$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f00faaec-a0b8-3eb0-9ab3-813483f02a54.roa File: f00faaec-a0b8-3eb0-9ab3-813483f02a54.roa (raw, json) Hash identifier: hgdQfXDisS2qqgyd482+kSZGB5sO7nnMj4Hphc6S/7E= Subject key identifier: AD:5D:88:E3:B0:71:23:E7:35:C1:97:7B:78:56:8A:8C:06:81:0F:D4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC76BB994D3F4C0F9131A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f00faaec-a0b8-3eb0-9ab3-813483f02a54.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 16625 IP address blocks: 23.220.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:6b:b9:94:d3:f4:c0:f9:13:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=ec3c5bad-58e5-47e0-994c-d4a92e8ab139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3b:0a:c8:cc:2c:c5:06:76:f8:ed:0e:2a:5a: 9c:b0:cd:1c:f9:a8:c4:49:c6:bd:f1:fc:28:24:6c: 64:7c:00:01:39:d8:80:64:00:a3:41:c7:8a:f1:de: c9:43:b7:8d:4d:e7:17:35:57:90:68:e9:5d:63:b2: a8:73:65:55:bd:58:08:86:60:de:f6:de:84:07:14: 03:6a:27:af:9e:f6:ae:a5:56:8a:67:18:25:2b:23: b4:c1:7d:88:5e:cf:b4:fa:a2:7d:2c:67:6c:02:57: 68:ac:da:0b:9e:58:0c:20:db:21:69:90:32:1d:1b: 45:1c:39:57:08:2f:ae:31:0b:7d:08:06:70:bd:41: f2:07:ec:31:f1:9a:9f:e8:fc:d4:f2:1b:e9:9f:fb: 57:a1:3f:93:ff:e1:0a:24:aa:0b:b7:5a:23:bd:97: 6e:9d:a2:e2:d2:49:51:96:de:59:cf:89:55:fb:fe: 3b:af:bf:45:18:b3:f4:8e:58:97:50:cc:b6:83:c9: 3f:76:5f:7c:73:e5:8c:21:ad:63:48:ca:d6:2d:3b: cf:f2:03:c7:6f:8f:e0:d7:5a:d4:98:1a:b8:2b:4c: 57:cc:49:c5:0e:3f:44:ab:8a:03:89:ac:aa:a8:d3: af:34:19:8f:1f:8d:84:b9:0f:e3:fc:21:f9:01:56: 13:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5D:88:E3:B0:71:23:E7:35:C1:97:7B:78:56:8A:8C:06:81:0F:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f00faaec-a0b8-3eb0-9ab3-813483f02a54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:56:43:c8:e0:23:69:b5:8d:1e:cd:f4:4e:31:6d:70:b2:85: cc:56:62:c3:8d:7b:31:c9:2f:51:fb:e2:46:52:60:2d:27:f8: 47:47:eb:7e:67:51:df:6c:3b:67:58:fe:6e:a8:4b:6d:94:7f: 38:f5:30:c0:a0:37:23:a7:59:87:da:ae:c5:3c:86:5b:5e:3a: 44:2c:15:a2:94:8e:fd:22:f7:51:8d:d4:db:05:02:d7:ac:6b: f8:02:51:ee:6d:b5:be:ed:ae:3e:e8:0c:d0:fe:96:de:84:86: a2:95:c4:0a:54:83:89:16:ac:78:7c:e0:83:6b:c5:13:7e:a3: 28:a9:56:e4:8e:92:7e:28:9b:75:39:d0:9e:65:8f:ff:72:79: ca:99:1b:c9:a1:4f:d0:89:d9:db:b1:71:0a:fe:ed:be:74:81: 96:d7:f4:ff:26:4f:08:1f:c2:ba:3c:ff:f5:ba:77:8f:49:dd: 2f:d0:37:8e:a3:11:98:4b:33:10:17:b3:84:cb:d4:6a:a6:15: 90:f1:5b:2b:a5:86:c1:ef:6c:ec:96:9a:77:84:94:46:46:f2: 31:a5:31:60:de:20:3b:00:4a:01:c0:16:4c:d6:0e:52:4b:d9: 25:8c:a4:2a:3a:96:26:5e:d7:99:9a:b3:9b:e4:b0:9c:05:9d: 79:2b:e0:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2u5lNP0wPkTGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ZWMzYzViYWQtNThlNS00N2UwLTk5NGMtZDRhOTJlOGFiMTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjsKyMwsxQZ2+O0OKlqcsM0c+ajESca98fwo JGxkfAABOdiAZACjQceK8d7JQ7eNTecXNVeQaOldY7Koc2VVvVgIhmDe9t6EBxQD aievnvaupVaKZxglKyO0wX2IXs+0+qJ9LGdsAldorNoLnlgMINshaZAyHRtFHDlX CC+uMQt9CAZwvUHyB+wx8Zqf6PzU8hvpn/tXoT+T/+EKJKoLt1ojvZdunaLi0klR lt5Zz4lV+/47r79FGLP0jliXUMy2g8k/dl98c+WMIa1jSMrWLTvP8gPHb4/g11rU mBq4K0xXzEnFDj9Eq4oDiayqqNOvNBmPH42EuQ/j/CH5AVYTrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1diOOwcSPnNcGXe3hWiowGgQ/UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjAwZmFhZWMtYTBiOC0z ZWIwLTlhYjMtODEzNDgzZjAyYTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9x8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtWQ8jgI2m1jR7N9E4xbXCyhcxWYsONezHJL1H74kZSYC0n+EdH635n Ud9sO2dY/m6oS22Ufzj1MMCgNyOnWYfarsU8hlteOkQsFaKUjv0i91GN1NsFAtes a/gCUe5ttb7trj7oDND+lt6EhqKVxApUg4kWrHh84INrxRN+oyipVuSOkn4om3U5 0J5lj/9yecqZG8mhT9CJ2duxcQr+7b50gZbX9P8mTwgfwro8//W6d49J3S/QN46j EZhLMxAXs4TL1GqmFZDxWyulhsHvbOyWmneElEZG8jGlMWDeIDsASgHAFkzWDlJL 2SWMpCo6liZe15mas5vksJwFnXkr4Jw= -----END CERTIFICATE-----Generated at Mon Oct 20 04:56:27 2025 by rpki-client