$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4d8475b-dc8a-3980-b250-ef3c99c18a2e.roa File: c4d8475b-dc8a-3980-b250-ef3c99c18a2e.roa (raw, json) Hash identifier: wt1/f8jMMzEaEFLz93NvUylxUyWItIeqKO8QEIKx97s= Subject key identifier: DF:70:21:FF:99:54:BB:49:8A:64:EF:C9:F9:50:7F:B5:BD:67:FB:0C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC76D5D2D74DC8123333980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4d8475b-dc8a-3980-b250-ef3c99c18a2e.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.220.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:6d:5d:2d:74:dc:81:23:33:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=6b911f72-0703-4936-ae58-19fbb089da3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5a:77:40:d0:f8:f6:6b:56:25:25:ba:e4:e6: ea:91:47:a4:6c:7d:f1:f7:61:63:12:a2:39:65:87: a3:46:83:74:49:db:62:03:c0:a2:f2:8d:76:1e:5a: 6f:a0:e1:33:6c:2e:67:79:d2:e9:27:bd:49:94:c3: 87:d8:c8:6d:41:b7:0d:6d:68:c1:5f:f3:34:05:80: 0b:3b:11:ea:1c:52:40:f8:28:73:e3:59:e8:21:1d: 59:a4:50:59:08:b8:b2:f0:0c:c1:98:07:32:d2:d8: 71:7d:ce:20:20:69:aa:b5:77:dc:1d:fb:94:b9:8c: 1f:7a:89:43:e3:73:6b:59:2b:ba:23:9c:35:0b:15: 32:1e:9b:84:f3:a8:a6:9d:53:e3:24:6e:85:04:c0: 1e:c6:d2:38:c3:e6:e6:3c:20:bc:a9:b5:18:42:88: c5:f4:3c:c2:fa:ea:8c:11:9e:f0:55:3a:9b:93:86: cd:92:27:24:ea:26:50:a5:fa:74:70:05:9a:a1:f3: 5b:40:95:53:08:90:2f:1b:20:b1:46:cb:7f:8d:1b: ca:74:ab:59:d5:63:bc:5d:05:79:ce:19:d8:2b:42: e6:c6:82:5d:2d:c4:51:45:59:c8:9e:9a:2c:ca:12: 5a:de:aa:fd:bd:2e:47:ce:98:de:53:c3:44:07:41: fb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:70:21:FF:99:54:BB:49:8A:64:EF:C9:F9:50:7F:B5:BD:67:FB:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4d8475b-dc8a-3980-b250-ef3c99c18a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:ca:3a:01:13:99:c8:5b:ca:1d:cf:0d:8d:34:dd:56:33:d7: 37:37:54:11:bd:95:1c:39:9c:d7:bb:6b:b9:35:b0:c5:54:65: 63:dc:22:97:6d:d5:f7:45:49:0f:0d:d1:a2:51:76:ec:e2:fd: ba:2e:63:3d:1d:57:90:b0:f3:61:0d:a6:e6:52:5d:b8:fe:3f: c9:10:e6:5e:a1:29:9e:5b:d5:bd:39:c4:3c:b1:2a:51:20:9d: 7d:78:83:fa:29:2b:fd:e1:e6:96:19:6c:9b:cb:68:42:e6:b8: 78:11:04:37:a6:a8:da:8a:0c:2d:6e:2f:83:75:d6:ee:1a:d1: 66:f4:0c:b9:2a:09:d2:24:92:40:f6:e4:fb:c0:c0:5b:c2:97: b7:6b:69:c6:17:ed:f0:e6:b6:37:74:f7:61:28:c9:ed:44:ba: 97:bf:47:22:1e:49:f7:0b:cd:73:b4:fc:b6:d4:95:0f:13:22: 59:cf:85:f2:a2:55:31:14:02:9d:e2:71:08:f6:32:66:d6:5b: a9:37:be:f5:e9:51:f2:af:c8:f7:47:38:42:72:e6:2a:c6:66: 23:56:53:a4:38:61:51:73:1b:1d:86:a9:a3:d0:18:ff:08:65: 87:2e:ba:53:a1:fc:01:87:ce:0c:40:6a:6d:96:c4:90:0b:2f: a4:6d:65:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx21dLXTcgSMzOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NmI5MTFmNzItMDcwMy00OTM2LWFlNTgtMTlmYmIwODlkYTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlp3QND49mtWJSW65ObqkUekbH3x92FjEqI5 ZYejRoN0SdtiA8Ci8o12HlpvoOEzbC5nedLpJ71JlMOH2MhtQbcNbWjBX/M0BYAL OxHqHFJA+Chz41noIR1ZpFBZCLiy8AzBmAcy0thxfc4gIGmqtXfcHfuUuYwfeolD 43NrWSu6I5w1CxUyHpuE86imnVPjJG6FBMAextI4w+bmPCC8qbUYQojF9DzC+uqM EZ7wVTqbk4bNkick6iZQpfp0cAWaofNbQJVTCJAvGyCxRst/jRvKdKtZ1WO8XQV5 zhnYK0LmxoJdLcRRRVnInposyhJa3qr9vS5HzpjeU8NEB0H7nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9wIf+ZVLtJimTvyflQf7W9Z/sMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzRkODQ3NWItZGM4YS0z OTgwLWIyNTAtZWYzYzk5YzE4YTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9z7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLKOgETmchbyh3PDY003VYz1zc3VBG9lRw5nNe7a7k1sMVUZWPcIpdt 1fdFSQ8N0aJRduzi/bouYz0dV5Cw82ENpuZSXbj+P8kQ5l6hKZ5b1b05xDyxKlEg nX14g/opK/3h5pYZbJvLaELmuHgRBDemqNqKDC1uL4N11u4a0Wb0DLkqCdIkkkD2 5PvAwFvCl7dracYX7fDmtjd092Eoye1Eupe/RyIeSfcLzXO0/LbUlQ8TIlnPhfKi VTEUAp3icQj2MmbWW6k3vvXpUfKvyPdHOEJy5irGZiNWU6Q4YVFzGx2GqaPQGP8I ZYcuulOh/AGHzgxAam2WxJALL6RtZZU= -----END CERTIFICATE-----Generated at Tue Nov 4 22:20:11 2025 by rpki-client