$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86ae2dd1-46c9-31f2-b936-fa9f23c454d5.roa File: 86ae2dd1-46c9-31f2-b936-fa9f23c454d5.roa (raw, json) Hash identifier: 1ol6niWA0Bs+g83kVj07KfHuG5i3/BngcHwLuhCrYwI= Subject key identifier: A5:33:5A:F4:82:0F:96:70:F0:A9:3D:69:A7:C0:12:F0:DC:9A:8A:98 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE4613EE881AFDFF870AB3B40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86ae2dd1-46c9-31f2-b936-fa9f23c454d5.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.0.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:3e:e8:81:af:df:f8:70:ab:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=8b641a22-b450-4e1c-95db-ed19f8b0d8c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3d:d8:b9:32:93:15:a4:2a:39:07:29:ba:d3: 1f:3b:27:e2:3a:5f:7b:6c:fe:b5:4e:2d:2c:ac:55: 7d:28:61:be:90:ee:81:e7:37:b9:61:a2:e9:b9:41: a9:f1:7f:ef:3f:d5:8a:0e:9a:3e:69:3f:60:a7:f1: 32:91:11:bc:97:d8:6a:3c:79:d0:1e:26:06:89:fa: fc:71:20:b6:04:cc:58:78:0b:78:6a:56:ba:c5:d0: 2e:8f:95:66:79:20:9c:52:64:45:76:70:d0:e7:57: 76:7d:5c:4b:42:6f:9d:69:7c:61:00:49:ae:4c:ce: 5f:f4:c0:9c:2d:91:38:e2:99:74:f8:14:b8:7b:d7: 40:5e:75:ec:37:58:59:69:ec:4a:a6:33:02:1a:cd: d0:f3:3e:8b:74:28:9a:5b:8f:16:9f:32:ba:3b:42: 96:32:a3:22:07:3a:03:67:78:ae:41:00:94:46:c8: 93:a8:ac:63:72:60:d4:2c:f5:df:ae:ac:80:14:d4: a3:fa:9f:16:61:2f:df:99:86:5e:0b:2f:d8:de:aa: 53:2d:f2:12:f7:dd:7b:97:60:70:20:c4:55:2d:5e: 93:38:b5:71:97:69:f9:45:40:ac:0d:8a:58:4c:1a: 3e:d2:36:29:99:b4:5b:dd:b6:ce:3c:e3:f3:00:e6: a1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:33:5A:F4:82:0F:96:70:F0:A9:3D:69:A7:C0:12:F0:DC:9A:8A:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86ae2dd1-46c9-31f2-b936-fa9f23c454d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.0.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:89:5c:be:8c:1e:25:64:22:d1:f2:29:f6:da:73:cc:75:e8: c2:68:61:72:d4:50:fa:e3:2f:1a:82:00:68:d3:09:52:6c:66: d3:1f:d7:aa:d9:1c:c3:89:7c:cc:92:d4:65:88:97:33:04:e9: cd:56:1a:a7:7b:f7:12:95:95:72:01:df:a6:84:5e:65:28:20: 4f:8c:aa:43:e9:63:25:c0:17:1a:30:86:93:a9:b8:03:d6:1e: 09:7c:9f:3c:fa:82:ca:c4:1e:87:e1:67:4c:67:89:e2:d8:12: 6d:b7:63:14:5d:6a:29:a5:6c:6f:5b:33:71:f1:23:15:40:04: 33:d2:4c:ad:b7:41:29:29:a2:e4:77:d5:8b:09:71:f9:cb:6c: 85:74:83:5d:3b:10:fb:7f:ea:55:c2:ad:f7:93:3c:b9:19:14: 57:58:e5:24:a0:f7:f7:88:d9:90:f1:b4:ab:7b:6d:db:25:f5: a4:cb:8a:d5:74:0f:b3:82:5c:ce:c6:e1:e6:1f:5c:9b:65:8a: 6f:ac:d6:6a:b8:13:05:fe:61:db:e9:e5:3b:29:1d:54:03:b7: 9c:f0:c9:97:02:ed:06:44:ef:b8:81:d4:1d:54:d1:fd:74:9a: 56:a5:08:fc:58:41:06:44:f6:34:58:35:ea:e0:53:94:b5:cc: c8:2c:8e:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYT7oga/f+HCrO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk OGI2NDFhMjItYjQ1MC00ZTFjLTk1ZGItZWQxOWY4YjBkOGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1z3YuTKTFaQqOQcputMfOyfiOl97bP61Ti0s rFV9KGG+kO6B5ze5YaLpuUGp8X/vP9WKDpo+aT9gp/EykRG8l9hqPHnQHiYGifr8 cSC2BMxYeAt4ala6xdAuj5VmeSCcUmRFdnDQ51d2fVxLQm+daXxhAEmuTM5f9MCc LZE44pl0+BS4e9dAXnXsN1hZaexKpjMCGs3Q8z6LdCiaW48WnzK6O0KWMqMiBzoD Z3iuQQCURsiTqKxjcmDULPXfrqyAFNSj+p8WYS/fmYZeCy/Y3qpTLfIS9917l2Bw IMRVLV6TOLVxl2n5RUCsDYpYTBo+0jYpmbRb3bbOPOPzAOah1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUzWvSCD5Zw8Kk9aafAEvDcmoqYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODZhZTJkZDEtNDZjOS0z MWYyLWI5MzYtZmE5ZjIzYzQ1NGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwDcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2JXL6MHiVkItHyKfbac8x16MJoYXLUUPrjLxqCAGjTCVJsZtMf16rZ HMOJfMyS1GWIlzME6c1WGqd79xKVlXIB36aEXmUoIE+MqkPpYyXAFxowhpOpuAPW Hgl8nzz6gsrEHofhZ0xnieLYEm23YxRdaimlbG9bM3HxIxVABDPSTK23QSkpouR3 1YsJcfnLbIV0g107EPt/6lXCrfeTPLkZFFdY5SSg9/eI2ZDxtKt7bdsl9aTLitV0 D7OCXM7G4eYfXJtlim+s1mq4EwX+Ydvp5TspHVQDt5zwyZcC7QZE77iB1B1U0f10 mlalCPxYQQZE9jRYNergU5S1zMgsjrg= -----END CERTIFICATE-----Generated at Tue Nov 4 22:42:34 2025 by rpki-client