ae4-901b-c46ff0d444ac.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 16625 IP address blocks: 23.220.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:6c:d4:8e:3b:c5:c4:9d:b1:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=eba959c4-e5fc-4cae-bff4-f27ee42ccb34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ae:2c:bc:a1:d5:a9:71:b0:fd:31:42:15:d2: 3f:31:cf:8d:2d:a8:bb:39:6b:b0:2e:69:a5:b5:94: bd:27:ea:6e:e6:84:ba:ef:55:51:63:e5:23:3d:75: b6:f6:43:fa:bc:12:f8:17:66:f8:f9:13:28:41:a7: c1:59:16:ec:a1:6e:d7:f1:19:95:50:a1:fa:7b:08: ef:34:30:21:89:a6:08:cb:4f:c7:38:55:ee:15:e6: b5:92:fc:54:47:32:b3:f4:57:39:f1:64:95:73:f9: 8a:de:9c:9e:8f:49:99:4a:0c:9b:2f:95:ff:24:3c: 1f:22:e7:f8:a4:5e:20:04:ee:03:41:3d:fd:54:cd: a7:6f:5e:c3:8b:f7:ee:e9:e5:e1:21:0d:a4:f4:b7: 73:4c:07:36:b0:12:a8:d9:f5:31:fc:a8:85:9a:9d: 63:3f:59:7f:2d:66:ba:65:02:5e:b7:59:1d:67:51: b5:94:c6:72:39:5e:8f:c6:be:55:b8:2f:fb:d0:8a: c5:1c:76:da:70:d6:35:03:c0:03:9b:34:f5:fd:d0: 3e:0c:74:a3:74:3a:c6:08:2b:aa:26:52:4d:47:5c: f7:27:99:a1:7d:d2:76:41:6c:40:ce:72:0f:41:bc: d3:d7:be:98:dd:7e:44:de:64:4e:fa:21:68:2b:b4: cb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:46:AE:3D:74:DB:8F:99:13:AC:CD:CC:8C:ED:E5:45:58:EC:55:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ead6bb10-2c6e-3ae4-901b-c46ff0d444ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:56:ff:ec:da:a7:f1:cb:b6:5b:3b:da:2c:8b:16:29:56:0d: b5:c1:37:df:0b:65:d8:85:bb:36:62:c3:fb:80:1c:22:96:17: 27:ee:68:7f:64:87:50:66:07:4b:8f:b7:58:42:3f:b5:18:6c: bf:8c:b7:ad:94:93:4a:b7:47:72:e9:84:78:41:89:66:d5:f7: 1a:5d:05:2c:22:9a:6f:3f:20:44:ab:7d:fd:74:c9:dd:b1:58: 95:0e:08:e2:3c:01:2e:b0:0c:0e:97:60:73:b6:7f:92:77:1b: 09:52:17:fc:80:b5:b8:47:5c:cb:02:40:f7:c6:0c:7d:ed:22: 3c:51:6c:34:75:53:14:9a:ff:24:fa:c5:53:ef:b1:70:99:7b: 52:8b:dd:52:d9:d2:d3:4c:08:6d:64:63:34:cb:26:65:1d:47: 98:eb:71:9f:a1:02:3b:bb:38:27:39:88:eb:cc:5a:8b:99:f2: d3:ad:11:8d:b9:77:5f:c7:ed:7a:90:cc:23:1e:91:ec:99:f2: 82:bd:b4:d3:b9:fd:9b:6d:05:e3:6f:61:73:7f:69:c3:63:e7: aa:8f:d2:00:ef:23:c1:e6:54:96:10:47:e5:03:2c:db:87:3d: e6:b4:42:23:b8:05:75:44:11:de:06:73:fe:25:de:b7:60:8a: 8f:9f:ff:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2zUjjvFxJ2xZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ZWJhOTU5YzQtZTVmYy00Y2FlLWJmZjQtZjI3ZWU0MmNjYjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6q4svKHVqXGw/TFCFdI/Mc+NLai7OWuwLmml tZS9J+pu5oS671VRY+UjPXW29kP6vBL4F2b4+RMoQafBWRbsoW7X8RmVUKH6ewjv NDAhiaYIy0/HOFXuFea1kvxURzKz9Fc58WSVc/mK3pyej0mZSgybL5X/JDwfIuf4 pF4gBO4DQT39VM2nb17Di/fu6eXhIQ2k9LdzTAc2sBKo2fUx/KiFmp1jP1l/LWa6 ZQJet1kdZ1G1lMZyOV6Pxr5VuC/70IrFHHbacNY1A8ADmzT1/dA+DHSjdDrGCCuq JlJNR1z3J5mhfdJ2QWxAznIPQbzT176Y3X5E3mRO+iFoK7TLXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxGrj1024+ZE6zNzIzt5UVY7FXRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWFkNmJiMTAtMmM2ZS0z YWU0LTkwMWItYzQ2ZmYwZDQ0NGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9zgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNW/+zap/HLtls72iyLFilWDbXBN98LZdiFuzZiw/uAHCKWFyfuaH9k h1BmB0uPt1hCP7UYbL+Mt62Uk0q3R3LphHhBiWbV9xpdBSwimm8/IESrff10yd2x WJUOCOI8AS6wDA6XYHO2f5J3GwlSF/yAtbhHXMsCQPfGDH3tIjxRbDR1UxSa/yT6 xVPvsXCZe1KL3VLZ0tNMCG1kYzTLJmUdR5jrcZ+hAju7OCc5iOvMWouZ8tOtEY25 d1/H7XqQzCMekeyZ8oK9tNO5/ZttBeNvYXN/acNj56qP0gDvI8HmVJYQR+UDLNuH Pea0QiO4BXVEEd4Gc/4l3rdgio+f/3Y= -----END CERTIFICATE-----Generated at Mon Oct 20 15:03:40 2025 by rpki-client