$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce1b89b1-3d7f-3627-b736-4b9477f89083.roa File: ce1b89b1-3d7f-3627-b736-4b9477f89083.roa (raw, json) Hash identifier: yhln7KdxgPN4siQWFzDX91oFCdQQPs8SALwDh+MJJ60= Subject key identifier: 2B:21:4D:DA:93:23:9D:83:CE:68:27:1E:3B:85:FD:6B:78:89:FF:96 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC76E826F54E4FD0A76F000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce1b89b1-3d7f-3627-b736-4b9477f89083.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 16625 IP address blocks: 23.221.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:6e:82:6f:54:e4:fd:0a:76:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=c1a7be3d-03be-4291-8a34-40284fef9d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0c:4e:60:19:be:e5:02:bf:ec:49:5a:9d:af: ce:6e:f5:70:ec:9b:12:c1:48:ab:55:16:4c:ad:d6: f8:54:c9:27:2f:d0:62:94:9e:ff:2d:bc:c1:a6:3c: 8d:12:b9:e5:d5:87:23:ee:98:37:82:75:1a:73:49: 06:9c:dd:56:3a:4c:8f:a7:0b:ea:c8:6a:89:f0:c9: 4e:1f:f9:1b:6e:8f:df:b4:67:b6:bc:d3:2d:37:43: 38:78:04:71:62:04:71:19:85:c3:50:60:ca:0f:52: 46:0c:a9:3c:5e:3f:aa:f2:5b:b9:1c:22:c9:dc:48: 60:16:e5:60:fa:a2:90:48:5b:f0:7e:27:15:a6:0b: 78:b8:22:68:a8:cd:be:8d:ab:b9:e2:16:68:44:7d: f3:c0:d3:9f:cc:7a:b4:c2:d8:43:82:74:bc:82:29: 6c:39:82:4a:60:4d:dc:df:db:dd:ec:e6:e2:a9:83: 59:c8:d5:be:a0:5a:47:81:81:27:62:a7:e0:36:1b: 34:02:b1:e7:52:fe:97:fc:d8:74:70:0d:37:a8:df: be:ca:af:0d:ae:c0:a7:71:ac:ba:4f:46:91:3f:5b: 06:7f:03:b4:d7:75:98:df:77:6f:50:6d:b1:2a:c1: fb:1c:9f:b8:d8:aa:f2:a3:8a:e7:7d:3b:85:e0:07: 3e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:21:4D:DA:93:23:9D:83:CE:68:27:1E:3B:85:FD:6B:78:89:FF:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce1b89b1-3d7f-3627-b736-4b9477f89083.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:ff:1a:1a:ef:30:53:4b:09:dd:80:80:63:4a:38:31:d9:a2: fe:d2:18:93:19:eb:a4:47:ec:05:68:40:07:b1:58:5e:d6:66: a4:b8:b4:0d:9c:3a:7d:09:bf:bf:cd:c0:00:f6:d2:13:5d:82: 9e:5a:34:6f:e1:3f:40:04:94:cf:73:ec:b9:6d:f9:68:29:f2: 57:9e:df:b3:9d:f5:f1:b4:cb:d9:a0:7f:65:4a:df:87:fd:ac: fb:74:ef:11:16:f3:e0:a1:bb:04:89:c8:ff:08:88:48:f1:f7: eb:17:11:8a:99:42:de:75:f6:fd:1c:13:64:3b:6c:4e:4f:30: a6:d6:e7:c8:76:7d:b8:cb:b1:0a:12:c2:e1:2a:76:9b:93:9d: f5:a2:cc:bb:3f:7e:29:dd:0a:29:df:cc:4e:af:23:15:9d:39: 55:3e:5a:8c:f4:34:39:c7:a7:24:d5:6a:0e:f9:67:77:ed:97: d6:a6:47:64:cd:40:00:2e:bf:57:f2:8e:58:cf:9b:1b:82:a1: cd:d9:60:f0:66:92:da:18:c0:b5:0f:82:fd:b7:2e:c0:4e:98: 18:52:e5:f2:03:84:af:6c:07:9e:f1:5f:eb:58:7a:d2:6b:04: 05:1c:e4:be:db:b7:6e:b6:2b:fe:4f:1e:29:f4:12:66:33:d5: ab:84:92:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx26Cb1Tk/Qp28AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk YzFhN2JlM2QtMDNiZS00MjkxLThhMzQtNDAyODRmZWY5ZDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygxOYBm+5QK/7Elana/ObvVw7JsSwUirVRZM rdb4VMknL9BilJ7/LbzBpjyNErnl1Ycj7pg3gnUac0kGnN1WOkyPpwvqyGqJ8MlO H/kbbo/ftGe2vNMtN0M4eARxYgRxGYXDUGDKD1JGDKk8Xj+q8lu5HCLJ3EhgFuVg +qKQSFvwficVpgt4uCJoqM2+jau54hZoRH3zwNOfzHq0wthDgnS8gilsOYJKYE3c 39vd7ObiqYNZyNW+oFpHgYEnYqfgNhs0ArHnUv6X/Nh0cA03qN++yq8NrsCncay6 T0aRP1sGfwO013WY33dvUG2xKsH7HJ+42Kryo4rnfTuF4Ac+dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCshTdqTI52DzmgnHjuF/Wt4if+WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2UxYjg5YjEtM2Q3Zi0z NjI3LWI3MzYtNGI5NDc3Zjg5MDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF91YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAv/GhrvMFNLCd2AgGNKODHZov7SGJMZ66RH7AVoQAexWF7WZqS4tA2c On0Jv7/NwAD20hNdgp5aNG/hP0AElM9z7Llt+Wgp8lee37Od9fG0y9mgf2VK34f9 rPt07xEW8+ChuwSJyP8IiEjx9+sXEYqZQt519v0cE2Q7bE5PMKbW58h2fbjLsQoS wuEqdpuTnfWizLs/findCinfzE6vIxWdOVU+Woz0NDnHpyTVag75Z3ftl9amR2TN QAAuv1fyjljPmxuCoc3ZYPBmktoYwLUPgv23LsBOmBhS5fIDhK9sB57xX+tYetJr BAUc5L7bt262K/5PHin0EmYz1auEkkg= -----END CERTIFICATE-----Generated at Tue Nov 4 20:59:39 2025 by rpki-client