$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fd8a58e-620e-3a3b-afab-b7c249b0ac16.roa File: 5fd8a58e-620e-3a3b-afab-b7c249b0ac16.roa (raw, json) Hash identifier: ZEO/YNlfPuo9vFtwhXtsqgcs5pVtUU7970vgo5k04d4= Subject key identifier: 88:72:C4:C3:7C:FF:19:76:F4:58:C3:E5:5A:7B:83:70:C6:8A:30:F1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC76CC2A18FB1B61D8C5070 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fd8a58e-620e-3a3b-afab-b7c249b0ac16.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 16625 IP address blocks: 23.220.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:6c:c2:a1:8f:b1:b6:1d:8c:50:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=e12dd5a6-2b3e-4ba9-aa0f-6b534f6731c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bd:65:8a:ba:db:b8:49:46:a7:78:b8:c6:98: 3c:33:7b:ff:48:bd:ff:f3:b6:95:13:e3:dd:4d:44: 8f:49:92:5d:88:01:51:bb:fa:c5:dd:13:f3:53:27: a6:a5:69:35:a1:96:ac:4f:fd:5e:1a:e5:12:62:e3: e3:7f:0f:ba:80:86:e8:10:c5:c0:6d:63:a0:1c:6a: 81:b3:ac:2c:ae:3a:dd:da:b7:60:e9:96:c1:96:f7: be:f7:b9:46:97:5c:cf:87:b2:b1:00:8e:cd:a7:34: 68:d5:19:2e:90:35:a1:42:42:5e:66:15:55:7c:88: d3:13:86:1e:17:bf:d7:30:81:c9:99:fc:e6:ab:1f: ed:fc:86:3a:17:16:16:4d:98:57:ef:45:45:5f:83: ba:e3:31:2c:02:28:c0:1b:0a:77:7e:3f:a5:ce:3f: 45:d9:51:66:33:c0:65:b9:93:ad:55:02:0d:61:46: b5:c0:06:0a:9f:d4:cd:2e:11:03:b5:75:1a:ca:15: a1:59:4c:91:c4:8d:e0:e9:bc:2d:e1:dc:2a:d8:96: 09:51:be:04:f1:b1:c0:4e:43:8f:2e:2e:e5:82:6e: fb:e6:c5:91:83:ac:3b:25:18:a5:60:89:ae:fb:1e: e5:f6:93:c5:d4:65:2f:21:35:cc:d7:10:ff:aa:a3: a1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:72:C4:C3:7C:FF:19:76:F4:58:C3:E5:5A:7B:83:70:C6:8A:30:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fd8a58e-620e-3a3b-afab-b7c249b0ac16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:07:89:8d:03:87:d4:aa:b6:d5:42:fb:36:06:3e:3d:b6:3b: b4:b1:9d:6f:cc:2c:93:bc:2a:ca:4b:02:b6:a9:ee:9c:fb:54: f1:7b:6b:8b:20:e3:8c:f3:f1:c0:64:a7:63:2e:c3:63:03:09: 92:1b:c2:22:b5:8f:0f:0a:1e:2b:8c:7a:32:6b:0a:37:cd:1f: 8f:11:e9:c3:29:e5:9d:ba:3e:0f:5b:9c:db:60:a6:bd:15:69: e8:b5:6d:48:d4:7e:cf:d2:65:20:7f:f7:cd:f6:95:9d:ca:c8: c4:19:f8:a1:5b:f5:79:6a:a7:90:4c:3a:4d:e1:14:09:be:8c: d3:08:72:84:1f:bd:24:d5:6b:89:1f:d1:a5:13:9b:b5:44:d7: 52:c0:e3:12:4d:b3:13:95:b1:6b:e6:78:c4:82:fa:9e:11:6f: e0:af:a0:75:61:bd:aa:cc:94:53:ed:1c:98:87:f7:bd:57:9c: 17:f0:02:f9:2e:84:1a:47:31:a1:e2:41:d4:1d:bd:59:cf:f1: 5a:ac:44:71:f9:27:84:8d:19:fa:d9:52:0e:41:01:71:2c:e0: 7c:80:6a:68:45:28:5e:f0:77:8d:5b:d2:c9:c3:e2:17:a2:64: b0:60:b3:cf:b9:ac:7b:7e:e5:d0:c9:c0:d5:d5:e0:e1:1a:b5: 2c:c3:09:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2zCoY+xth2MUHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ZTEyZGQ1YTYtMmIzZS00YmE5LWFhMGYtNmI1MzRmNjczMWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL1lirrbuElGp3i4xpg8M3v/SL3/87aVE+Pd TUSPSZJdiAFRu/rF3RPzUyempWk1oZasT/1eGuUSYuPjfw+6gIboEMXAbWOgHGqB s6wsrjrd2rdg6ZbBlve+97lGl1zPh7KxAI7NpzRo1RkukDWhQkJeZhVVfIjTE4Ye F7/XMIHJmfzmqx/t/IY6FxYWTZhX70VFX4O64zEsAijAGwp3fj+lzj9F2VFmM8Bl uZOtVQINYUa1wAYKn9TNLhEDtXUayhWhWUyRxI3g6bwt4dwq2JYJUb4E8bHATkOP Li7lgm775sWRg6w7JRilYImu+x7l9pPF1GUvITXM1xD/qqOhjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhyxMN8/xl29FjD5Vp7g3DGijDxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWZkOGE1OGUtNjIwZS0z YTNiLWFmYWItYjdjMjQ5YjBhYzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9zYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIHiY0Dh9SqttVC+zYGPj22O7SxnW/MLJO8KspLArap7pz7VPF7a4sg 44zz8cBkp2Muw2MDCZIbwiK1jw8KHiuMejJrCjfNH48R6cMp5Z26Pg9bnNtgpr0V aei1bUjUfs/SZSB/9832lZ3KyMQZ+KFb9Xlqp5BMOk3hFAm+jNMIcoQfvSTVa4kf 0aUTm7VE11LA4xJNsxOVsWvmeMSC+p4Rb+CvoHVhvarMlFPtHJiH971XnBfwAvku hBpHMaHiQdQdvVnP8VqsRHH5J4SNGfrZUg5BAXEs4HyAamhFKF7wd41b0snD4hei ZLBgs8+5rHt+5dDJwNXV4OEatSzDCRI= -----END CERTIFICATE-----Generated at Tue Nov 4 20:56:53 2025 by rpki-client