$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/748f02f8-1ff7-3d16-a4f2-873ac21829ba.roa File: 748f02f8-1ff7-3d16-a4f2-873ac21829ba.roa (raw, json) Hash identifier: 2Hzu3aVqEeQ7GUMEzf6U9qxuqbbvh0Cj7KnNqtBIly0= Subject key identifier: 55:01:A8:77:77:36:7E:07:38:C7:8D:AE:EE:BD:12:ED:BA:68:B0:A6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B970CC9D000B6D53701E9C280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/748f02f8-1ff7-3d16-a4f2-873ac21829ba.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 16625 IP address blocks: 23.214.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:c9:d0:00:b6:d5:37:01:e9:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=8d9950ab-6043-4394-b124-9cec1f1ce755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ea:99:e9:fb:ef:11:55:4c:24:0b:b6:16:d2: 35:00:6d:98:9a:65:38:cc:4c:8d:42:eb:ef:8f:61: 36:f3:fc:00:f6:6a:ff:da:10:95:2e:be:f6:b2:f9: 49:7a:ec:24:e1:39:5e:cc:fd:a6:96:9e:ce:d2:54: 3c:8a:45:41:95:f8:8d:3e:fc:5c:03:52:b8:ed:61: 28:e0:33:ba:1b:04:f0:05:66:f9:45:cf:73:cf:76: ed:c5:10:62:59:47:82:70:dc:79:f1:db:3d:1a:75: b2:ba:21:11:a6:68:ca:10:93:c0:71:05:63:aa:15: 2d:23:23:39:8e:d1:76:35:e0:33:18:5f:64:a1:2b: dc:d4:2d:d1:0d:c8:f9:ea:18:b1:67:42:ef:8f:aa: 20:b0:20:d8:c8:eb:0b:d6:0c:b6:75:2e:fd:df:b2: 45:52:a6:78:a8:95:3e:d2:e0:37:b4:66:b2:89:05: fd:0c:bb:f5:aa:85:62:83:1d:fa:12:2a:6c:95:52: 9b:cb:7f:b3:70:10:6a:2a:2d:61:c4:f6:82:70:04: 9c:e6:b8:4b:fc:63:23:38:19:10:b0:55:1e:b3:1b: 50:23:ad:c0:7f:30:4a:a0:d5:3b:75:ed:b5:79:18: 4d:1a:06:11:25:dd:62:ca:5b:ee:cf:43:1e:9a:f7: 35:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:01:A8:77:77:36:7E:07:38:C7:8D:AE:EE:BD:12:ED:BA:68:B0:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/748f02f8-1ff7-3d16-a4f2-873ac21829ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:99:b7:26:dc:ec:2f:14:9c:54:15:51:46:56:00:c5:03:65: a4:9b:6c:27:ce:2b:c3:4c:68:d1:7f:c7:45:df:39:19:c8:29: 33:b6:dd:18:dc:83:bf:93:d8:fa:c3:0e:2b:c6:85:21:d8:31: 6a:60:88:6c:6e:92:aa:1d:73:84:a3:de:32:e1:52:cb:eb:58: 66:ff:1b:c6:1e:c5:bc:d1:7d:30:b6:de:06:20:0a:ed:3e:d6: ba:d3:37:e2:55:f4:ea:a5:c4:82:bf:69:d5:9f:05:d9:c1:4d: 8d:b6:9a:6e:f6:d3:6b:9c:db:e3:7c:9d:a9:32:c6:4c:17:ff: 9d:71:f0:0c:3d:d5:65:19:4b:31:06:9a:0a:98:a0:0b:ac:e9: 0d:8e:c8:a5:7e:d2:6c:ce:b1:32:eb:50:bf:e6:76:bf:84:7a: f1:70:75:28:88:cc:64:62:d1:e7:2b:9a:0b:89:8e:75:81:c2: 74:5a:d6:09:1f:56:c9:f3:e2:f4:5f:0f:a9:86:de:6c:7d:45: d4:f3:fc:4d:8b:a6:6f:a9:4a:c4:fb:67:e0:ce:a3:77:d5:59: a5:2b:43:e5:d4:1c:94:cc:0a:73:5a:a8:c5:10:2e:f2:57:3a: 83:1b:6c:4e:da:22:fe:aa:88:a2:55:11:72:24:ff:5d:74:63: 52:9e:80:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDMnQALbVNwHpwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk OGQ5OTUwYWItNjA0My00Mzk0LWIxMjQtOWNlYzFmMWNlNzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+qZ6fvvEVVMJAu2FtI1AG2YmmU4zEyNQuvv j2E28/wA9mr/2hCVLr72svlJeuwk4TlezP2mlp7O0lQ8ikVBlfiNPvxcA1K47WEo 4DO6GwTwBWb5Rc9zz3btxRBiWUeCcNx58ds9GnWyuiERpmjKEJPAcQVjqhUtIyM5 jtF2NeAzGF9koSvc1C3RDcj56hixZ0Lvj6ogsCDYyOsL1gy2dS7937JFUqZ4qJU+ 0uA3tGayiQX9DLv1qoVigx36EipslVKby3+zcBBqKi1hxPaCcASc5rhL/GMjOBkQ sFUesxtQI63AfzBKoNU7de21eRhNGgYRJd1iylvuz0Memvc1KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUBqHd3Nn4HOMeNru69Eu26aLCmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzQ4ZjAyZjgtMWZmNy0z ZDE2LWE0ZjItODczYWMyMTgyOWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9bQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeZtybc7C8UnFQVUUZWAMUDZaSbbCfOK8NMaNF/x0XfORnIKTO23Rjc g7+T2PrDDivGhSHYMWpgiGxukqodc4Sj3jLhUsvrWGb/G8YexbzRfTC23gYgCu0+ 1rrTN+JV9OqlxIK/adWfBdnBTY22mm7202uc2+N8nakyxkwX/51x8Aw91WUZSzEG mgqYoAus6Q2OyKV+0mzOsTLrUL/mdr+EevFwdSiIzGRi0ecrmguJjnWBwnRa1gkf Vsnz4vRfD6mG3mx9RdTz/E2Lpm+pSsT7Z+DOo3fVWaUrQ+XUHJTMCnNaqMUQLvJX OoMbbE7aIv6qiKJVEXIk/110Y1KegHY= -----END CERTIFICATE-----Generated at Wed Oct 22 04:35:15 2025 by rpki-client