$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/599d3743-7271-3612-ac7e-b695738f62c4.roa File: 599d3743-7271-3612-ac7e-b695738f62c4.roa (raw, json) Hash identifier: lxnnokgPuTyUMp+WcQEBTe5eqLsYTqIUy9O7bvHRC1A= Subject key identifier: 0F:E5:E8:ED:B7:06:B7:8A:05:5B:50:DF:B8:60:44:66:15:CC:E8:FF Certificate issuer: /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb Certificate serial: 010D0C9F4328584B4D11D54385D107D7751ECBC0 Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/599d3743-7271-3612-ac7e-b695738f62c4.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 44486 IP address blocks: 23.227.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:d5:43:85:d1:07:d7:75:1e:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=d35ccb99-d564-42a2-b57b-0c79469a5d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:23:91:bb:d4:3e:d3:2c:5f:a8:78:83:05:29: ec:7f:f7:b7:14:64:f7:3f:30:d1:0d:a2:72:1f:8f: 03:6d:15:1f:ca:74:a5:c9:55:36:98:f9:a5:52:e4: a0:c6:b7:8d:b3:1d:c9:a9:b5:4c:2f:63:d9:a8:bd: 10:6c:2f:ef:29:ae:41:81:be:1a:9f:c9:9b:e4:21: 2e:8a:64:8c:39:c8:a1:8c:9e:97:e1:9c:52:b8:7f: c6:64:c9:16:fe:aa:53:9b:24:7f:18:6d:8b:e2:0f: 78:81:c5:cc:34:e2:8e:3c:fb:1b:ab:09:63:cb:70: 91:a0:a6:a3:36:78:b7:a9:7b:56:02:5d:47:ff:84: 3d:8a:6e:1d:6a:5d:4e:f2:cb:84:2c:0b:1c:9d:bc: b8:5a:f8:02:32:e9:2f:dc:81:86:03:cc:fb:ab:b5: ed:71:00:ae:18:0b:0d:f2:f0:50:cd:e2:ed:de:24: 37:ac:4c:6f:76:5d:80:c3:c2:6f:05:4c:2f:b0:b2: 76:15:96:4b:92:16:12:63:1a:bc:ef:48:ae:9e:89: 87:57:1e:93:f4:18:0b:e7:ab:92:df:eb:00:aa:dd: 86:1e:83:02:c0:51:5c:64:b0:b2:ce:82:b4:2f:87: 98:7d:f0:7c:2d:50:fd:d5:e0:00:f8:bf:a1:ed:21: b7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E5:E8:ED:B7:06:B7:8A:05:5B:50:DF:B8:60:44:66:15:CC:E8:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/599d3743-7271-3612-ac7e-b695738f62c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl X509v3 Authority Key Identifier: keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer sbgp-ipAddrBlock: critical IPv4: 23.227.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:5c:b5:4d:f4:0d:a7:49:31:3f:24:5e:b9:22:99:a0:ae:b0: 40:c7:4a:53:16:87:d6:60:2b:bc:fa:5b:8e:69:fa:1d:4b:ae: f7:af:7b:2c:8c:1e:35:ad:1b:be:ea:83:ba:b7:2a:17:7d:48: 1b:08:03:2f:c6:4e:4f:d1:e7:4e:49:fb:e1:b9:f8:c9:64:a4: 7d:99:8b:6b:af:10:17:41:44:64:48:75:82:80:42:91:38:46: c7:9f:38:ba:f9:85:81:89:c1:61:a2:93:dc:4f:76:15:3b:80: a7:c4:8d:47:a5:b5:a6:3e:62:08:15:65:60:aa:90:0a:f2:87: d2:5d:9f:56:22:34:41:bc:ac:9a:ad:45:90:2f:6b:42:45:03: 2f:4f:0f:d9:3a:c4:82:b4:80:b9:5b:5a:af:84:f0:20:3a:5f: 7a:14:0e:07:05:5a:55:3b:81:a1:ca:2f:d1:f5:7e:b9:26:0a: c4:6c:66:b5:6b:8b:83:b5:27:8d:39:9f:a2:02:ad:22:e2:7a: ce:72:7b:e6:a0:49:99:a1:7f:09:3f:f7:67:f9:79:32:23:cf: dd:fa:79:4f:c0:92:de:9d:b3:8a:06:b1:a1:b2:cb:bd:a3:0b: b7:5e:c1:04:1e:3f:c8:e7:57:44:eb:5f:84:87:d7:7a:8b:b0: 56:b7:df:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdVDhdEH13Uey8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzkwY2ViMWUtMzhmMC00NjkwLThlMTItZmRlZjBkYzBl ZGRiMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk ZDM1Y2NiOTktZDU2NC00MmEyLWI1N2ItMGM3OTQ2OWE1ZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCORu9Q+0yxfqHiDBSnsf/e3FGT3PzDRDaJy H48DbRUfynSlyVU2mPmlUuSgxreNsx3JqbVML2PZqL0QbC/vKa5Bgb4an8mb5CEu imSMOcihjJ6X4ZxSuH/GZMkW/qpTmyR/GG2L4g94gcXMNOKOPPsbqwljy3CRoKaj Nni3qXtWAl1H/4Q9im4dal1O8suELAscnby4WvgCMukv3IGGA8z7q7XtcQCuGAsN 8vBQzeLt3iQ3rExvdl2Aw8JvBUwvsLJ2FZZLkhYSYxq870iunomHVx6T9BgL56uS 3+sAqt2GHoMCwFFcZLCyzoK0L4eYffB8LVD91eAA+L+h7SG3+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/l6O23BreKBVtQ37hgRGYVzOj/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBj ZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVmMGRjMGVkZGIvNTk5ZDM3NDMtNzI3MS0z NjEyLWFjN2UtYjY5NTczOGY2MmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzkwY2ViMWUtMzhmMC00NjkwLThl MTItZmRlZjBkYzBlZGRiLzM5MGNlYjFlLTM4ZjAtNDY5MC04ZTEyLWZkZWYwZGMw ZWRkYi5jcmwwHwYDVR0jBBgwFoAU7IhVYel9//xGKMwSEvEQkth0VUswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBjZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVm MGRjMGVkZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+PcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxctU30DadJMT8kXrkimaCusEDHSlMWh9ZgK7z6W45p+h1LrveveyyM HjWtG77qg7q3Khd9SBsIAy/GTk/R505J++G5+MlkpH2Zi2uvEBdBRGRIdYKAQpE4 RsefOLr5hYGJwWGik9xPdhU7gKfEjUeltaY+YggVZWCqkAryh9Jdn1YiNEG8rJqt RZAva0JFAy9PD9k6xIK0gLlbWq+E8CA6X3oUDgcFWlU7gaHKL9H1frkmCsRsZrVr i4O1J405n6ICrSLies5ye+agSZmhfwk/92f5eTIjz936eU/Akt6ds4oGsaGyy72j C7dewQQeP8jnV0TrX4SH13qLsFa33zM= -----END CERTIFICATE-----Generated at Wed Nov 5 16:31:32 2025 by rpki-client