$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21e00e69-2c12-36cd-bdeb-7b6c72777099.roa File: 21e00e69-2c12-36cd-bdeb-7b6c72777099.roa (raw, json) Hash identifier: H1ehUAkz/i+C2bNSWulaBG5VAfEerpJTXAELHv2+61s= Subject key identifier: F1:AD:04:6C:97:78:0C:7E:E3:24:1A:BC:4D:3F:79:7A:80:EE:A7:79 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B68FCA077C1D8FDCDDDCF6D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21e00e69-2c12-36cd-bdeb-7b6c72777099.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.218.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:a0:77:c1:d8:fd:cd:dd:cf:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=d4573f51-d2a9-4fd5-ad8d-ec8adac3a1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:da:3f:57:1f:53:77:57:9f:e0:7d:fb:86:86: bb:eb:1c:e1:51:dd:8e:4f:8a:09:ce:ea:9f:c6:ef: 77:57:67:e3:c6:92:8f:d9:63:71:1c:d0:d3:26:ca: 8c:36:62:13:0d:3a:4a:04:04:0e:db:8f:f1:2d:f9: eb:6d:4f:32:e2:4e:49:35:94:c1:d1:a1:35:d7:90: d7:1e:42:02:83:b1:b7:6b:6f:da:de:60:03:e9:ac: 51:58:74:ea:41:38:ef:74:62:eb:ee:58:03:ba:6e: 5b:be:e2:cd:e2:67:bc:be:6d:bf:25:d7:78:24:01: 79:dc:99:69:c9:31:73:27:e6:09:e1:1b:41:99:b8: 20:18:cf:ee:f4:97:97:bc:51:f2:95:51:a5:50:33: cf:fc:27:0d:e7:13:d1:6f:79:43:65:d0:d0:7e:42: 87:23:9c:b8:c9:88:e8:a0:3b:16:6b:06:fb:63:28: 06:5a:0b:45:ef:61:c3:ed:6c:8d:c2:91:29:4e:d9: d8:f0:2c:f1:56:de:9f:08:28:a7:15:15:a7:64:b8: ff:75:a8:fb:52:31:ba:9f:70:64:35:53:8a:49:e9: 96:25:60:7d:9e:95:55:bd:9f:39:29:50:f8:75:dc: 4e:cf:e7:64:55:cd:26:7a:1d:c5:1c:94:f2:63:69: 39:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AD:04:6C:97:78:0C:7E:E3:24:1A:BC:4D:3F:79:7A:80:EE:A7:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21e00e69-2c12-36cd-bdeb-7b6c72777099.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:92:4b:10:9a:d2:b5:60:43:84:d8:47:dd:7b:f3:0b:01:ec: 44:3d:71:52:87:44:10:26:df:a6:b9:2e:8b:a9:4e:56:3d:5a: 56:48:18:8c:8e:37:ed:ab:80:56:20:58:c1:65:eb:6b:eb:71: f5:3a:1c:34:a0:4b:4c:42:60:28:f9:e7:d8:26:cd:85:fe:90: fe:c0:7d:dc:63:e4:9c:3d:69:a8:16:5c:db:6c:23:c6:4a:7b: 2c:02:c4:53:48:07:90:d1:6d:cf:c6:7c:d7:90:52:6c:70:85: 75:63:4a:37:28:cb:8d:38:cb:17:17:89:c2:d6:e6:08:33:75: 99:89:34:e5:d1:d2:10:a8:b7:e2:37:66:0b:20:f7:a5:81:45: 59:09:cc:05:9e:f0:f8:4a:44:3a:fa:d2:96:a5:e3:da:64:a7: 7b:53:f1:a5:2b:9e:e4:a3:bf:6d:c0:d5:a6:31:87:87:81:62: 6b:96:ab:2d:4c:e5:0c:8a:50:0e:ed:c1:04:2d:9d:ea:e5:a8: bc:9b:f1:9b:fb:df:c7:a1:53:0d:4d:77:88:c6:a6:33:71:96: f7:9e:64:f1:40:b6:92:28:fc:45:09:74:a8:47:11:75:e9:a0: 3d:47:59:59:5c:54:e5:e9:e6:73:db:a4:3e:0c:9b:ae:e7:0a: 23:87:cd:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/KB3wdj9zd3PbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk ZDQ1NzNmNTEtZDJhOS00ZmQ1LWFkOGQtZWM4YWRhYzNhMWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2to/Vx9Td1ef4H37hoa76xzhUd2OT4oJzuqf xu93V2fjxpKP2WNxHNDTJsqMNmITDTpKBAQO24/xLfnrbU8y4k5JNZTB0aE115DX HkICg7G3a2/a3mAD6axRWHTqQTjvdGLr7lgDum5bvuLN4me8vm2/Jdd4JAF53Jlp yTFzJ+YJ4RtBmbggGM/u9JeXvFHylVGlUDPP/CcN5xPRb3lDZdDQfkKHI5y4yYjo oDsWawb7YygGWgtF72HD7WyNwpEpTtnY8CzxVt6fCCinFRWnZLj/daj7UjG6n3Bk NVOKSemWJWB9npVVvZ85KVD4ddxOz+dkVc0meh3FHJTyY2k5EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGtBGyXeAx+4yQavE0/eXqA7qd5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjFlMDBlNjktMmMxMi0z NmNkLWJkZWItN2I2YzcyNzc3MDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9reMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmSSxCa0rVgQ4TYR9178wsB7EQ9cVKHRBAm36a5LoupTlY9WlZIGIyO N+2rgFYgWMFl62vrcfU6HDSgS0xCYCj559gmzYX+kP7Afdxj5Jw9aagWXNtsI8ZK eywCxFNIB5DRbc/GfNeQUmxwhXVjSjcoy404yxcXicLW5ggzdZmJNOXR0hCot+I3 Zgsg96WBRVkJzAWe8PhKRDr60pal49pkp3tT8aUrnuSjv23A1aYxh4eBYmuWqy1M 5QyKUA7twQQtnerlqLyb8Zv738ehUw1Nd4jGpjNxlveeZPFAtpIo/EUJdKhHEXXp oD1HWVlcVOXp5nPbpD4Mm67nCiOHzWw= -----END CERTIFICATE-----Generated at Wed Nov 5 02:40:53 2025 by rpki-client