$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fcc0b5ba-64eb-3a5d-8576-13d099f11375.roa File: fcc0b5ba-64eb-3a5d-8576-13d099f11375.roa (raw, json) Hash identifier: es9+6+FGBbcjkD9Lgj21+I7E3aym8eUtsrDBTu4Ptb0= Subject key identifier: 6A:91:33:A5:29:71:57:4F:99:51:3C:03:EB:62:0B:49:B9:3F:81:27 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B758CA8A47250608F0697C280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fcc0b5ba-64eb-3a5d-8576-13d099f11375.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 20940 IP address blocks: 23.220.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:a8:a4:72:50:60:8f:06:97:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=885a672a-9d4b-449d-b24c-43ad468f14a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6a:90:56:67:bb:c3:dc:a8:9a:09:61:f3:b7: 30:ad:ef:68:52:7d:db:00:db:d2:36:56:bd:ca:87: 70:57:89:9e:62:ce:0c:c5:00:c4:a2:26:35:c8:2e: 56:02:20:62:ab:be:97:c7:65:9b:99:fb:d4:4c:f0: 07:f0:45:46:79:5b:0f:09:1d:88:d9:66:47:cb:0d: 84:1c:d2:be:07:4f:9b:86:95:98:40:b4:e6:70:f8: 3b:ca:13:65:80:1a:b7:87:fa:e4:8c:bc:f4:9c:26: cb:ba:87:ce:5f:61:15:cb:23:10:06:54:5f:45:36: 6b:07:64:19:f7:bf:4c:50:9c:bd:1d:98:fa:89:4f: 5e:51:e1:bd:bf:45:13:13:1d:f9:d7:f7:dd:a0:a4: 2a:3d:4b:30:b5:18:bd:bf:72:d4:eb:70:64:d8:c2: b2:e8:de:50:55:37:87:4b:0e:45:ba:2b:7c:9a:db: 94:94:91:66:6f:cf:bb:ec:ed:5c:e2:b6:e3:aa:60: f5:19:be:17:4e:39:7a:4d:6c:1e:21:a6:94:85:e6: 02:8e:a3:cd:e4:d9:5a:a4:51:a5:d4:b9:50:fc:cf: bd:b1:79:12:d4:eb:a4:3a:cc:6f:a0:e1:c1:89:19: 95:dd:c5:74:84:2e:36:78:86:56:1e:ad:05:a8:8e: e4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:91:33:A5:29:71:57:4F:99:51:3C:03:EB:62:0B:49:B9:3F:81:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fcc0b5ba-64eb-3a5d-8576-13d099f11375.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:63:35:90:07:f4:b3:14:5a:30:20:7b:b9:9d:fa:ed:cb:d7: 90:4d:e2:a6:d8:5e:6e:7f:00:b4:9c:a3:ea:15:e8:c4:af:68: ab:2d:90:97:2c:5e:6c:5a:43:15:66:03:8d:78:df:c2:76:d2: 37:7f:97:b1:44:7f:49:d9:81:37:60:03:54:af:33:45:5f:d1: 61:01:3c:85:0f:7a:1b:f1:1c:2b:69:8b:09:fd:57:51:48:12: 56:af:06:89:b1:4d:64:a6:4a:24:3d:1a:09:e8:6c:74:a1:22: cf:1c:77:f0:6c:00:92:59:c4:05:ff:b2:2e:28:e1:0a:24:9a: 37:ca:af:ce:47:3a:86:f7:d5:f9:ad:23:e6:4c:7a:eb:5b:d7: fe:5e:62:4e:4e:09:af:51:5b:49:00:bc:eb:30:1a:5f:15:31: 77:11:af:46:a2:be:af:97:44:0a:0f:b3:2e:c2:b6:2a:69:3e: 06:69:71:9d:44:d1:ce:83:e2:e3:d6:a2:e9:50:dd:d4:c9:37: b4:09:09:c6:71:34:1f:8c:fa:54:86:72:85:ca:d0:c5:d1:fd: 78:fb:4c:d3:a8:36:ef:f4:8e:fd:27:14:f6:39:56:52:8f:a4: 1d:82:dc:ac:66:4b:7e:23:7b:64:96:b6:0f:5e:97:a6:2d:a6: 54:31:d6:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jKikclBgjwaXwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk ODg1YTY3MmEtOWQ0Yi00NDlkLWIyNGMtNDNhZDQ2OGYxNGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGqQVme7w9yomglh87cwre9oUn3bANvSNla9 yodwV4meYs4MxQDEoiY1yC5WAiBiq76Xx2WbmfvUTPAH8EVGeVsPCR2I2WZHyw2E HNK+B0+bhpWYQLTmcPg7yhNlgBq3h/rkjLz0nCbLuofOX2EVyyMQBlRfRTZrB2QZ 979MUJy9HZj6iU9eUeG9v0UTEx351/fdoKQqPUswtRi9v3LU63Bk2MKy6N5QVTeH Sw5Fuit8mtuUlJFmb8+77O1c4rbjqmD1Gb4XTjl6TWweIaaUheYCjqPN5NlapFGl 1LlQ/M+9sXkS1OukOsxvoOHBiRmV3cV0hC42eIZWHq0FqI7kdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqRM6UpcVdPmVE8A+tiC0m5P4EnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmNjMGI1YmEtNjRlYi0z YTVkLTg1NzYtMTNkMDk5ZjExMzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9yRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1jNZAH9LMUWjAge7md+u3L15BN4qbYXm5/ALSco+oV6MSvaKstkJcs XmxaQxVmA41438J20jd/l7FEf0nZgTdgA1SvM0Vf0WEBPIUPehvxHCtpiwn9V1FI ElavBomxTWSmSiQ9GgnobHShIs8cd/BsAJJZxAX/si4o4QokmjfKr85HOob31fmt I+ZMeutb1/5eYk5OCa9RW0kAvOswGl8VMXcRr0aivq+XRAoPsy7CtippPgZpcZ1E 0c6D4uPWoulQ3dTJN7QJCcZxNB+M+lSGcoXK0MXR/Xj7TNOoNu/0jv0nFPY5VlKP pB2C3KxmS34je2SWtg9el6YtplQx1r0= -----END CERTIFICATE-----Generated at Mon Oct 20 05:07:16 2025 by rpki-client