$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d9ec3e3-4511-3b7d-b607-291e0255ff7d.roa File: 3d9ec3e3-4511-3b7d-b607-291e0255ff7d.roa (raw, json) Hash identifier: zPqQfMC9TiHUOlOVG6RFpOkXYIQW8WrKp/NOERsxRuc= Subject key identifier: 71:40:B0:20:E0:FE:AF:5C:AF:37:6E:8A:FB:4B:A5:E9:C9:74:41:EC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC7628FE3F694B6683F2BC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d9ec3e3-4511-3b7d-b607-291e0255ff7d.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 16625 IP address blocks: 23.220.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:62:8f:e3:f6:94:b6:68:3f:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=5168d73e-e335-42b7-af08-5356d37fb416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:de:8e:8f:ac:01:f6:e3:ef:b9:43:3e:9e:6f: 0c:4a:b0:02:8a:74:93:54:7a:fe:e7:13:57:ea:d5: 8a:c4:0e:3f:26:ff:2c:a1:bd:b1:df:51:df:48:89: 5d:e1:18:52:2a:1f:e7:16:fc:41:26:ec:d4:47:8d: 63:56:ef:36:24:64:89:eb:a0:a9:76:8f:3b:32:33: b5:cc:1d:d4:77:ce:c3:93:38:b8:5f:d2:b4:f7:fe: 8f:b9:49:f2:8e:fa:71:2e:0c:f8:a7:ad:32:83:a0: f1:c4:b8:b6:e7:96:b9:fb:52:0f:66:49:e6:d3:7a: 24:eb:bc:74:f3:52:0a:7b:f1:af:89:29:a0:95:e2: d3:9f:d1:f4:6c:f7:49:4d:34:d1:b4:fc:62:76:93: 13:de:29:10:fc:14:42:75:96:b0:b8:c1:85:8b:1b: 8a:f6:a5:de:f4:2f:1c:91:ce:84:40:3c:55:be:f1: 27:82:b1:5b:9a:18:81:6f:12:0c:10:d2:70:0b:55: 46:9d:32:04:2e:74:c1:b9:a8:0f:36:c0:02:13:16: 0a:13:cf:a1:53:07:43:07:0c:14:9a:cb:cb:15:92: 92:c1:67:34:19:6f:bb:7c:7b:cf:93:97:c7:ed:02: ed:94:85:11:0c:9e:0b:94:6c:b5:09:0f:4f:1f:d0: 3f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:40:B0:20:E0:FE:AF:5C:AF:37:6E:8A:FB:4B:A5:E9:C9:74:41:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d9ec3e3-4511-3b7d-b607-291e0255ff7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:82:2a:5f:ed:1a:97:3d:3b:c2:9b:05:6c:37:9f:a7:3c:55: 11:f8:b9:e7:45:39:6b:67:29:07:c3:5e:5f:60:43:ab:69:25: 71:59:ec:0e:af:15:d4:f5:8b:02:e2:95:72:87:d3:e8:5a:58: 74:3c:8c:dc:87:d5:51:b4:88:d2:12:8c:67:34:46:69:ed:a5: 07:ab:1c:63:ab:a6:64:33:e7:b4:b7:2c:dc:bb:a8:87:d7:dc: b5:0c:4e:49:6f:78:fd:15:74:36:59:42:be:58:d0:01:6a:54: bb:d1:c0:fc:8e:77:dd:31:45:4e:c9:9c:d9:c3:83:24:7c:46: 2d:78:65:45:12:32:e7:4d:41:a4:b4:0d:7c:da:a7:72:e2:6b: ac:16:fa:fb:3f:6d:1c:fb:29:64:81:6d:c3:d6:64:67:cf:b3: 32:ff:23:e5:0c:6b:2f:57:21:2a:3a:dc:ec:fb:e1:11:b7:c1: fd:3e:3b:51:23:25:73:1b:85:38:1a:ee:d2:3c:4f:23:ee:98: e8:10:cd:27:87:ba:d4:75:23:a9:91:9c:87:71:25:d5:56:13: b0:3e:12:4f:f3:0f:f9:18:d0:cf:a0:a0:dd:fb:4b:74:b0:7f: e4:96:18:ca:96:35:10:2b:7a:77:6a:40:48:dc:c1:fa:01:40: 3c:e4:6a:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2KP4/aUtmg/K8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NTE2OGQ3M2UtZTMzNS00MmI3LWFmMDgtNTM1NmQzN2ZiNDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp96Oj6wB9uPvuUM+nm8MSrACinSTVHr+5xNX 6tWKxA4/Jv8sob2x31HfSIld4RhSKh/nFvxBJuzUR41jVu82JGSJ66Cpdo87MjO1 zB3Ud87Dkzi4X9K09/6PuUnyjvpxLgz4p60yg6DxxLi255a5+1IPZknm03ok67x0 81IKe/GviSmgleLTn9H0bPdJTTTRtPxidpMT3ikQ/BRCdZawuMGFixuK9qXe9C8c kc6EQDxVvvEngrFbmhiBbxIMENJwC1VGnTIELnTBuagPNsACExYKE8+hUwdDBwwU msvLFZKSwWc0GW+7fHvPk5fH7QLtlIURDJ4LlGy1CQ9PH9A/nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFAsCDg/q9crzduivtLpenJdEHsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2Q5ZWMzZTMtNDUxMS0z YjdkLWI2MDctMjkxZTAyNTVmZjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuCKl/tGpc9O8KbBWw3n6c8VRH4uedFOWtnKQfDXl9gQ6tpJXFZ7A6v FdT1iwLilXKH0+haWHQ8jNyH1VG0iNISjGc0RmntpQerHGOrpmQz57S3LNy7qIfX 3LUMTklveP0VdDZZQr5Y0AFqVLvRwPyOd90xRU7JnNnDgyR8Ri14ZUUSMudNQaS0 DXzap3Lia6wW+vs/bRz7KWSBbcPWZGfPszL/I+UMay9XISo63Oz74RG3wf0+O1Ej JXMbhTga7tI8TyPumOgQzSeHutR1I6mRnIdxJdVWE7A+Ek/zD/kY0M+goN37S3Sw f+SWGMqWNRArendqQEjcwfoBQDzkajM= -----END CERTIFICATE-----Generated at Tue Nov 4 23:12:13 2025 by rpki-client