$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f56f5d5e-e2e0-338d-ae47-a9db8d221d81.roa File: f56f5d5e-e2e0-338d-ae47-a9db8d221d81.roa (raw, json) Hash identifier: lm9qwa2ztppiY/xBuBKHbPIfAjPbYKttTPuLdP+YHog= Subject key identifier: 7D:43:F4:F2:6F:3A:B4:DB:89:8D:3D:05:9B:AC:F4:90:B5:E9:40:DE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC762A4832402B4FDC87200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f56f5d5e-e2e0-338d-ae47-a9db8d221d81.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 16625 IP address blocks: 23.220.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:62:a4:83:24:02:b4:fd:c8:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=6b2732bf-d25f-4e33-b22c-37b2763a2502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:aa:92:74:77:c6:35:ea:6f:8d:38:53:f7:42: 37:ea:d9:62:82:39:1f:77:ab:2b:f5:26:f3:81:57: 9f:35:ea:3d:ae:8d:e7:b1:38:b4:9a:38:71:2f:6c: 8e:4d:24:36:f7:a8:d6:fe:59:54:e7:eb:ba:a5:26: f7:00:d0:d1:6d:ef:29:f4:2d:3b:ac:97:69:98:9d: 37:c1:3b:3b:45:84:7a:79:b0:c7:c6:2a:7c:0c:45: 59:74:d0:36:9d:f4:a1:29:58:44:fd:58:81:02:d9: 7b:d9:11:9a:64:6e:46:7f:fe:83:a5:c3:ff:44:7c: 50:0f:24:89:bf:3e:43:49:f6:f1:e3:43:be:e0:40: bd:39:e3:d9:2a:d9:4a:f0:52:26:29:51:09:ec:a8: 54:13:ce:7c:78:35:74:20:36:35:76:41:5f:a0:e5: 0a:47:90:56:98:c7:41:ea:8e:74:97:f7:6a:c9:21: 01:9e:2a:4b:39:3c:df:b3:6f:4d:07:35:ec:ae:5e: af:c0:2b:5c:33:54:c8:7a:76:41:4c:24:0e:0c:7f: de:e3:c6:fd:17:9c:f4:22:8b:94:a0:21:1b:f0:df: db:64:73:04:57:2f:07:fa:e1:e0:e2:fa:81:91:30: 6f:7a:10:3c:28:ac:44:8b:3b:63:f8:eb:50:dc:2e: b6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:43:F4:F2:6F:3A:B4:DB:89:8D:3D:05:9B:AC:F4:90:B5:E9:40:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f56f5d5e-e2e0-338d-ae47-a9db8d221d81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:40:cf:08:8b:39:56:43:f0:68:c8:bb:ca:5d:15:34:9e:86: 6d:9d:c5:82:43:b9:38:5e:2e:3f:84:be:b0:8e:9b:c7:39:b4: 5a:bd:52:21:51:c5:5a:0b:49:83:3b:b1:0b:a0:3a:0b:45:c6: 94:a3:53:10:5c:11:00:6d:df:43:77:bf:5e:bb:fa:87:48:34: c8:0d:bf:71:a3:a7:5b:06:65:f6:6a:cf:c9:3a:7b:09:55:d1: eb:3c:20:43:12:27:7f:61:1f:1c:09:c1:48:33:ce:60:bf:56: 82:2e:64:f8:75:11:4c:13:69:fc:f2:7a:06:14:ae:36:d6:8c: 9c:90:55:ac:47:fc:23:81:56:fb:43:d5:06:b8:36:cb:66:bc: bb:5b:17:84:58:08:70:73:86:4e:62:ab:fa:80:4e:95:06:5b: 49:6a:15:07:c0:cc:12:17:d8:08:bf:f5:df:d8:c8:6b:af:5e: ee:15:00:b1:18:80:2c:15:b2:e9:b6:5e:e4:06:00:aa:b9:28: 8d:a5:fd:bb:28:40:27:b1:60:60:f5:e0:a5:b5:8f:0e:34:5f: 09:58:c9:23:c7:43:20:39:e9:58:27:e1:77:87:b3:8c:3f:b3: ab:8a:9b:4a:a9:cf:68:69:17:99:46:a6:cf:1f:47:8a:1a:f5: 34:a2:24:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2KkgyQCtP3IcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NmIyNzMyYmYtZDI1Zi00ZTMzLWIyMmMtMzdiMjc2M2EyNTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKqSdHfGNepvjThT90I36tligjkfd6sr9Sbz gVefNeo9ro3nsTi0mjhxL2yOTSQ296jW/llU5+u6pSb3ANDRbe8p9C07rJdpmJ03 wTs7RYR6ebDHxip8DEVZdNA2nfShKVhE/ViBAtl72RGaZG5Gf/6DpcP/RHxQDySJ vz5DSfbx40O+4EC9OePZKtlK8FImKVEJ7KhUE858eDV0IDY1dkFfoOUKR5BWmMdB 6o50l/dqySEBnipLOTzfs29NBzXsrl6vwCtcM1TIenZBTCQODH/e48b9F5z0IouU oCEb8N/bZHMEVy8H+uHg4vqBkTBvehA8KKxEiztj+OtQ3C62JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1D9PJvOrTbiY09BZus9JC16UDeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjU2ZjVkNWUtZTJlMC0z MzhkLWFlNDctYTlkYjhkMjIxZDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9yEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJAzwiLOVZD8GjIu8pdFTSehm2dxYJDuTheLj+EvrCOm8c5tFq9UiFR xVoLSYM7sQugOgtFxpSjUxBcEQBt30N3v167+odINMgNv3Gjp1sGZfZqz8k6ewlV 0es8IEMSJ39hHxwJwUgzzmC/VoIuZPh1EUwTafzyegYUrjbWjJyQVaxH/COBVvtD 1Qa4NstmvLtbF4RYCHBzhk5iq/qATpUGW0lqFQfAzBIX2Ai/9d/YyGuvXu4VALEY gCwVsum2XuQGAKq5KI2l/bsoQCexYGD14KW1jw40XwlYySPHQyA56Vgn4XeHs4w/ s6uKm0qpz2hpF5lGps8fR4oa9TSiJFU= -----END CERTIFICATE-----Generated at Mon Oct 20 17:36:57 2025 by rpki-client