$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42a08572-3a63-3540-9f93-f62efb99d933.roa File: 42a08572-3a63-3540-9f93-f62efb99d933.roa (raw, json) Hash identifier: ExxEO81Er430UHFWZjqRt5wa85banjimqsYzSOYrQgs= Subject key identifier: AD:8B:99:48:E1:9B:CB:DF:C2:03:49:E4:51:22:A1:6E:5C:C1:03:33 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC76F6C9ADFD02975B7C1C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42a08572-3a63-3540-9f93-f62efb99d933.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.222.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:6f:6c:9a:df:d0:29:75:b7:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=4a6d5b96-3050-40a4-82b6-d65f2ab412af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e7:f6:da:46:dd:98:c7:be:3a:37:09:b1:f5: 27:33:6f:b4:8d:6d:08:94:ed:d7:06:53:fb:bd:55: 49:6c:8c:61:9e:5d:d7:aa:e5:ec:c2:85:ee:cc:6d: 57:19:e9:d5:01:5e:8e:d4:5f:f3:6f:81:5e:55:87: dd:e0:51:d5:36:a0:21:d5:30:01:0d:90:d1:1e:20: b6:e1:fa:71:00:93:41:a5:07:1a:16:c2:3f:0b:2b: 32:3b:6e:16:7e:09:ff:f6:27:3f:20:fd:52:90:1d: 75:a0:b5:67:4c:d3:c6:a5:a3:79:f7:ef:21:3c:fe: 71:41:c5:2b:7b:b3:36:e8:52:8d:29:d5:5e:bc:f2: a5:3a:b4:00:97:74:a2:c8:d5:4a:92:f9:eb:4d:25: ee:ef:28:0d:79:b6:0c:31:42:33:16:bb:fc:b3:20: 77:18:4c:a7:37:8a:9b:ff:1e:59:1a:3a:86:fb:f7: 1a:8b:b8:e7:e4:a6:34:ba:53:b0:43:10:73:7b:6e: 93:52:82:90:67:98:3e:f3:e2:b5:a2:09:96:1c:0b: c9:db:fd:64:a3:2e:eb:52:cf:a2:0c:a5:77:71:50: ba:54:28:b3:af:1d:5e:52:93:8f:f0:03:03:f0:9e: 82:9b:d8:1e:c9:ec:8e:32:8d:5b:2f:3f:99:fc:08: c1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8B:99:48:E1:9B:CB:DF:C2:03:49:E4:51:22:A1:6E:5C:C1:03:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42a08572-3a63-3540-9f93-f62efb99d933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:0a:90:09:cc:bd:21:2a:63:d5:32:b4:da:3f:d1:67:81:09: 1b:e3:ac:1f:82:89:1e:f4:89:dc:4d:4d:d4:13:c3:95:bf:4e: 5c:3d:58:b7:80:39:04:e8:81:9e:1e:ef:b1:8d:d1:c3:c7:22: 4f:c1:8e:f5:05:85:3d:9f:f6:70:4b:18:31:fb:4e:52:58:43: 14:be:90:80:39:0b:26:ef:0c:4b:48:e4:a5:33:f0:6d:a8:eb: e8:ce:e1:aa:a5:bc:f5:21:e0:a6:cc:f2:8b:01:02:1b:07:09: 8f:db:a6:ea:a1:79:2a:79:01:49:fc:a6:12:6e:6f:c5:f5:78: 81:6a:28:ee:6f:10:42:6c:1c:5d:83:6c:3d:43:f2:c0:8c:ad: 10:05:f3:4a:73:bb:66:c7:70:28:6c:ac:79:e9:c2:92:d7:b9: b9:de:60:59:50:93:8c:21:23:1e:cc:20:37:fa:f1:fc:97:64: 7b:1a:79:59:cd:59:ec:24:6c:38:fb:28:93:07:f4:16:7f:78: 9c:26:54:46:da:2c:3a:5f:8d:d6:b2:4d:cf:d0:97:9d:27:0e: 9d:b6:c8:1b:f8:33:10:72:56:c6:d7:0d:d8:6a:c8:ca:4d:00: 58:2e:0f:ad:07:72:2d:10:bd:d9:7c:3d:9f:14:6d:6d:e1:6e: a4:c4:52:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx29smt/QKXW3wcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NGE2ZDViOTYtMzA1MC00MGE0LTgyYjYtZDY1ZjJhYjQxMmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuf22kbdmMe+OjcJsfUnM2+0jW0IlO3XBlP7 vVVJbIxhnl3XquXswoXuzG1XGenVAV6O1F/zb4FeVYfd4FHVNqAh1TABDZDRHiC2 4fpxAJNBpQcaFsI/CysyO24Wfgn/9ic/IP1SkB11oLVnTNPGpaN59+8hPP5xQcUr e7M26FKNKdVevPKlOrQAl3SiyNVKkvnrTSXu7ygNebYMMUIzFrv8syB3GEynN4qb /x5ZGjqG+/cai7jn5KY0ulOwQxBze26TUoKQZ5g+8+K1ogmWHAvJ2/1koy7rUs+i DKV3cVC6VCizrx1eUpOP8AMD8J6Cm9geyeyOMo1bLz+Z/AjBCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2LmUjhm8vfwgNJ5FEioW5cwQMzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDJhMDg1NzItM2E2My0z NTQwLTlmOTMtZjYyZWZiOTlkOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF94CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAKkAnMvSEqY9UytNo/0WeBCRvjrB+CiR70idxNTdQTw5W/Tlw9WLeA OQTogZ4e77GN0cPHIk/BjvUFhT2f9nBLGDH7TlJYQxS+kIA5CybvDEtI5KUz8G2o 6+jO4aqlvPUh4KbM8osBAhsHCY/bpuqheSp5AUn8phJub8X1eIFqKO5vEEJsHF2D bD1D8sCMrRAF80pzu2bHcChsrHnpwpLXubneYFlQk4whIx7MIDf68fyXZHsaeVnN WewkbDj7KJMH9BZ/eJwmVEbaLDpfjdayTc/Ql50nDp22yBv4MxByVsbXDdhqyMpN AFguD60Hci0Qvdl8PZ8UbW3hbqTEUjg= -----END CERTIFICATE-----Generated at Tue Nov 4 22:20:02 2025 by rpki-client