$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08711189-ef2a-3c58-bc4f-13606b751031.roa File: 08711189-ef2a-3c58-bc4f-13606b751031.roa (raw, json) Hash identifier: Tz18h4DNXoJL7qH9q2EJJfpFaEgzGOX2aYqcQxEGoaI= Subject key identifier: 51:21:9C:21:B6:76:45:7D:AE:48:79:2F:C2:4F:65:E0:D5:BB:80:BE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC764081A87641349FEE8C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08711189-ef2a-3c58-bc4f-13606b751031.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.221.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:64:08:1a:87:64:13:49:fe:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=3e5fd191-da42-4be4-bb8d-cade0bc61bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7a:aa:56:d6:4d:e4:d2:a2:de:e0:21:da:c2: 34:8e:b0:b0:c5:4d:48:c8:dc:b1:50:c9:0d:93:77: 07:73:43:98:22:7b:72:62:80:a1:8f:33:26:30:54: d8:8f:5a:da:3b:ed:df:96:23:1c:23:33:cf:37:78: 59:5d:4d:09:77:55:b9:85:e6:c8:7c:25:d8:13:e0: d1:a7:45:9c:27:a6:84:93:49:09:66:52:73:a4:d1: 7e:96:7d:2d:69:50:16:8b:9c:ea:66:89:d1:1e:99: 22:04:1c:b3:1f:b9:2a:f6:77:13:ea:63:4d:a4:3a: 8f:1e:42:d6:03:01:41:60:c4:fb:c5:b0:1c:df:63: 31:51:bc:e3:f6:f5:d6:ee:b2:37:23:ad:aa:cb:06: 99:33:86:b8:4a:44:53:15:34:d7:19:7e:e5:01:76: 2e:0d:f9:33:fa:66:2e:98:21:52:f1:f3:d5:aa:28: df:ce:90:a1:46:e3:dd:54:0d:f7:b1:94:70:94:cb: 92:92:b7:36:d2:2c:14:f4:34:20:4e:9c:f9:d8:7e: dc:a6:dc:d9:c9:60:58:bf:04:69:28:bc:6c:17:5f: 9a:24:17:08:cd:d9:4d:99:84:dd:65:e3:05:c2:86: 30:f3:e2:b6:23:98:2d:48:f8:29:f8:5b:63:c8:88: 9e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:21:9C:21:B6:76:45:7D:AE:48:79:2F:C2:4F:65:E0:D5:BB:80:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08711189-ef2a-3c58-bc4f-13606b751031.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:d8:d8:d1:83:43:68:1d:84:6e:bc:a2:a5:50:66:7b:77:6c: 56:5f:e8:7e:b8:9a:78:74:48:00:37:56:bc:b6:17:b5:fc:ad: cd:5e:09:27:d6:8a:3e:54:5e:f4:39:33:cb:8d:d4:29:a2:4d: f8:d6:2a:aa:f9:2b:c3:54:2f:3b:3b:d9:30:2a:a4:52:0e:7e: cc:f4:fc:22:80:d8:ba:95:16:1d:c2:5c:28:be:6d:f3:90:84: 3f:45:fc:c9:4c:5b:dc:b0:c1:11:7f:06:6c:e1:80:21:ff:e6: 50:24:00:ac:ba:d8:9f:ec:5d:4f:53:06:ac:3e:f3:39:3d:f9: 80:0c:e5:b8:7b:6f:40:d7:6c:ef:80:26:13:0c:73:be:a3:3f: 0e:b9:ad:01:18:0f:b1:93:c6:34:f3:ac:a1:89:f7:70:76:58: df:29:db:41:63:dc:c5:d1:48:ca:72:e6:45:d4:4c:65:6a:de: 61:04:24:71:f7:df:22:4c:b3:24:b8:52:c2:8b:fe:65:b4:c5: 65:28:bb:0c:fc:e9:80:89:39:6c:77:53:63:73:26:c1:ff:8c: 7b:a4:1d:7d:4f:c3:29:16:b0:c5:be:8d:d6:38:75:fd:23:b9: c8:fc:36:b6:83:f6:82:05:ae:29:f6:1c:48:53:8c:a9:41:2c: cd:d7:10:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2QIGodkE0n+6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk M2U1ZmQxOTEtZGE0Mi00YmU0LWJiOGQtY2FkZTBiYzYxYmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHqqVtZN5NKi3uAh2sI0jrCwxU1IyNyxUMkN k3cHc0OYIntyYoChjzMmMFTYj1raO+3fliMcIzPPN3hZXU0Jd1W5hebIfCXYE+DR p0WcJ6aEk0kJZlJzpNF+ln0taVAWi5zqZonRHpkiBByzH7kq9ncT6mNNpDqPHkLW AwFBYMT7xbAc32MxUbzj9vXW7rI3I62qywaZM4a4SkRTFTTXGX7lAXYuDfkz+mYu mCFS8fPVqijfzpChRuPdVA33sZRwlMuSkrc20iwU9DQgTpz52H7cptzZyWBYvwRp KLxsF1+aJBcIzdlNmYTdZeMFwoYw8+K2I5gtSPgp+FtjyIieTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEhnCG2dkV9rkh5L8JPZeDVu4C+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDg3MTExODktZWYyYS0z YzU4LWJjNGYtMTM2MDZiNzUxMDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF90rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7Y2NGDQ2gdhG68oqVQZnt3bFZf6H64mnh0SAA3Vry2F7X8rc1eCSfW ij5UXvQ5M8uN1CmiTfjWKqr5K8NULzs72TAqpFIOfsz0/CKA2LqVFh3CXCi+bfOQ hD9F/MlMW9ywwRF/BmzhgCH/5lAkAKy62J/sXU9TBqw+8zk9+YAM5bh7b0DXbO+A JhMMc76jPw65rQEYD7GTxjTzrKGJ93B2WN8p20Fj3MXRSMpy5kXUTGVq3mEEJHH3 3yJMsyS4UsKL/mW0xWUouwz86YCJOWx3U2NzJsH/jHukHX1PwykWsMW+jdY4df0j ucj8NraD9oIFrin2HEhTjKlBLM3XEBY= -----END CERTIFICATE-----Generated at Tue Nov 4 22:28:50 2025 by rpki-client