$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e091a36-7ea7-35b9-b4df-83ab2002ac46.roa File: 1e091a36-7ea7-35b9-b4df-83ab2002ac46.roa (raw, json) Hash identifier: u3hlonM0lHP72OKj6b6gi25GMUJzU2m0yI4kOG4SsRU= Subject key identifier: E9:7F:5C:7D:53:76:C7:1E:79:33:1F:DA:DD:93:A2:BF:EA:E8:75:38 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC7642CFD97BE2F0D7CC800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e091a36-7ea7-35b9-b4df-83ab2002ac46.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.221.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:64:2c:fd:97:be:2f:0d:7c:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=19a5345e-f266-47fd-8e44-bb12fddcf026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d9:a6:06:c6:d0:33:17:c2:e9:1e:c0:d3:98: 4f:7b:d9:62:e6:ae:49:40:18:87:95:36:e3:74:94: 78:be:6c:23:df:8a:ec:74:2c:4a:91:01:d7:06:f1: 36:c2:3f:b1:9b:36:bb:37:94:4a:65:05:8b:ba:d5: df:7b:8b:df:c6:6f:7b:19:2f:df:4b:e5:31:c5:f0: b5:90:fd:91:90:21:2a:d0:5f:44:19:3a:08:69:3c: 97:28:f7:c9:e6:b7:6b:cf:14:e8:23:99:64:17:9d: ac:65:8e:33:f4:14:86:b2:b1:d7:ac:d5:5c:d6:aa: 25:29:96:78:27:e7:f6:b3:93:4f:ea:08:6b:84:93: 80:c3:4b:9f:02:96:75:c2:44:81:45:56:e5:3e:f9: 18:ca:19:92:36:56:8f:85:b2:7e:99:b6:c2:70:c3: 76:46:9a:93:59:37:8e:21:fa:d3:28:f3:72:db:dc: 21:28:80:da:29:77:ac:da:b9:ac:dc:ad:1b:2c:b3: 7f:d0:2d:5b:5f:e5:4b:d5:71:09:47:23:6b:69:cb: 0f:d9:8f:9d:98:22:2c:53:ce:a4:5d:77:cd:71:2f: 3a:8c:52:41:80:b3:71:a6:2c:d5:42:a5:30:24:43: 12:99:17:82:0b:bd:32:17:e7:94:5f:7a:5f:a1:a5: 5c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7F:5C:7D:53:76:C7:1E:79:33:1F:DA:DD:93:A2:BF:EA:E8:75:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e091a36-7ea7-35b9-b4df-83ab2002ac46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:67:1e:78:3f:a2:8f:7f:c2:49:ef:40:59:b7:8e:3e:e0:59: c9:f2:68:03:0d:a1:a3:17:6c:1f:55:1f:b6:ef:6c:c4:59:e6: 7b:b8:b7:66:d0:21:61:b4:13:b4:f6:9b:33:00:20:5f:5d:80: 78:fc:40:8c:3d:30:c8:4e:46:f1:98:bf:10:16:d5:f7:e1:c2: 92:01:ed:93:12:f8:f0:b5:a5:d9:40:bc:2f:77:53:8f:4e:9c: 1b:04:a3:d7:7e:36:bd:31:2b:a0:68:2a:f0:ef:ee:a2:a4:82: fd:11:a9:a4:10:34:5a:f7:53:b9:ae:46:6d:1a:fc:45:63:a5: 80:d3:72:d7:a0:cb:84:a0:17:cd:f3:66:6c:ce:1c:5e:d7:e7: 13:47:92:36:b6:94:34:7f:16:d5:99:5e:3e:0a:24:91:75:99: 0f:7e:7b:44:34:77:c5:e1:54:a3:12:6d:a8:f3:bf:1f:1e:1f: 97:ad:40:df:6b:44:1c:5a:26:70:50:11:1e:21:23:1d:15:dc: 73:ba:a4:f3:e7:9a:2f:c3:e8:b7:3b:33:b1:80:8d:62:00:1c: be:4f:26:d5:69:06:d9:16:fe:6b:bf:d7:4b:33:12:c4:43:0e: 74:ff:0e:39:89:db:0d:1a:10:6e:6c:e5:fb:f1:c8:b9:c4:48: c9:e6:5e:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2Qs/Ze+Lw18yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MTlhNTM0NWUtZjI2Ni00N2ZkLThlNDQtYmIxMmZkZGNmMDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdmmBsbQMxfC6R7A05hPe9li5q5JQBiHlTbj dJR4vmwj34rsdCxKkQHXBvE2wj+xmza7N5RKZQWLutXfe4vfxm97GS/fS+UxxfC1 kP2RkCEq0F9EGToIaTyXKPfJ5rdrzxToI5lkF52sZY4z9BSGsrHXrNVc1qolKZZ4 J+f2s5NP6ghrhJOAw0ufApZ1wkSBRVblPvkYyhmSNlaPhbJ+mbbCcMN2RpqTWTeO IfrTKPNy29whKIDaKXes2rms3K0bLLN/0C1bX+VL1XEJRyNracsP2Y+dmCIsU86k XXfNcS86jFJBgLNxpizVQqUwJEMSmReCC70yF+eUX3pfoaVcUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOl/XH1TdsceeTMf2t2Tor/q6HU4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWUwOTFhMzYtN2VhNy0z NWI5LWI0ZGYtODNhYjIwMDJhYzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF90wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJnHng/oo9/wknvQFm3jj7gWcnyaAMNoaMXbB9VH7bvbMRZ5nu4t2bQ IWG0E7T2mzMAIF9dgHj8QIw9MMhORvGYvxAW1ffhwpIB7ZMS+PC1pdlAvC93U49O nBsEo9d+Nr0xK6BoKvDv7qKkgv0RqaQQNFr3U7muRm0a/EVjpYDTctegy4SgF83z ZmzOHF7X5xNHkja2lDR/FtWZXj4KJJF1mQ9+e0Q0d8XhVKMSbajzvx8eH5etQN9r RBxaJnBQER4hIx0V3HO6pPPnmi/D6Lc7M7GAjWIAHL5PJtVpBtkW/mu/10szEsRD DnT/DjmJ2w0aEG5s5fvxyLnESMnmXvQ= -----END CERTIFICATE-----Generated at Tue Nov 4 23:54:33 2025 by rpki-client