$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eac855e7-a308-366d-b7da-288233a4f01f.roa File: eac855e7-a308-366d-b7da-288233a4f01f.roa (raw, json) Hash identifier: hbiBAOYKbXUuBez3KpePfUvfmGKw6nXgvJcciX5Guks= Subject key identifier: EE:CD:AE:C9:CB:4B:19:A0:F9:40:4F:52:B6:77:22:07:69:96:C4:EE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B68FCA2D7FB74AE5DD9BD0A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eac855e7-a308-366d-b7da-288233a4f01f.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.219.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:a2:d7:fb:74:ae:5d:d9:bd:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=97d8ee07-e2ad-4214-bec3-0441f67f6c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4a:5b:e2:b3:bb:06:20:6d:38:96:8a:21:79: 5b:d5:27:e8:ff:4d:45:d3:a8:8a:97:f0:cc:10:b1: a0:2a:5b:88:7e:19:bf:c6:06:83:0b:ef:28:a3:57: da:f4:10:a1:d6:1c:29:0f:70:86:ab:e1:77:63:15: b0:4f:86:34:61:26:59:06:c9:d5:21:8f:5c:ff:06: cc:5f:35:80:08:ac:d8:d4:fb:04:3a:bd:e6:f1:d4: 80:6c:a7:84:56:d3:eb:1e:af:ae:73:0a:bf:79:a7: 86:ff:27:c1:8d:73:26:f8:a5:66:75:c6:d5:8e:9f: f6:40:2b:f9:0a:3e:79:67:d1:b7:51:88:2f:fd:9b: b5:57:db:65:df:78:9a:45:4a:fa:47:41:8f:5a:7e: 5b:9c:32:be:e8:59:11:33:4c:b4:c0:68:cf:dc:0e: 98:78:d1:d2:ab:b5:ad:21:21:b3:7c:3a:c0:be:8b: 0c:4a:e3:1f:ee:b2:87:d1:6f:ec:62:a7:a1:0c:a7: 85:b8:a9:4d:28:4d:5f:ec:d3:66:a1:98:e5:58:af: 97:6a:25:de:39:a9:7a:89:f6:0c:66:06:ce:3d:9c: af:cd:b4:68:0a:ba:48:94:bb:a6:41:44:47:d0:8c: a6:91:1c:a1:50:d6:d5:e2:e3:92:02:77:ef:4f:c6: 65:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CD:AE:C9:CB:4B:19:A0:F9:40:4F:52:B6:77:22:07:69:96:C4:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eac855e7-a308-366d-b7da-288233a4f01f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:86:ca:f9:b9:ac:1d:15:24:2b:39:5c:b4:03:55:e1:a7:1c: f6:33:0a:03:9f:8f:db:ca:0e:dc:72:1a:d2:12:26:3f:44:de: eb:4f:5d:7f:93:17:a0:3f:ca:b3:c8:76:ee:1f:33:ce:69:41: d1:1d:bc:19:fb:14:70:79:75:37:cc:6e:25:3e:f0:26:e6:b0: 13:c9:e6:94:13:0f:37:10:61:c1:97:cc:31:80:41:90:8f:3c: f6:a9:6b:38:57:bb:69:7c:bb:bc:53:fc:f9:71:8e:1e:64:92: 9d:b9:35:5b:10:fb:dc:50:54:88:fb:14:af:fe:b3:c4:bc:54: 19:93:c4:9e:17:70:13:bc:bd:c9:31:8e:d9:e7:6e:c8:b5:f1: 44:b5:5f:fd:35:82:be:cc:a7:00:eb:ee:79:be:58:98:40:cb: 7a:de:25:8f:4a:6f:ce:87:20:47:4a:ea:67:b1:70:42:7c:fc: 30:e8:83:88:e9:f5:68:19:a6:ed:75:26:71:b4:e2:37:21:21: 8a:bb:5a:1e:f1:58:bf:26:ca:07:3e:e0:32:1e:cb:42:fd:ee: e4:38:43:dd:a5:6d:3c:37:8c:e6:db:d6:67:f6:0b:b0:9b:7e: 23:58:c3:20:4a:bb:ae:65:0c:19:a0:4d:cf:63:b1:3e:cd:3c: 02:41:12:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/KLX+3SuXdm9CgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk OTdkOGVlMDctZTJhZC00MjE0LWJlYzMtMDQ0MWY2N2Y2YzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUpb4rO7BiBtOJaKIXlb1Sfo/01F06iKl/DM ELGgKluIfhm/xgaDC+8oo1fa9BCh1hwpD3CGq+F3YxWwT4Y0YSZZBsnVIY9c/wbM XzWACKzY1PsEOr3m8dSAbKeEVtPrHq+ucwq/eaeG/yfBjXMm+KVmdcbVjp/2QCv5 Cj55Z9G3UYgv/Zu1V9tl33iaRUr6R0GPWn5bnDK+6FkRM0y0wGjP3A6YeNHSq7Wt ISGzfDrAvosMSuMf7rKH0W/sYqehDKeFuKlNKE1f7NNmoZjlWK+XaiXeOal6ifYM ZgbOPZyvzbRoCrpIlLumQURH0IymkRyhUNbV4uOSAnfvT8ZlaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7NrsnLSxmg+UBPUrZ3IgdplsTuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWFjODU1ZTctYTMwOC0z NjZkLWI3ZGEtMjg4MjMzYTRmMDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9udMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuGyvm5rB0VJCs5XLQDVeGnHPYzCgOfj9vKDtxyGtISJj9E3utPXX+T F6A/yrPIdu4fM85pQdEdvBn7FHB5dTfMbiU+8CbmsBPJ5pQTDzcQYcGXzDGAQZCP PPapazhXu2l8u7xT/Plxjh5kkp25NVsQ+9xQVIj7FK/+s8S8VBmTxJ4XcBO8vckx jtnnbsi18US1X/01gr7MpwDr7nm+WJhAy3reJY9Kb86HIEdK6mexcEJ8/DDog4jp 9WgZpu11JnG04jchIYq7Wh7xWL8mygc+4DIey0L97uQ4Q92lbTw3jObb1mf2C7Cb fiNYwyBKu65lDBmgTc9jsT7NPAJBEqc= -----END CERTIFICATE-----Generated at Tue Nov 4 22:18:56 2025 by rpki-client