$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8b69b54-cd7a-3241-8a35-2b0ccdf93e57.roa File: f8b69b54-cd7a-3241-8a35-2b0ccdf93e57.roa (raw, json) Hash identifier: 1lb3tslOnJZFiGLwpUi12YMwvACbwKQ9Ma35looVZwY= Subject key identifier: 77:26:68:E9:FB:7A:82:75:60:E3:9A:B8:5A:4B:C4:44:41:E7:E4:E3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B3556F9AA78794F71E6071260 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8b69b54-cd7a-3241-8a35-2b0ccdf93e57.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.221.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:f9:aa:78:79:4f:71:e6:07:12:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=ea456e54-fe17-435e-84e1-4c0e9544b683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2c:7d:fa:78:a4:b4:04:a3:64:ca:1d:8b:30: 10:a0:e8:ee:8a:a3:ad:97:4e:b6:8f:ff:e7:07:52: 8b:05:d4:7f:03:da:44:a2:30:b9:02:84:f0:ed:96: 6d:ae:9d:56:2f:3c:2c:f2:4f:44:4b:f0:e6:92:7d: d2:b7:98:1a:bf:0a:28:60:83:8e:aa:b7:0b:c3:7d: ac:7d:01:80:56:da:88:98:fb:23:27:44:1a:dd:5a: ff:e0:a9:ec:0d:21:26:80:39:a9:d5:47:47:a2:aa: 4f:55:16:10:65:9d:2e:84:89:a4:97:1e:e9:ae:84: bb:fd:5c:3e:08:40:d2:07:97:23:7e:d7:8f:f6:4b: 6c:6e:d6:32:ed:39:cc:0c:b6:fa:f6:7e:a8:c0:ac: f8:68:45:63:67:9b:c8:0c:71:a3:68:88:13:df:3d: d2:f2:67:9a:e7:2a:60:9f:be:59:1c:12:55:95:0a: 08:d2:65:55:d4:3d:0a:2d:1e:1d:dd:80:18:d2:b1: e4:68:82:7a:b5:57:33:1b:f9:06:b9:fa:c1:ff:08: f6:c4:5d:8d:ea:ec:1a:05:a1:f8:e2:fc:f7:d9:e9: a8:76:45:d7:7e:25:29:61:43:13:cc:35:fc:49:2f: e4:5a:73:74:c5:07:53:1d:6d:5a:da:72:25:14:00: 95:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:26:68:E9:FB:7A:82:75:60:E3:9A:B8:5A:4B:C4:44:41:E7:E4:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8b69b54-cd7a-3241-8a35-2b0ccdf93e57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:43:16:44:6c:84:da:9d:35:80:2e:99:0f:22:57:59:af:51: 1f:84:28:f5:7f:30:0b:53:72:59:24:78:c2:68:1a:ef:16:18: 1a:fa:46:36:90:af:9b:f2:5c:7a:db:83:f0:76:82:8b:9d:db: 6a:83:07:1b:a7:79:66:80:16:22:ee:87:12:1c:44:22:97:e4: c1:6b:8a:16:ba:20:bc:7e:41:b9:1e:a8:93:b1:3a:63:6f:78: 20:0d:9a:ac:ed:f3:1b:0f:c3:3c:f3:5c:a4:40:d9:2a:04:a2: 51:f3:5d:51:c6:b1:36:95:80:a3:a6:06:38:4f:f0:e1:67:ae: 26:8d:69:ef:0b:a5:bb:c9:f2:26:84:f9:46:44:b5:c7:cb:5a: 70:db:dd:a5:47:25:b7:45:4e:fc:ea:df:a4:5a:d3:d0:6f:74: 46:92:23:90:44:1f:eb:6e:8e:06:d5:6a:70:56:9d:fb:6d:90: 1d:63:f6:bd:9e:7c:d1:0f:1e:1e:b8:a4:75:02:7b:5a:0d:47: ca:a8:3f:1e:9a:e2:d5:b3:c7:81:d9:92:5a:e4:c1:e8:8e:ee: ef:68:3a:53:b7:63:cc:1e:62:11:86:d1:4f:00:be:1c:4c:16: 2c:1d:e2:10:50:f9:36:52:25:5b:1e:fe:d9:32:78:ed:76:bc: b7:d7:b1:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VvmqeHlPceYHEmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk ZWE0NTZlNTQtZmUxNy00MzVlLTg0ZTEtNGMwZTk1NDRiNjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyx9+niktASjZModizAQoOjuiqOtl062j//n B1KLBdR/A9pEojC5AoTw7ZZtrp1WLzws8k9ES/Dmkn3St5gavwooYIOOqrcLw32s fQGAVtqImPsjJ0Qa3Vr/4KnsDSEmgDmp1UdHoqpPVRYQZZ0uhImklx7proS7/Vw+ CEDSB5cjfteP9ktsbtYy7TnMDLb69n6owKz4aEVjZ5vIDHGjaIgT3z3S8mea5ypg n75ZHBJVlQoI0mVV1D0KLR4d3YAY0rHkaIJ6tVczG/kGufrB/wj2xF2N6uwaBaH4 4vz32emodkXXfiUpYUMTzDX8SS/kWnN0xQdTHW1a2nIlFACViwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcmaOn7eoJ1YOOauFpLxERB5+TjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjhiNjliNTQtY2Q3YS0z MjQxLThhMzUtMmIwY2NkZjkzZTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF91DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9DFkRshNqdNYAumQ8iV1mvUR+EKPV/MAtTclkkeMJoGu8WGBr6RjaQ r5vyXHrbg/B2goud22qDBxuneWaAFiLuhxIcRCKX5MFriha6ILx+QbkeqJOxOmNv eCANmqzt8xsPwzzzXKRA2SoEolHzXVHGsTaVgKOmBjhP8OFnriaNae8LpbvJ8iaE +UZEtcfLWnDb3aVHJbdFTvzq36Ra09BvdEaSI5BEH+tujgbVanBWnfttkB1j9r2e fNEPHh64pHUCe1oNR8qoPx6a4tWzx4HZklrkweiO7u9oOlO3Y8weYhGG0U8AvhxM Fiwd4hBQ+TZSJVse/tkyeO12vLfXsZA= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:00 2025 by rpki-client