$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d61c563-3688-30a9-a238-50b529889676.roa File: 8d61c563-3688-30a9-a238-50b529889676.roa (raw, json) Hash identifier: uALBAyMK7DZjUeESige2rYZyb+Zv8FnoOFPFSJkAmLE= Subject key identifier: E0:97:F1:FB:20:2E:ED:3F:FA:2B:FF:D8:E3:0B:D4:AD:50:BA:D3:A3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC76919E188BEF5876EFF90 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d61c563-3688-30a9-a238-50b529889676.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 16625 IP address blocks: 23.223.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:69:19:e1:88:be:f5:87:6e:ff:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=bc37bae6-c70e-4f43-9a8b-02cc528fb490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:69:fe:9d:a4:c1:14:b7:43:b5:54:71:91:13: 57:0d:71:eb:4c:48:e1:ed:78:29:c8:2c:6f:db:65: 0a:1b:bb:3f:b1:6a:5e:ad:7e:29:9c:10:0d:3a:f7: a4:2f:db:67:26:5a:7d:d8:6e:f1:b0:ae:e8:3a:dc: 1e:7c:22:62:65:1c:0a:b6:2a:63:a3:45:67:5b:91: 25:09:66:a1:0a:e9:d2:47:c6:9f:35:40:53:c8:2b: 48:ca:50:ec:5c:97:3e:ea:80:16:2d:bc:98:15:b1: c5:fc:52:ba:e1:58:5b:5d:cb:06:a7:d9:c2:75:41: a3:d2:f0:04:bf:2f:b6:88:ff:1e:61:15:2e:90:30: c3:1f:e0:31:a0:23:b8:b5:70:e4:32:56:18:d4:95: 7c:8b:a2:87:58:ad:40:af:ff:d4:17:32:7a:e0:80: e0:a8:7d:c7:ab:db:cb:8a:10:26:2b:12:2c:8c:31: f5:37:56:f2:b4:3a:a9:f6:51:56:b5:c4:cb:7d:7d: 36:7d:d8:84:ee:4e:59:54:98:e6:36:5a:fe:d4:50: 7b:ba:ec:1d:ce:86:45:0c:8b:28:58:9a:96:da:49: 95:0b:a6:c3:1d:c7:86:3f:a0:ac:7a:c3:c9:22:fa: f2:2a:fe:48:43:f0:ef:2a:34:3d:7a:92:5b:e6:a1: 60:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:97:F1:FB:20:2E:ED:3F:FA:2B:FF:D8:E3:0B:D4:AD:50:BA:D3:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d61c563-3688-30a9-a238-50b529889676.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:85:5a:47:05:55:10:f3:1c:e9:f4:16:06:6d:fa:50:c7:c2: f6:0b:5c:56:cb:4f:1b:29:8a:b1:1d:7a:07:9f:50:89:e4:f5: 78:be:0e:94:c5:38:41:89:93:d0:60:dd:a0:c4:ea:0b:16:b5: c2:a3:9b:5d:6c:21:7c:e5:38:50:08:e8:6e:fa:48:3c:4c:de: d9:ba:40:1d:c9:ba:c3:d7:16:6a:5c:00:fc:51:39:20:45:b9: a3:8b:80:63:3e:db:7e:c2:b3:d3:0f:e8:e3:c9:50:f6:b0:b1: 62:4e:47:9a:f0:4e:9c:06:5a:3e:52:30:1c:c0:ab:4b:79:22: 24:dd:12:1d:10:86:19:65:8c:b3:30:e2:67:fd:27:f2:bd:76: c2:7e:f4:a6:7c:1e:71:89:7a:be:8b:10:3a:1b:28:aa:6b:a1: 17:d8:59:8b:3f:99:a9:6b:53:79:3d:70:1e:ff:6d:33:86:28: a6:43:d6:70:2c:b5:68:10:6e:11:a5:4f:35:8b:4f:74:70:ac: e9:80:31:fa:df:1b:71:5a:a7:1d:27:dc:d7:8f:51:c8:34:76: 0f:4a:1c:79:c4:94:7c:92:75:9b:72:96:42:04:36:6e:81:77: ea:b9:64:88:06:cd:bb:72:13:48:ae:21:23:a2:10:ed:6d:30: b0:eb:ac:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2kZ4Yi+9Ydu/5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk YmMzN2JhZTYtYzcwZS00ZjQzLTlhOGItMDJjYzUyOGZiNDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmn+naTBFLdDtVRxkRNXDXHrTEjh7XgpyCxv 22UKG7s/sWperX4pnBANOvekL9tnJlp92G7xsK7oOtwefCJiZRwKtipjo0VnW5El CWahCunSR8afNUBTyCtIylDsXJc+6oAWLbyYFbHF/FK64VhbXcsGp9nCdUGj0vAE vy+2iP8eYRUukDDDH+AxoCO4tXDkMlYY1JV8i6KHWK1Ar//UFzJ64IDgqH3Hq9vL ihAmKxIsjDH1N1bytDqp9lFWtcTLfX02fdiE7k5ZVJjmNlr+1FB7uuwdzoZFDIso WJqW2kmVC6bDHceGP6CsesPJIvryKv5IQ/DvKjQ9epJb5qFguQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCX8fsgLu0/+iv/2OML1K1QutOjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGQ2MWM1NjMtMzY4OC0z MGE5LWEyMzgtNTBiNTI5ODg5Njc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9/MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSFWkcFVRDzHOn0FgZt+lDHwvYLXFbLTxspirEdegefUInk9Xi+DpTF OEGJk9Bg3aDE6gsWtcKjm11sIXzlOFAI6G76SDxM3tm6QB3JusPXFmpcAPxROSBF uaOLgGM+237Cs9MP6OPJUPawsWJOR5rwTpwGWj5SMBzAq0t5IiTdEh0QhhlljLMw 4mf9J/K9dsJ+9KZ8HnGJer6LEDobKKproRfYWYs/malrU3k9cB7/bTOGKKZD1nAs tWgQbhGlTzWLT3RwrOmAMfrfG3Fapx0n3NePUcg0dg9KHHnElHySdZtylkIENm6B d+q5ZIgGzbtyE0iuISOiEO1tMLDrrP4= -----END CERTIFICATE-----Generated at Wed Nov 5 03:56:33 2025 by rpki-client