$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9620580-3882-3de7-b3b0-d37b7e1cf12a.roa File: f9620580-3882-3de7-b3b0-d37b7e1cf12a.roa (raw, json) Hash identifier: Pk3CvevRXsiyRxKqXcFbvrsWdGgHJI8f7Rfa300m9Zc= Subject key identifier: A3:FE:AC:66:75:15:4A:2D:95:0A:78:C1:E3:07:84:C4:60:E4:D6:BE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD20351701C5EEBDFAD0350 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9620580-3882-3de7-b3b0-d37b7e1cf12a.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.215.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d2:03:51:70:1c:5e:eb:df:ad:03:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=4664e56f-b1f3-46a4-b56e-620b9e802474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1a:33:9d:da:dd:e4:00:3d:de:a6:c6:ff:ea: 30:ca:40:76:23:b9:4e:f7:c8:a3:38:bd:5f:59:f4: ec:a3:17:6d:4f:98:07:05:4c:4c:fd:44:d9:9b:b5: fc:f9:96:04:58:e2:1f:bf:7c:39:98:13:82:ce:2d: bb:55:cd:55:11:4f:f1:76:cc:cc:24:b7:2b:c3:9b: 85:5f:79:eb:83:75:a4:c5:13:c1:46:5f:f3:fc:71: e5:b3:ec:9a:ae:6e:6f:a5:99:87:d2:2a:85:4d:c4: 88:84:6d:c5:ca:b1:b1:d0:4f:a1:5b:1e:ed:2d:59: 37:70:64:9c:3f:92:b2:97:a0:d4:2e:c4:ed:40:b9: aa:4d:05:fe:ec:d9:45:3d:d9:20:94:23:df:fa:4c: 76:71:c1:c6:4c:05:2d:9d:8d:86:d8:f6:72:d5:2c: aa:b7:f6:ac:05:3a:9f:02:38:1f:95:80:c3:de:50: 81:a2:90:b1:7d:95:25:30:8d:2d:1a:fc:b0:8b:76: 73:a8:53:db:24:3e:79:cb:39:65:3e:06:7b:56:1b: 39:81:66:cc:3f:54:e6:59:4d:0d:a9:c0:37:a9:c6: 4f:f1:c6:9a:08:28:c8:4b:0c:f3:9a:f4:da:7f:f2: 26:12:2a:7d:ab:ce:2a:7c:4c:54:cd:46:15:ee:64: 56:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FE:AC:66:75:15:4A:2D:95:0A:78:C1:E3:07:84:C4:60:E4:D6:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9620580-3882-3de7-b3b0-d37b7e1cf12a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:2c:63:f7:47:ca:c4:b3:0b:ba:33:ef:4e:d6:45:d0:f3:d7: d6:2c:7a:cf:1f:a2:e9:d0:4a:95:6d:e4:82:7b:47:9d:c4:b8: e7:90:3a:a1:60:e1:74:a2:9e:5a:c4:12:bb:73:e8:85:68:6c: 3b:5d:a6:92:d1:bb:4a:ba:7d:35:84:87:0c:f0:28:9b:b7:23: 88:fd:0b:b6:ed:74:bb:8e:ae:57:6d:83:e0:c9:a6:29:e0:cb: ec:13:2a:88:7d:1f:3a:e5:59:a9:29:27:8e:68:1c:b5:18:ab: 62:99:70:ad:40:97:c1:f2:29:62:26:1f:f3:dd:64:7c:17:b9: 0e:68:54:66:6c:68:cc:12:bb:bc:38:f0:35:84:a3:7c:f5:f2: 7d:00:f9:b9:b2:fa:23:91:5d:3e:b5:9e:e0:8e:d7:90:31:a6: 50:5b:15:27:4f:d7:ef:16:83:92:6a:46:f6:25:77:db:83:c3: d3:90:7b:af:a9:f8:8c:5b:7c:0d:e0:1d:bc:ad:f4:4a:ee:66: 6a:6b:1c:1e:14:46:df:d2:4f:42:0b:8a:3a:b9:d5:0b:34:50: 4b:0f:38:a4:e2:a9:f1:b6:10:9a:55:36:32:d3:9d:29:c3:7a: d3:7b:de:9a:f4:97:0a:e8:cf:e4:80:9f:d2:7c:b1:8f:77:d2: 1f:5e:db:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0gNRcBxe69+tA1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk NDY2NGU1NmYtYjFmMy00NmE0LWI1NmUtNjIwYjllODAyNDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Rozndrd5AA93qbG/+owykB2I7lO98ijOL1f WfTsoxdtT5gHBUxM/UTZm7X8+ZYEWOIfv3w5mBOCzi27Vc1VEU/xdszMJLcrw5uF X3nrg3WkxRPBRl/z/HHls+yarm5vpZmH0iqFTcSIhG3FyrGx0E+hWx7tLVk3cGSc P5Kyl6DULsTtQLmqTQX+7NlFPdkglCPf+kx2ccHGTAUtnY2G2PZy1Syqt/asBTqf AjgflYDD3lCBopCxfZUlMI0tGvywi3ZzqFPbJD55yzllPgZ7Vhs5gWbMP1TmWU0N qcA3qcZP8caaCCjISwzzmvTaf/ImEip9q84qfExUzUYV7mRW9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKP+rGZ1FUotlQp4weMHhMRg5Na+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjk2MjA1ODAtMzg4Mi0z ZGU3LWIzYjAtZDM3YjdlMWNmMTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ffMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8sY/dHysSzC7oz707WRdDz19Yses8founQSpVt5IJ7R53EuOeQOqFg 4XSinlrEErtz6IVobDtdppLRu0q6fTWEhwzwKJu3I4j9C7btdLuOrldtg+DJping y+wTKoh9HzrlWakpJ45oHLUYq2KZcK1Al8HyKWImH/PdZHwXuQ5oVGZsaMwSu7w4 8DWEo3z18n0A+bmy+iORXT61nuCO15AxplBbFSdP1+8Wg5JqRvYld9uDw9OQe6+p +IxbfA3gHbyt9EruZmprHB4URt/ST0ILijq51Qs0UEsPOKTiqfG2EJpVNjLTnSnD etN73pr0lwroz+SAn9J8sY930h9e2/A= -----END CERTIFICATE-----Generated at Mon Oct 20 00:28:22 2025 by rpki-client