$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/585b3f69-78ec-3b48-9f0e-9545eb1e69ed.roa File: 585b3f69-78ec-3b48-9f0e-9545eb1e69ed.roa (raw, json) Hash identifier: OrGiBKbQ8pLCQfya+zrNFd54dyYF+cqNGIi7kUNULCw= Subject key identifier: BA:E6:A3:36:D8:D1:2B:4E:2D:75:05:B7:B3:74:E7:89:55:65:A5:AA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B68FCA817470CAA74E4382660 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/585b3f69-78ec-3b48-9f0e-9545eb1e69ed.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 16625 IP address blocks: 23.219.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:a8:17:47:0c:aa:74:e4:38:26:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=41a404f8-1026-4aee-b48e-d1f3ee38bc46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:28:4d:92:cf:a5:66:d5:d5:5e:f3:40:7b:07: 5b:33:ef:df:d9:06:2a:20:ff:91:ce:0c:d2:54:79: 9f:fa:5d:a1:14:5c:f7:d8:04:ef:62:ee:84:ad:4b: 63:39:91:58:d7:11:76:fd:2e:71:16:99:a6:e4:8e: 28:e0:68:52:23:3b:5b:80:10:e3:32:6a:67:a4:45: 21:01:32:02:7b:6f:d5:be:61:df:39:ca:4c:68:aa: 0c:25:4b:5f:28:7f:38:c2:01:aa:33:ee:99:a7:dd: 38:07:b3:a3:e1:58:90:f5:17:c8:66:af:eb:66:2c: d5:0b:70:90:6d:a0:a1:36:9e:9a:24:86:d7:cd:d3: bd:95:f0:25:a7:70:79:cc:03:09:63:e1:b6:2c:ab: 5d:c5:5b:74:c9:0d:96:2b:b3:e2:41:3c:9e:6a:d2: f2:96:c3:b6:4c:81:32:27:ca:c5:7b:5c:3c:b7:9c: 6a:92:a1:53:4c:b0:30:60:ef:28:2e:f3:94:d2:8e: f6:3e:b7:9e:28:28:71:f6:bb:bc:a3:db:39:77:8c: 5d:33:24:16:6c:0f:3f:84:05:22:ec:eb:14:9f:7a: 5d:c0:ec:f0:ae:7a:e8:a2:e0:dd:f8:d5:4f:e1:1d: 0a:e3:ae:5e:89:67:cc:32:35:47:a4:a8:fa:fe:7d: 10:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E6:A3:36:D8:D1:2B:4E:2D:75:05:B7:B3:74:E7:89:55:65:A5:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/585b3f69-78ec-3b48-9f0e-9545eb1e69ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:ba:95:e3:02:68:27:a7:23:e4:b1:01:fe:0f:64:e1:db:8d: a2:6e:e5:6e:44:58:c9:de:80:5f:95:96:fe:be:84:80:3c:da: bd:28:ed:b3:8e:03:a9:9d:76:86:c5:75:6d:51:c5:05:6d:4b: 4e:c1:37:12:95:06:c3:83:c9:d1:97:e7:de:dc:74:8e:a4:b2: f4:83:90:21:21:61:14:8a:b2:ac:e2:fd:6b:6c:9c:42:58:22: 43:3c:36:29:25:4f:3e:61:93:c3:6e:6b:c0:56:24:09:9f:94: 06:ba:70:e6:cc:94:ae:73:39:c7:a1:f6:70:51:7d:2b:41:d8: f3:c0:57:72:cd:5d:88:5b:20:ad:c7:56:e4:26:a1:99:6f:96: d3:2e:9d:e4:57:b3:1a:1a:6c:dc:4a:f9:99:1d:e5:de:be:32: 18:2b:d3:21:e4:34:68:4a:64:59:2c:46:45:07:2e:d5:c7:8a: 4c:11:e9:5f:3f:84:7a:4f:fa:9d:9b:a5:e7:3b:03:6a:03:d7: aa:83:05:67:5e:af:cf:75:02:98:19:89:be:c5:0d:97:9f:88: 24:e8:bb:88:0a:23:fe:c8:8d:5a:c6:16:0b:93:de:65:8e:d5: 46:32:47:7f:0a:be:d7:3d:36:17:88:c6:39:b8:cf:77:7a:4a: 78:fd:41:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/KgXRwyqdOQ4JmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk NDFhNDA0ZjgtMTAyNi00YWVlLWI0OGUtZDFmM2VlMzhiYzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyChNks+lZtXVXvNAewdbM+/f2QYqIP+RzgzS VHmf+l2hFFz32ATvYu6ErUtjOZFY1xF2/S5xFpmm5I4o4GhSIztbgBDjMmpnpEUh ATICe2/VvmHfOcpMaKoMJUtfKH84wgGqM+6Zp904B7Oj4ViQ9RfIZq/rZizVC3CQ baChNp6aJIbXzdO9lfAlp3B5zAMJY+G2LKtdxVt0yQ2WK7PiQTyeatLylsO2TIEy J8rFe1w8t5xqkqFTTLAwYO8oLvOU0o72PreeKChx9ru8o9s5d4xdMyQWbA8/hAUi 7OsUn3pdwOzwrnroouDd+NVP4R0K465eiWfMMjVHpKj6/n0QGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrmozbY0StOLXUFt7N054lVZaWqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTg1YjNmNjktNzhlYy0z YjQ4LTlmMGUtOTU0NWViMWU2OWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9uEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHi6leMCaCenI+SxAf4PZOHbjaJu5W5EWMnegF+Vlv6+hIA82r0o7bOO A6mddobFdW1RxQVtS07BNxKVBsODydGX597cdI6ksvSDkCEhYRSKsqzi/WtsnEJY IkM8NiklTz5hk8Nua8BWJAmflAa6cObMlK5zOceh9nBRfStB2PPAV3LNXYhbIK3H VuQmoZlvltMuneRXsxoabNxK+Zkd5d6+Mhgr0yHkNGhKZFksRkUHLtXHikwR6V8/ hHpP+p2bpec7A2oD16qDBWder891ApgZib7FDZefiCTou4gKI/7IjVrGFguT3mWO 1UYyR38Kvtc9NheIxjm4z3d6Snj9QXM= -----END CERTIFICATE-----Generated at Wed Nov 5 02:21:22 2025 by rpki-client