$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0cf26403-00e0-3516-9675-5121e1c443df.roa File: 0cf26403-00e0-3516-9675-5121e1c443df.roa (raw, json) Hash identifier: CklNyqCGtmnYJ48Zv/5wAgkOEDn5Qo8Vkd5I6V2UKJY= Subject key identifier: 2E:7E:53:A0:36:DF:EE:E3:56:A6:58:04:70:E6:B2:3D:06:F2:CD:8C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B477C81CFB09268555F3CEA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0cf26403-00e0-3516-9675-5121e1c443df.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 16625 IP address blocks: 23.200.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:81:cf:b0:92:68:55:5f:3c:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=5aaa017d-1691-4249-81f7-67cbb3479ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d3:1e:db:60:10:d1:28:25:d4:76:dd:36:b2: c6:fd:6c:f9:80:b1:de:2f:df:fe:92:05:b6:a1:42: 07:7e:1b:10:a9:25:8d:ad:aa:e3:13:c3:1c:15:51: 5b:80:3a:7d:2d:0c:38:ac:b1:db:c2:b5:3d:af:0a: 1b:06:4d:d5:6b:32:d4:39:8a:0f:06:99:04:c2:65: a4:c9:72:b2:e7:fd:d6:e4:28:18:ac:1a:70:1b:63: 1e:91:fa:bc:59:b1:c5:5c:1c:17:44:e3:90:56:9b: f7:34:d4:7b:00:33:8b:d8:27:8a:d0:a6:c5:9c:49: e5:9a:a9:3a:1b:f1:4f:a5:46:67:7d:60:65:10:04: a5:8e:59:7b:98:67:06:22:de:e4:6a:39:d2:27:77: 24:6d:d4:b5:fd:4e:bb:75:ef:e6:78:16:ee:dd:e5: 18:28:d0:8c:81:c1:03:b7:9d:5d:85:90:9f:02:9c: 9a:a5:88:b3:f0:dd:a3:bf:3b:ee:93:4b:f9:dc:99: 3d:af:56:5d:15:16:31:aa:a8:6c:9b:ad:b5:a2:b0: 75:b2:31:75:eb:dc:ad:01:78:91:e6:f2:02:95:7c: 20:50:9d:1c:1b:1d:54:fc:ea:b8:6b:36:94:23:2e: ae:26:cd:8d:8e:39:8a:b9:c6:46:a4:5b:70:52:f7: 52:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:7E:53:A0:36:DF:EE:E3:56:A6:58:04:70:E6:B2:3D:06:F2:CD:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0cf26403-00e0-3516-9675-5121e1c443df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:8e:c3:b4:48:71:da:e2:0a:2f:e4:6b:b0:5b:63:8b:b7:92: 12:14:33:92:3f:12:01:d0:91:3b:56:a0:4d:57:83:d5:c6:f9: 2e:ab:5d:6b:90:f4:aa:80:ee:57:86:bb:44:0b:94:18:03:9b: e4:36:05:a6:45:81:be:9a:6c:93:b7:f0:d4:17:07:6e:5b:2a: e4:c3:76:86:a8:e0:8a:da:86:e8:24:c7:6e:5d:4f:2d:39:91: 48:42:14:99:c7:5b:44:e5:c8:fd:04:82:94:94:f4:eb:e3:fb: d0:1a:d6:a9:d4:bf:25:60:2a:2c:f6:0c:87:54:e6:a0:07:c4: 76:69:5e:0d:dd:f5:f5:47:3d:08:32:03:e7:5e:12:b1:eb:bd: f6:35:07:1c:1a:49:8c:46:7b:6c:7a:6f:f8:30:8f:9e:d8:be: 75:44:1a:7f:d0:c1:91:45:56:72:40:b1:eb:02:0e:8c:1c:f9: 39:13:65:09:f2:56:e1:69:32:39:6f:11:5e:8e:be:f9:6d:73: d2:34:f5:f8:96:27:34:ec:ee:bc:87:9b:4d:ea:74:71:a2:95: e2:f6:3f:74:eb:3c:a8:9a:20:1f:f0:1e:07:88:ef:10:39:2c: 8f:e9:d7:1b:f7:4f:91:f8:9e:91:02:7f:a7:00:57:22:6b:90: 08:cc:c9:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfIHPsJJoVV886gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk NWFhYTAxN2QtMTY5MS00MjQ5LTgxZjctNjdjYmIzNDc5ZWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNMe22AQ0Sgl1HbdNrLG/Wz5gLHeL9/+kgW2 oUIHfhsQqSWNrarjE8McFVFbgDp9LQw4rLHbwrU9rwobBk3VazLUOYoPBpkEwmWk yXKy5/3W5CgYrBpwG2Mekfq8WbHFXBwXROOQVpv3NNR7ADOL2CeK0KbFnEnlmqk6 G/FPpUZnfWBlEASljll7mGcGIt7kajnSJ3ckbdS1/U67de/meBbu3eUYKNCMgcED t51dhZCfApyapYiz8N2jvzvuk0v53Jk9r1ZdFRYxqqhsm621orB1sjF169ytAXiR 5vIClXwgUJ0cGx1U/Oq4azaUIy6uJs2NjjmKucZGpFtwUvdSbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5+U6A23+7jVqZYBHDmsj0G8s2MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGNmMjY0MDMtMDBlMC0z NTE2LTk2NzUtNTEyMWUxYzQ0M2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8jAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2Ow7RIcdriCi/ka7BbY4u3khIUM5I/EgHQkTtWoE1Xg9XG+S6rXWuQ 9KqA7leGu0QLlBgDm+Q2BaZFgb6abJO38NQXB25bKuTDdoao4Irahugkx25dTy05 kUhCFJnHW0TlyP0EgpSU9Ovj+9Aa1qnUvyVgKiz2DIdU5qAHxHZpXg3d9fVHPQgy A+deErHrvfY1BxwaSYxGe2x6b/gwj57YvnVEGn/QwZFFVnJAsesCDowc+TkTZQny VuFpMjlvEV6Ovvltc9I09fiWJzTs7ryHm03qdHGileL2P3TrPKiaIB/wHgeI7xA5 LI/p1xv3T5H4npECf6cAVyJrkAjMyX0= -----END CERTIFICATE-----Generated at Tue Nov 4 21:04:14 2025 by rpki-client