$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3898760c-7bd4-324f-987f-4e33a7206fce.roa File: 3898760c-7bd4-324f-987f-4e33a7206fce.roa (raw, json) Hash identifier: v0yvAwh2WjIanc2eqm7sI13uI78ibsvBZig4tieyZOI= Subject key identifier: 10:90:F2:3D:EB:CA:02:A6:DC:3A:52:4F:0B:5A:51:2F:CF:E3:0E:55 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA93261B2141E6F52278C6E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3898760c-7bd4-324f-987f-4e33a7206fce.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 24319 IP address blocks: 23.220.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:61:b2:14:1e:6f:52:27:8c:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=48f60817-bcf3-4351-b9de-c259faa6881e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:76:88:8a:af:9a:91:26:27:ff:f3:b5:f3:9f: 50:a6:9e:a4:2f:d2:8c:1c:d0:3b:36:e4:f1:68:d6: 06:c4:72:0a:d1:08:df:0f:98:8a:a6:79:c7:69:00: b9:99:ce:cb:3e:0c:44:b4:cf:eb:89:2c:4a:bf:c5: 92:e2:18:2c:01:a7:ca:0f:6b:71:57:d1:ba:22:d1: 76:4a:86:fa:61:6b:f2:08:69:51:d8:e3:a8:c0:74: e1:b7:26:c3:98:7c:f3:97:aa:46:2e:81:33:e3:1c: bc:d1:31:00:94:7b:01:66:f8:08:2c:bf:ec:1e:d0: 01:6d:f4:57:5b:0b:04:bc:8f:e0:07:11:24:59:68: 9f:2e:bc:e5:c5:45:5e:d1:e8:d7:3e:b9:9e:42:3b: 41:43:28:b6:85:3e:50:81:46:14:b9:b5:55:4d:e8: aa:8a:2a:d2:6a:b4:01:9d:7f:86:4f:b0:32:5e:ff: 60:53:3b:c3:64:a5:d1:ee:54:e4:cf:b1:7e:c9:a7: 10:43:e0:50:7f:f5:3b:b4:14:f9:75:8d:6e:fd:c4: b2:ca:c7:40:53:ea:82:00:d6:36:52:18:b2:d7:67: 51:ab:4b:c4:55:3e:6f:01:7c:c1:ab:1b:f5:9b:8f: 15:21:23:c5:bd:9c:9f:ae:83:4b:33:3f:11:bc:f8: 72:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:90:F2:3D:EB:CA:02:A6:DC:3A:52:4F:0B:5A:51:2F:CF:E3:0E:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3898760c-7bd4-324f-987f-4e33a7206fce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:ab:38:39:09:bd:0c:8d:ab:e7:66:05:35:74:ec:c9:c9:3f: 11:27:af:9f:30:28:e7:9b:10:46:c6:b6:16:1d:6d:28:b6:0d: 1b:5a:a1:60:36:dc:83:26:aa:52:fc:02:3a:ca:5c:23:fe:4b: 0c:b0:7c:31:3d:9a:39:be:08:2b:af:46:cd:97:a4:75:90:0c: 62:83:8d:d0:06:8c:e8:ce:33:04:20:c0:0c:1a:bf:04:64:95: 55:be:65:a8:f7:31:6f:54:c6:2c:bd:4e:48:df:53:94:75:13: ff:ff:d7:cd:9a:d7:7e:e7:eb:31:6c:4c:29:ee:8b:41:0a:2f: 4c:73:af:02:71:64:1f:60:4f:5c:e2:2c:f9:0d:88:ea:5b:65: 89:d3:75:2b:93:de:b9:89:26:5c:0d:18:fa:6f:5f:5e:a4:97: cf:8d:0f:d0:e8:7b:5a:26:8d:79:6b:f4:8f:db:6a:6b:74:f1: 18:ed:26:79:58:79:15:01:44:82:92:54:b6:b4:7d:9f:fc:60: e4:7b:3e:27:e4:0f:19:cc:5a:1a:80:95:fc:3c:f8:1a:d1:02: cd:ba:18:57:ca:e0:45:8c:fe:96:ac:cc:00:c2:b8:68:04:dd: 76:8c:b7:ed:33:e8:06:f3:a5:b1:f8:50:da:24:f1:46:59:5b: 38:12:4a:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMmGyFB5vUieMbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NDhmNjA4MTctYmNmMy00MzUxLWI5ZGUtYzI1OWZhYTY4ODFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHaIiq+akSYn//O1859Qpp6kL9KMHNA7NuTx aNYGxHIK0QjfD5iKpnnHaQC5mc7LPgxEtM/riSxKv8WS4hgsAafKD2txV9G6ItF2 Sob6YWvyCGlR2OOowHThtybDmHzzl6pGLoEz4xy80TEAlHsBZvgILL/sHtABbfRX WwsEvI/gBxEkWWifLrzlxUVe0ejXPrmeQjtBQyi2hT5QgUYUubVVTeiqiirSarQB nX+GT7AyXv9gUzvDZKXR7lTkz7F+yacQQ+BQf/U7tBT5dY1u/cSyysdAU+qCANY2 Uhiy12dRq0vEVT5vAXzBqxv1m48VISPFvZyfroNLMz8RvPhy0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCQ8j3rygKm3DpSTwtaUS/P4w5VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzg5ODc2MGMtN2JkNC0z MjRmLTk4N2YtNGUzM2E3MjA2ZmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqrODkJvQyNq+dmBTV07MnJPxEnr58wKOebEEbGthYdbSi2DRtaoWA2 3IMmqlL8AjrKXCP+SwywfDE9mjm+CCuvRs2XpHWQDGKDjdAGjOjOMwQgwAwavwRk lVW+Zaj3MW9Uxiy9TkjfU5R1E///182a137n6zFsTCnui0EKL0xzrwJxZB9gT1zi LPkNiOpbZYnTdSuT3rmJJlwNGPpvX16kl8+ND9Doe1omjXlr9I/bamt08RjtJnlY eRUBRIKSVLa0fZ/8YOR7PifkDxnMWhqAlfw8+BrRAs26GFfK4EWM/paszADCuGgE 3XaMt+0z6AbzpbH4UNok8UZZWzgSSjg= -----END CERTIFICATE-----Generated at Tue Nov 4 22:18:44 2025 by rpki-client