$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c77beae-81f0-36ed-964e-2db1d9a6dae4.roa File: 6c77beae-81f0-36ed-964e-2db1d9a6dae4.roa (raw, json) Hash identifier: vWgZEMixCaRmcErNgL4iYC6qbikPeJx8i4RBq+gdfOQ= Subject key identifier: 01:B5:DE:53:A4:68:21:CE:E4:FA:6B:C5:E6:71:69:A0:57:BB:54:B7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AECC3556D45A8FDE24C37E400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c77beae-81f0-36ed-964e-2db1d9a6dae4.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.221.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:55:6d:45:a8:fd:e2:4c:37:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=4c87cfcb-d930-4eab-8313-784b6d5ca22e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5f:b7:c4:48:c4:85:d7:3b:4e:c7:75:57:cc: f3:98:ef:ad:3f:25:4d:1f:ee:4b:3a:db:52:3f:62: 14:8c:c3:98:55:6b:fe:9a:35:79:1d:fd:a1:32:09: 1c:eb:d0:7b:db:a5:78:68:2e:59:d5:c2:b3:77:ba: d4:13:f1:01:c6:fb:c4:eb:5a:18:52:94:52:05:83: d2:42:a2:83:42:3c:76:37:34:9c:94:b9:5e:f6:8e: 59:ee:f2:4e:71:63:2c:f2:14:c2:21:7e:74:a7:2a: ca:1e:3d:bd:cb:13:c9:0d:9f:e4:8c:67:b7:6b:15: 15:58:c7:0c:7f:62:86:cc:66:55:a1:f2:5c:30:03: a5:2b:04:1a:47:37:79:0b:27:ed:8f:00:d7:df:53: 30:da:d7:40:40:ea:b4:17:5c:d6:32:38:c5:62:14: 45:20:7c:ef:31:f6:11:89:c5:5e:91:cd:95:0b:86: ff:5f:f0:45:ed:0f:70:52:16:54:d7:28:2d:92:10: 8b:40:1d:04:3e:40:38:50:d3:52:2c:19:e3:64:46: 08:ed:1e:5e:7c:a6:32:ec:b8:eb:c5:23:a7:bc:a4: a7:a4:d9:40:b7:76:87:5e:6a:67:3b:12:67:90:4e: de:54:6d:4d:ac:89:44:16:db:3b:a3:79:62:f1:15: c4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B5:DE:53:A4:68:21:CE:E4:FA:6B:C5:E6:71:69:A0:57:BB:54:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c77beae-81f0-36ed-964e-2db1d9a6dae4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:00:52:83:7d:ee:c0:b4:b8:c9:c6:92:56:66:a7:aa:4d:16: cf:4d:e0:f7:8c:cc:55:bf:f3:3d:1b:8e:24:5b:20:fe:f7:1d: e4:bb:be:ab:cc:ea:72:dd:e2:e9:ca:51:3a:f6:39:c9:da:4a: bd:f8:ad:93:44:11:db:7f:b6:ed:84:14:f7:ef:e9:e9:57:83: 19:0d:63:d0:0d:15:82:95:45:d7:dc:b7:3e:19:38:53:0a:81: 87:ba:8e:be:26:af:e9:82:56:8e:2b:7c:04:2e:18:15:ed:dd: 65:0c:1f:3e:ea:d1:ed:d9:5e:11:95:d8:ee:49:d4:31:1a:5f: d1:49:f6:be:af:23:67:b3:3e:c0:4a:38:82:34:b5:e6:2d:02: 2c:95:5e:b0:a9:af:97:a1:f9:49:32:80:e1:5b:3e:97:f3:aa: c8:03:ca:eb:54:e1:c5:da:11:42:86:04:ac:2b:c2:5c:6a:7f: 0c:1f:b2:57:ec:89:6d:91:74:02:af:fe:cc:b5:3b:0f:c7:48: 13:9b:bd:44:ef:39:55:83:32:72:98:63:ce:44:88:45:b8:11: 69:4d:72:75:e4:01:24:92:79:fb:4f:d1:a2:8c:23:ab:86:90: a9:72:49:49:fe:71:6f:39:4d:1b:49:b0:34:ad:6d:b4:ea:14: a8:c9:a2:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw1VtRaj94kw35AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NGM4N2NmY2ItZDkzMC00ZWFiLTgzMTMtNzg0YjZkNWNhMjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF+3xEjEhdc7Tsd1V8zzmO+tPyVNH+5LOttS P2IUjMOYVWv+mjV5Hf2hMgkc69B726V4aC5Z1cKzd7rUE/EBxvvE61oYUpRSBYPS QqKDQjx2NzSclLle9o5Z7vJOcWMs8hTCIX50pyrKHj29yxPJDZ/kjGe3axUVWMcM f2KGzGZVofJcMAOlKwQaRzd5CyftjwDX31Mw2tdAQOq0F1zWMjjFYhRFIHzvMfYR icVekc2VC4b/X/BF7Q9wUhZU1ygtkhCLQB0EPkA4UNNSLBnjZEYI7R5efKYy7Ljr xSOnvKSnpNlAt3aHXmpnOxJnkE7eVG1NrIlEFts7o3li8RXEmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAG13lOkaCHO5PprxeZxaaBXu1S3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmM3N2JlYWUtODFmMC0z NmVkLTk2NGUtMmRiMWQ5YTZkYWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF92MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoAUoN97sC0uMnGklZmp6pNFs9N4PeMzFW/8z0bjiRbIP73HeS7vqvM 6nLd4unKUTr2OcnaSr34rZNEEdt/tu2EFPfv6elXgxkNY9ANFYKVRdfctz4ZOFMK gYe6jr4mr+mCVo4rfAQuGBXt3WUMHz7q0e3ZXhGV2O5J1DEaX9FJ9r6vI2ezPsBK OII0teYtAiyVXrCpr5eh+UkygOFbPpfzqsgDyutU4cXaEUKGBKwrwlxqfwwfslfs iW2RdAKv/sy1Ow/HSBObvUTvOVWDMnKYY85EiEW4EWlNcnXkASSSeftP0aKMI6uG kKlySUn+cW85TRtJsDStbbTqFKjJosg= -----END CERTIFICATE-----Generated at Wed Nov 5 00:04:14 2025 by rpki-client