$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/122f7b0f-3897-3cc8-9224-5f6a75b3a5e2.roa File: 122f7b0f-3897-3cc8-9224-5f6a75b3a5e2.roa (raw, json) Hash identifier: fDQaRJ+5EQaFZ7BwQJGgM3U7JBlqWFDBkvEgYDMXQho= Subject key identifier: ED:E5:25:27:79:A3:AA:81:09:80:70:E4:91:A7:0F:10:16:4A:EB:C1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA6679D684E4BF419C3064580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/122f7b0f-3897-3cc8-9224-5f6a75b3a5e2.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 20940 IP address blocks: 23.219.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:9d:68:4e:4b:f4:19:c3:06:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=82bca0f1-7dfe-445c-8c63-75f8b7d09f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:60:85:fd:5e:f5:66:bb:0f:78:e2:7b:2e:bb: da:00:45:38:dd:2f:33:40:21:51:39:92:8b:f6:f3: 62:ae:8f:25:36:37:b2:93:1a:36:18:98:2f:5f:42: eb:d2:08:26:99:80:06:20:0b:cd:c5:0a:5d:e1:56: 24:6a:fe:96:cc:bd:2d:c8:81:34:08:8e:61:9f:d0: cc:aa:68:f9:7c:cd:ff:18:8a:f8:ba:93:63:fa:7d: d4:f3:25:fa:a4:14:5a:af:e2:4a:20:0d:cf:a0:62: 83:7d:87:b1:2e:a3:a2:b2:15:23:4c:52:f4:38:67: 67:07:6a:93:6a:1f:3a:36:d1:fa:bd:15:22:a2:30: 73:c1:5b:d8:71:55:34:7f:d5:b1:f8:0a:26:91:94: 50:f9:a0:9b:cf:6a:a4:8a:26:fc:cb:25:4a:ec:8e: 29:4e:a8:47:59:5d:20:b8:31:43:b1:7c:cc:59:bd: a3:45:ff:64:95:cf:21:08:76:92:c4:09:54:67:e5: 6f:84:a1:34:c3:d9:37:db:63:3a:c9:8b:85:ce:ab: cf:5a:d7:4e:75:4b:5d:09:83:49:00:20:88:65:4e: d2:63:a9:e7:db:03:52:a8:1f:48:31:ec:7c:67:11: 43:00:1e:ac:49:1f:9e:43:a4:c5:0a:e5:40:71:33: 4c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E5:25:27:79:A3:AA:81:09:80:70:E4:91:A7:0F:10:16:4A:EB:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/122f7b0f-3897-3cc8-9224-5f6a75b3a5e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:dd:ff:2e:25:e8:99:80:0f:1d:d7:88:25:4b:8b:a1:68:4a: 9a:83:db:28:87:cf:05:65:46:e9:36:d7:09:11:f5:b3:ee:7d: 70:15:90:13:7d:41:d8:97:56:93:aa:45:e4:f4:17:c5:ac:ae: e2:bf:93:37:79:95:d5:a0:1b:0b:ee:f0:7e:0c:b4:3a:a2:95: 60:6d:c0:29:b3:02:12:1d:3a:5c:15:d7:82:b9:b8:85:79:9f: b2:bb:97:33:64:cb:6a:30:d3:d3:69:54:dd:73:8e:ba:3c:52: 7f:73:eb:3a:10:cc:b4:64:fe:ba:30:d6:1e:2b:11:43:44:55: bf:60:cd:67:22:b4:d7:af:70:4e:7d:09:b1:89:2f:f8:47:b2: 93:e4:00:d0:0d:ea:7d:6e:d7:f8:3b:f1:98:78:1a:6b:db:73: fe:3c:a7:47:4d:45:03:77:0b:6b:30:1a:0c:bb:30:4e:e9:41: c8:ae:31:01:54:a5:1c:5d:29:7a:cc:5c:5b:45:82:7c:07:fd: da:35:5d:9c:e5:b6:ff:a8:2c:23:c7:4f:61:de:94:28:91:5c: 83:32:25:5f:2f:a5:98:5b:08:a7:e8:1c:8b:8f:32:9c:f9:72: fc:d7:c8:21:9c:75:30:8a:0a:22:05:dc:52:7d:56:c3:93:a1: 6a:d0:6a:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ51oTkv0GcMGRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ODJiY2EwZjEtN2RmZS00NDVjLThjNjMtNzVmOGI3ZDA5ZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGCF/V71ZrsPeOJ7LrvaAEU43S8zQCFROZKL 9vNiro8lNjeykxo2GJgvX0Lr0ggmmYAGIAvNxQpd4VYkav6WzL0tyIE0CI5hn9DM qmj5fM3/GIr4upNj+n3U8yX6pBRar+JKIA3PoGKDfYexLqOishUjTFL0OGdnB2qT ah86NtH6vRUiojBzwVvYcVU0f9Wx+AomkZRQ+aCbz2qkiib8yyVK7I4pTqhHWV0g uDFDsXzMWb2jRf9klc8hCHaSxAlUZ+VvhKE0w9k322M6yYuFzqvPWtdOdUtdCYNJ ACCIZU7SY6nn2wNSqB9IMex8ZxFDAB6sSR+eQ6TFCuVAcTNMEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3lJSd5o6qBCYBw5JGnDxAWSuvBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTIyZjdiMGYtMzg5Ny0z Y2M4LTkyMjQtNWY2YTc1YjNhNWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ufMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrd/y4l6JmADx3XiCVLi6FoSpqD2yiHzwVlRuk21wkR9bPufXAVkBN9 QdiXVpOqReT0F8WsruK/kzd5ldWgGwvu8H4MtDqilWBtwCmzAhIdOlwV14K5uIV5 n7K7lzNky2ow09NpVN1zjro8Un9z6zoQzLRk/row1h4rEUNEVb9gzWcitNevcE59 CbGJL/hHspPkANAN6n1u1/g78Zh4Gmvbc/48p0dNRQN3C2swGgy7ME7pQciuMQFU pRxdKXrMXFtFgnwH/do1XZzltv+oLCPHT2HelCiRXIMyJV8vpZhbCKfoHIuPMpz5 cvzXyCGcdTCKCiIF3FJ9VsOToWrQao0= -----END CERTIFICATE-----Generated at Wed Nov 5 01:31:50 2025 by rpki-client