$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/100a6100-3fa2-3242-a041-39e01be55093.roa File: 100a6100-3fa2-3242-a041-39e01be55093.roa (raw, json) Hash identifier: Pzg3bdwhNJU0JnK8eQXhCsge1IkmiYOZ0Ek1wq95+F8= Subject key identifier: 14:53:E5:03:1C:E2:C2:17:36:D5:1C:29:12:DB:F4:65:50:55:A5:F9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B68FCA051CD52DEC40EEABA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/100a6100-3fa2-3242-a041-39e01be55093.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.218.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:a0:51:cd:52:de:c4:0e:ea:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=97ec1125-d34b-4f5a-97ac-27bc907fa8e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d2:6b:92:64:b4:9c:79:f0:b7:c1:d1:10:8b: f6:a5:ed:3d:29:e3:33:da:13:15:59:49:f6:ed:b6: c8:e5:10:5b:d3:fa:c5:bc:f9:94:59:bd:86:be:01: bd:6c:e7:21:7b:fb:e5:4a:1d:c3:99:7b:a6:72:6d: d8:68:e6:96:04:79:96:af:cf:32:5b:89:99:34:90: a1:60:26:16:44:c8:4d:a2:89:a3:51:69:e6:1d:62: 64:9d:f9:dc:67:01:44:5f:ce:e5:e2:3f:0d:47:ce: f1:ea:86:d0:ff:cc:ce:ae:6c:3f:30:d4:f7:b5:5b: 90:a2:0e:b5:32:03:fd:f4:59:f4:53:9d:9d:99:e2: f8:5e:cc:08:b3:c7:a6:74:ba:8b:a5:2f:02:47:1b: ce:fa:d8:f8:b1:04:6b:84:31:9c:4a:d8:aa:11:e4: 20:53:d9:1a:5b:3e:4a:57:15:0a:f5:89:07:a0:df: 3f:63:00:74:a4:22:8a:95:3d:83:de:c3:a2:86:d9: f3:7d:44:2c:f0:79:6a:34:bb:22:52:b8:e1:16:79: 6a:0c:27:70:78:e1:17:5d:55:56:ee:a7:4d:5f:05: 21:a5:69:76:b7:d9:1b:0d:df:d0:fc:ae:4b:d0:eb: 89:23:a7:86:f9:a3:47:61:bd:8e:b5:53:df:89:4c: 32:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:53:E5:03:1C:E2:C2:17:36:D5:1C:29:12:DB:F4:65:50:55:A5:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/100a6100-3fa2-3242-a041-39e01be55093.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:eb:59:af:fd:3e:c0:e9:c7:e7:5f:c5:86:9c:70:e3:a2:21: 96:bf:e1:59:e0:af:7f:86:bd:e8:06:ff:ae:34:1c:15:e1:0f: da:e3:40:a3:fd:7d:32:c3:9e:d6:44:a9:35:38:a5:2d:f4:ab: 69:86:ed:ce:c3:d9:cf:75:c0:6a:9f:5a:80:31:0a:03:88:1b: 38:8f:d7:cc:57:50:83:d6:77:22:a7:80:4e:91:1a:db:4e:14: 55:70:d4:e3:ea:99:06:af:83:0a:12:b7:5c:ff:97:46:be:0d: 52:4a:49:b3:07:c1:3d:1e:17:65:b9:cc:57:0f:26:c8:b2:04: 9a:4f:ef:9b:0a:e4:58:99:a1:bf:92:0f:c9:98:24:bb:60:25: 8f:69:a7:9d:7f:4f:10:d9:c2:40:90:33:7f:22:5d:62:cb:49: 95:6e:bd:dd:8c:40:36:00:6c:93:90:1e:d0:5f:f1:30:a4:78: fe:16:ad:bd:ca:03:9f:be:f0:58:4b:0a:4f:25:8c:88:dd:6b: 26:6e:24:da:3f:e0:0d:7e:49:f5:ba:c0:29:b2:d3:74:8c:43: f3:ce:57:21:bd:74:2f:24:55:06:e0:e2:b5:fe:17:22:1a:05: 05:17:10:8c:1a:e7:f3:d5:fb:07:4c:b1:c8:e8:12:84:72:5d: 9c:b7:84:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/KBRzVLexA7quoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk OTdlYzExMjUtZDM0Yi00ZjVhLTk3YWMtMjdiYzkwN2ZhOGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidJrkmS0nHnwt8HREIv2pe09KeMz2hMVWUn2 7bbI5RBb0/rFvPmUWb2GvgG9bOche/vlSh3DmXumcm3YaOaWBHmWr88yW4mZNJCh YCYWRMhNoomjUWnmHWJknfncZwFEX87l4j8NR87x6obQ/8zOrmw/MNT3tVuQog61 MgP99Fn0U52dmeL4XswIs8emdLqLpS8CRxvO+tj4sQRrhDGcStiqEeQgU9kaWz5K VxUK9YkHoN8/YwB0pCKKlT2D3sOihtnzfUQs8HlqNLsiUrjhFnlqDCdweOEXXVVW 7qdNXwUhpWl2t9kbDd/Q/K5L0OuJI6eG+aNHYb2OtVPfiUwykwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRT5QMc4sIXNtUcKRLb9GVQVaX5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTAwYTYxMDAtM2ZhMi0z MjQyLWEwNDEtMzllMDFiZTU1MDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9rcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzrWa/9PsDpx+dfxYaccOOiIZa/4Vngr3+GvegG/640HBXhD9rjQKP9 fTLDntZEqTU4pS30q2mG7c7D2c91wGqfWoAxCgOIGziP18xXUIPWdyKngE6RGttO FFVw1OPqmQavgwoSt1z/l0a+DVJKSbMHwT0eF2W5zFcPJsiyBJpP75sK5FiZob+S D8mYJLtgJY9pp51/TxDZwkCQM38iXWLLSZVuvd2MQDYAbJOQHtBf8TCkeP4Wrb3K A5++8FhLCk8ljIjdayZuJNo/4A1+SfW6wCmy03SMQ/POVyG9dC8kVQbg4rX+FyIa BQUXEIwa5/PV+wdMscjoEoRyXZy3hP4= -----END CERTIFICATE-----Generated at Tue Nov 4 22:27:21 2025 by rpki-client