$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59e7e28e-1164-32ac-a831-09fd21531e45.roa File: 59e7e28e-1164-32ac-a831-09fd21531e45.roa (raw, json) Hash identifier: RcRgVHxj2SjxZU3ideSX/WB9rTyjg3pUQRzPwo3n2T8= Subject key identifier: 76:82:F5:D6:CA:77:BE:29:C7:91:CC:BC:4C:F7:3A:FD:CA:6B:47:85 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA0D24353A97B090DECDF4E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59e7e28e-1164-32ac-a831-09fd21531e45.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 16625 IP address blocks: 23.221.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:43:53:a9:7b:09:0d:ec:df:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=f516f8a1-673a-4ef5-b3b7-553e74c9579a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:38:75:90:bc:71:fc:8f:8d:5b:73:f0:24:b7: 7f:ce:7b:67:74:02:d2:e0:bc:61:41:c4:fc:9e:b6: 35:cd:bc:a1:fb:e1:87:e4:aa:a7:0a:00:9c:08:6e: d0:fc:f1:27:34:c6:15:be:2f:78:b5:0f:02:a7:63: 7a:0e:1c:f3:72:d7:f0:d2:17:0a:16:58:d4:5c:34: a4:f1:7b:2e:b8:56:fd:e0:1e:89:ff:de:f3:a3:f3: 38:10:b3:cb:f5:62:cd:7a:4d:5f:2c:26:b0:5d:47: de:67:f8:4b:15:5c:55:64:39:5e:1e:b4:cd:fb:6e: 1d:60:11:2e:a6:92:7a:37:63:48:46:d5:a2:c0:8b: 04:31:65:e4:6b:e1:3e:b0:27:90:fb:0a:4e:4f:a3: fa:c9:9a:bf:ea:5b:f3:28:fd:28:9b:96:31:47:7b: 49:2d:32:a7:43:c1:ee:15:04:8b:8e:58:73:9f:dc: 33:fa:e9:95:db:ac:4e:3d:31:d3:86:df:e6:59:a7: 9e:eb:54:23:d4:f4:ea:2c:20:29:e7:ea:20:d1:48: 4f:fb:4f:b8:6a:d0:b0:b9:d8:ec:f7:25:de:a0:b6: 6f:55:9c:72:c5:01:18:e5:4c:06:40:59:a2:dd:53: 2f:25:5c:62:8e:bb:52:64:56:83:b2:71:9c:49:dd: 58:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:82:F5:D6:CA:77:BE:29:C7:91:CC:BC:4C:F7:3A:FD:CA:6B:47:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59e7e28e-1164-32ac-a831-09fd21531e45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:6a:df:f5:2f:e4:cb:ad:01:be:b1:bd:c6:3e:d2:a2:89:50: 29:01:15:d4:95:5b:9d:0d:9f:a8:de:5d:4f:c8:06:9c:53:f1: a1:fd:32:c8:27:6a:5f:f4:0b:57:99:74:4a:13:a5:3d:21:14: d8:f0:3b:09:3b:db:32:b5:7c:b3:8d:ac:a9:f7:8f:e1:63:e1: 44:ed:48:1c:52:1f:36:33:3c:68:33:60:56:f7:6f:6a:77:f8: 31:b2:7d:31:68:6d:bc:06:b2:ff:8e:ab:41:a2:09:70:54:2b: 1b:f6:0d:a1:80:a7:5c:4c:f4:86:bf:89:bb:58:c0:04:26:c7: 7e:bc:45:d1:da:f5:b0:04:bd:d9:c5:ae:a9:13:1d:4e:43:72: 99:6c:e8:97:a7:fb:19:3f:e4:f1:29:bf:d3:95:51:51:a3:59: 04:83:9c:29:fb:9c:4f:2d:d2:4d:2f:40:70:7d:35:3e:d1:67: 5a:2c:6e:43:4b:55:d1:ca:8c:95:cc:74:f2:08:95:fb:2e:84: 16:85:47:f9:b8:54:72:31:2a:2e:16:36:ef:6c:6a:bd:2e:1f: 2b:3e:cb:1e:cd:78:08:44:9f:da:ce:28:a3:2b:16:71:44:c7: 59:92:65:ae:ba:bd:37:48:b2:b1:62:0c:ec:94:ff:01:b5:fe: 83:36:ca:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0kNTqXsJDezfTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZjUxNmY4YTEtNjczYS00ZWY1LWIzYjctNTUzZTc0Yzk1NzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTh1kLxx/I+NW3PwJLd/zntndALS4LxhQcT8 nrY1zbyh++GH5KqnCgCcCG7Q/PEnNMYVvi94tQ8Cp2N6Dhzzctfw0hcKFljUXDSk 8XsuuFb94B6J/97zo/M4ELPL9WLNek1fLCawXUfeZ/hLFVxVZDleHrTN+24dYBEu ppJ6N2NIRtWiwIsEMWXka+E+sCeQ+wpOT6P6yZq/6lvzKP0om5YxR3tJLTKnQ8Hu FQSLjlhzn9wz+umV26xOPTHTht/mWaee61Qj1PTqLCAp5+og0UhP+0+4atCwudjs 9yXeoLZvVZxyxQEY5UwGQFmi3VMvJVxijrtSZFaDsnGcSd1Y7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaC9dbKd74px5HMvEz3Ov3Ka0eFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTllN2UyOGUtMTE2NC0z MmFjLWE4MzEtMDlmZDIxNTMxZTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF93SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5q3/Uv5MutAb6xvcY+0qKJUCkBFdSVW50Nn6jeXU/IBpxT8aH9Msgn al/0C1eZdEoTpT0hFNjwOwk72zK1fLONrKn3j+Fj4UTtSBxSHzYzPGgzYFb3b2p3 +DGyfTFobbwGsv+Oq0GiCXBUKxv2DaGAp1xM9Ia/ibtYwAQmx368RdHa9bAEvdnF rqkTHU5Dcpls6Jen+xk/5PEpv9OVUVGjWQSDnCn7nE8t0k0vQHB9NT7RZ1osbkNL VdHKjJXMdPIIlfsuhBaFR/m4VHIxKi4WNu9sar0uHys+yx7NeAhEn9rOKKMrFnFE x1mSZa66vTdIsrFiDOyU/wG1/oM2yhE= -----END CERTIFICATE-----Generated at Wed Nov 5 03:01:04 2025 by rpki-client