$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/5a6ba6f3-4897-332b-8c6b-76ba9dc048aa.roa File: 5a6ba6f3-4897-332b-8c6b-76ba9dc048aa.roa (raw, json) Hash identifier: JxFFZuPEa7hrOReKSPj3t3jkWKYpvZLTGR9fLz0KHt8= Subject key identifier: C7:2B:52:DF:76:9A:36:CB:1F:78:40:A4:6B:B8:A9:F1:56:20:9B:23 Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F4328584B8EACC976EA1FF3A2C4B53D30 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/5a6ba6f3-4897-332b-8c6b-76ba9dc048aa.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 7782 IP address blocks: 23.235.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:c9:76:ea:1f:f3:a2:c4:b5:3d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=43c8d725-452d-4f7e-b44e-2c17457ea77d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:29:20:eb:e1:f0:d6:d2:03:84:09:ba:f2:99: 7d:e3:d3:f8:06:5c:c2:aa:30:ba:cb:6d:b2:54:dd: 09:e5:10:75:fa:e2:a4:37:50:d3:cf:aa:59:32:b4: 94:e1:05:7a:ff:04:68:ed:f4:da:86:2f:71:3b:52: a2:1b:f0:c1:e6:7a:18:ff:02:20:79:19:3f:89:cc: 33:fb:06:bf:a2:1c:af:7e:27:a9:7d:20:27:26:e0: c3:f1:07:98:41:50:6b:32:15:ec:6a:8b:61:a9:5e: 81:4b:87:fb:5b:d2:7d:df:5a:c1:4b:2a:cf:81:1f: 22:76:dc:33:79:b7:b9:e0:6c:9b:58:79:66:24:09: f1:7f:7c:69:a1:a8:ba:4a:83:26:81:b2:03:f1:ab: 3a:58:66:39:ff:b1:68:a5:97:b3:91:8b:c8:96:ec: e2:92:af:bf:60:4b:21:f2:5f:50:0a:a2:5e:9f:ef: d0:ac:4a:2b:bd:99:ef:d5:19:7e:e8:b8:f3:d5:b1: e3:67:0f:3a:ca:91:73:93:5b:d6:b6:e0:6d:cb:3d: 52:08:ef:ed:16:7f:86:14:d0:78:10:f0:2b:72:4c: 33:67:77:09:63:fd:53:88:6d:60:5d:6e:b1:0f:ba: 7d:b5:45:af:53:43:d2:c7:16:90:da:9e:95:82:45: 42:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:2B:52:DF:76:9A:36:CB:1F:78:40:A4:6B:B8:A9:F1:56:20:9B:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/5a6ba6f3-4897-332b-8c6b-76ba9dc048aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 23.235.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:29:ca:4f:be:63:cb:5f:78:3b:38:d9:e1:86:e8:5b:f8:f7: 00:85:9c:90:09:6e:b9:3c:cb:17:e0:e7:b3:af:88:c8:04:8f: 7d:83:81:84:75:de:13:c6:f2:c1:86:2a:9f:4c:5f:1d:e2:22: fc:ea:0c:1e:82:ca:06:36:65:42:b0:36:18:cb:62:96:31:97: 26:d0:61:96:e0:da:db:84:c3:0e:68:cd:fa:c7:93:4e:6c:9f: 72:45:62:a9:62:03:80:39:9f:52:6e:7c:fe:fe:31:39:b4:d3: 4a:6e:c1:95:02:d6:f9:f8:44:13:10:70:ec:74:1a:71:00:78: d3:3f:23:a1:ca:68:f6:27:23:93:98:de:b6:0b:62:ec:8b:e5: 90:e6:ca:8d:a5:fd:3f:ce:42:0a:fa:7b:62:2b:06:77:c8:ad: bf:70:03:47:91:a1:e8:7a:41:82:81:3e:55:59:ec:3f:3d:0c: d7:3c:97:4b:13:08:b6:3b:00:ee:e6:d8:d4:f3:3b:f6:66:8c: 67:fb:72:16:95:3f:e3:2e:14:c9:1c:78:26:6f:5d:56:10:d3: 37:f9:6b:69:58:90:c1:a6:19:e9:55:41:22:f3:ea:fc:1f:a8: 4b:5b:fa:06:80:9e:ac:0e:02:42:92:80:e0:04:c1:45:31:2c: f2:20:62:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrMl26h/zosS1PTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NDNjOGQ3MjUtNDUyZC00ZjdlLWI0NGUtMmMxNzQ1N2VhNzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyykg6+Hw1tIDhAm68pl949P4BlzCqjC6y22y VN0J5RB1+uKkN1DTz6pZMrSU4QV6/wRo7fTahi9xO1KiG/DB5noY/wIgeRk/icwz +wa/ohyvfiepfSAnJuDD8QeYQVBrMhXsaothqV6BS4f7W9J931rBSyrPgR8idtwz ebe54GybWHlmJAnxf3xpoai6SoMmgbID8as6WGY5/7FopZezkYvIluzikq+/YEsh 8l9QCqJen+/QrEorvZnv1Rl+6Ljz1bHjZw86ypFzk1vWtuBtyz1SCO/tFn+GFNB4 EPArckwzZ3cJY/1TiG1gXW6xD7p9tUWvU0PSxxaQ2p6VgkVC0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcrUt92mjbLH3hApGu4qfFWIJsjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvNWE2YmE2ZjMtNDg5Ny0z MzJiLThjNmItNzZiYTlkYzA0OGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF+tgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIpyk++Y8tfeDs42eGG6Fv49wCFnJAJbrk8yxfg57OviMgEj32DgYR1 3hPG8sGGKp9MXx3iIvzqDB6CygY2ZUKwNhjLYpYxlybQYZbg2tuEww5ozfrHk05s n3JFYqliA4A5n1JufP7+MTm000puwZUC1vn4RBMQcOx0GnEAeNM/I6HKaPYnI5OY 3rYLYuyL5ZDmyo2l/T/OQgr6e2IrBnfIrb9wA0eRoeh6QYKBPlVZ7D89DNc8l0sT CLY7AO7m2NTzO/ZmjGf7chaVP+MuFMkceCZvXVYQ0zf5a2lYkMGmGelVQSLz6vwf qEtb+gaAnqwOAkKSgOAEwUUxLPIgYm4= -----END CERTIFICATE-----Generated at Wed Nov 5 01:23:10 2025 by rpki-client