$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/77bd9780-2a7d-3bd8-be01-17dac1e8a7dc.roa File: 77bd9780-2a7d-3bd8-be01-17dac1e8a7dc.roa (raw, json) Hash identifier: F3ahAkWCYVN3zwOpRtqkO95H+qIV626AqDFEVlT/tYM= Subject key identifier: F3:E3:7A:FF:F2:07:58:2C:E3:4A:23:8A:1D:91:F8:A3:A5:82:6E:5E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC76C082F9384D32ADA8680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/77bd9780-2a7d-3bd8-be01-17dac1e8a7dc.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.220.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:6c:08:2f:93:84:d3:2a:da:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=bc608c60-fe83-4f68-acf6-aa265d674b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e3:0b:30:e1:85:e3:81:fa:b4:18:e9:1a:f7: 81:d4:6d:62:cc:36:7e:95:3e:68:05:fd:43:75:df: 87:20:ec:6d:6f:99:b7:20:16:97:93:b5:8f:4e:97: 47:f7:1e:d1:3d:56:45:52:58:f0:7e:9a:a5:ce:e6: 8b:1f:6a:dc:62:5b:97:b3:8e:56:51:0b:48:31:30: d2:9b:4a:f9:98:f7:a1:67:21:c0:fa:9d:80:52:f2: 87:a8:a2:4b:eb:c2:13:ef:09:8a:dc:0b:de:32:a8: 62:ff:61:65:d3:6a:9e:71:56:97:81:fd:59:46:9a: 6e:e0:0f:68:7e:f3:a8:61:a3:54:e5:c8:7d:00:b1: a7:b5:e3:8f:fd:b4:6e:06:6b:15:f2:4f:77:f1:48: ec:a7:90:88:4a:c2:63:76:76:a2:7f:4f:fa:ad:83: ec:cd:e3:7b:03:13:fa:f3:b7:9d:c7:f9:44:d1:43: cf:2e:14:84:23:9d:2a:61:db:b8:1a:17:88:a8:4b: fc:5d:fc:cc:f8:3b:86:b3:a3:db:52:ce:80:c3:e5: 58:54:cc:37:cd:ec:6d:bf:41:c4:82:68:24:80:09: 3e:74:52:d7:53:7c:e9:dc:66:85:c4:1f:34:d9:87: 43:eb:81:5b:c2:02:38:eb:45:2c:f0:7e:72:57:09: ea:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E3:7A:FF:F2:07:58:2C:E3:4A:23:8A:1D:91:F8:A3:A5:82:6E:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/77bd9780-2a7d-3bd8-be01-17dac1e8a7dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:d1:ae:4e:17:09:bc:b6:c9:26:76:44:f4:ba:91:09:d3:0b: f8:a0:c0:7a:87:1d:b3:0f:3e:d0:97:7d:68:87:3f:d8:d7:10: 6e:7f:cd:6d:94:05:63:64:e6:11:48:f7:7e:ba:eb:df:b7:3d: 5b:c4:44:f3:b1:3c:59:61:03:ff:52:2d:83:a2:f4:ed:0a:b6: a7:bd:0b:8b:5b:02:bb:4d:23:61:b3:28:ce:d1:ce:e9:e6:b1: e5:92:41:d5:88:2a:15:89:82:6b:e0:ea:28:b7:17:23:40:21: f4:82:56:c3:2b:e0:d0:52:4b:e2:be:c7:1f:1c:ed:9b:0c:a1: f4:48:06:24:7a:b8:f3:d2:0a:62:6f:44:70:8c:93:40:17:b4: 4d:3b:8f:30:a2:f3:3d:91:25:70:eb:fd:74:4a:6e:78:19:50: fd:57:63:a8:8f:ec:25:63:db:a8:a7:c8:8e:0d:05:16:a6:7a: f8:b2:d4:3e:d5:2f:06:05:24:5f:bb:f1:bb:1e:ad:27:9f:26: 15:c2:ce:8b:3e:8c:f5:9b:66:8c:a4:2f:ef:48:49:5b:ca:88: 8c:ce:0e:76:4c:e6:1e:70:0e:f8:ee:a6:c4:08:da:bc:4e:f0: a6:34:58:f2:01:7c:f5:98:45:50:bd:f7:75:c2:5f:40:7e:44: 4b:d2:5f:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2wIL5OE0yrahoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk YmM2MDhjNjAtZmU4My00ZjY4LWFjZjYtYWEyNjVkNjc0YjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOMLMOGF44H6tBjpGveB1G1izDZ+lT5oBf1D dd+HIOxtb5m3IBaXk7WPTpdH9x7RPVZFUljwfpqlzuaLH2rcYluXs45WUQtIMTDS m0r5mPehZyHA+p2AUvKHqKJL68IT7wmK3AveMqhi/2Fl02qecVaXgf1ZRppu4A9o fvOoYaNU5ch9ALGnteOP/bRuBmsV8k938Ujsp5CISsJjdnaif0/6rYPszeN7AxP6 87edx/lE0UPPLhSEI50qYdu4GheIqEv8XfzM+DuGs6PbUs6Aw+VYVMw3zextv0HE gmgkgAk+dFLXU3zp3GaFxB802YdD64FbwgI460Us8H5yVwnqIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPjev/yB1gs40ojih2R+KOlgm5eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzdiZDk3ODAtMmE3ZC0z YmQ4LWJlMDEtMTdkYWMxZThhN2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9yhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7Rrk4XCby2ySZ2RPS6kQnTC/igwHqHHbMPPtCXfWiHP9jXEG5/zW2U BWNk5hFI936669+3PVvERPOxPFlhA/9SLYOi9O0Ktqe9C4tbArtNI2GzKM7Rzunm seWSQdWIKhWJgmvg6ii3FyNAIfSCVsMr4NBSS+K+xx8c7ZsMofRIBiR6uPPSCmJv RHCMk0AXtE07jzCi8z2RJXDr/XRKbngZUP1XY6iP7CVj26inyI4NBRameviy1D7V LwYFJF+78bserSefJhXCzos+jPWbZoykL+9ISVvKiIzODnZM5h5wDvjupsQI2rxO 8KY0WPIBfPWYRVC993XCX0B+REvSX6Q= -----END CERTIFICATE-----Generated at Wed Nov 5 03:00:15 2025 by rpki-client