$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24d1c625-554d-3c55-aff5-2b8aa9403e4a.roa File: 24d1c625-554d-3c55-aff5-2b8aa9403e4a.roa (raw, json) Hash identifier: K86qtDMnSROtYJSPpvKKRrxalot1fSHwDBlJF7XICSQ= Subject key identifier: AF:32:F9:B7:89:F3:4C:59:12:AE:DD:AC:80:8B:DF:FC:4D:79:A0:E6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BBE404F1DCA16E3EB06188D40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24d1c625-554d-3c55-aff5-2b8aa9403e4a.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 16625 IP address blocks: 23.210.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:4f:1d:ca:16:e3:eb:06:18:8d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=37df3785-c2d8-41f4-87b1-efb2ad5b3d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f9:2c:96:c4:b8:1a:a2:82:0f:7f:5a:36:8a: 74:1d:bb:2f:87:cd:89:49:d7:40:f7:a6:19:51:ab: 9c:22:9b:e0:4b:eb:a6:ea:b6:8d:55:b6:52:25:62: 8a:10:1c:b5:0d:14:ee:fd:98:f4:dc:71:a8:da:1c: ac:d2:ac:e0:4f:5b:a2:a8:99:38:91:16:69:b1:b2: 2b:3c:6e:44:51:28:c7:ef:12:5e:1f:1f:5c:44:b2: d8:49:59:1f:40:10:e8:fd:11:56:7f:e6:ed:6e:6c: e1:2f:c1:87:ac:8b:0d:09:24:79:b2:03:4d:cb:2a: e3:1a:f4:4e:79:4c:fe:4c:31:9a:2f:ae:0e:3e:7c: 2e:f5:aa:58:e7:9e:13:d7:54:66:95:82:c8:e3:b1: 11:b3:43:92:27:c1:86:a1:c9:ef:1a:5a:e9:be:99: e2:20:ff:e5:c0:22:a1:98:9c:38:e7:eb:ad:a0:44: 3c:b0:bf:b7:f7:96:91:2a:c9:a9:5d:55:fd:13:34: f2:ee:d0:dc:a6:9d:00:99:0a:b8:ca:8c:3b:76:48: 7c:78:6d:ce:4d:64:48:34:da:02:82:11:dc:f3:83: f4:c9:c7:38:6b:a7:e5:fd:67:10:9c:82:de:6f:d1: e7:8b:14:c6:47:17:51:28:f5:11:60:43:e7:b4:74: f3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:32:F9:B7:89:F3:4C:59:12:AE:DD:AC:80:8B:DF:FC:4D:79:A0:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24d1c625-554d-3c55-aff5-2b8aa9403e4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:bd:84:7f:c7:dd:a5:bb:d7:74:fe:5c:2d:38:87:8e:83:7c: 90:f0:5e:07:43:11:a3:61:b1:6c:05:0e:13:90:bc:5d:c3:09: db:c7:06:d8:71:8f:a2:7c:da:e3:61:48:a1:14:cc:b3:6b:2d: 77:f5:95:39:21:59:66:34:6c:29:82:15:0e:46:ec:7f:5c:ec: 7b:9e:29:03:d0:18:bb:ae:b2:fa:7c:47:b4:ad:9a:ae:c6:5c: 70:7d:b1:ae:36:31:20:f3:54:3a:20:da:40:fc:a5:21:7e:ae: 4f:de:70:da:b9:60:07:ba:70:37:3a:f4:ee:1c:98:8d:8b:20: 39:bc:0f:e8:60:a7:84:8e:18:40:9f:0c:08:e4:6f:f1:b0:6c: 1f:aa:dc:92:bf:f1:ed:89:90:4d:45:c3:83:83:06:cd:5a:28: 77:51:3c:d4:36:df:33:27:9c:ff:b2:66:63:b8:98:88:50:7d: 53:a5:be:5d:d0:af:46:86:b8:30:25:fe:89:1d:ae:92:87:9f: f6:3e:cf:18:8f:8a:9c:4c:d6:57:76:e0:9b:80:4e:80:81:f1: 5f:8d:1e:22:60:2b:82:93:c9:fd:52:9c:15:31:1b:d9:86:95: 06:f8:cd:9f:c6:54:b8:46:7a:59:43:49:15:02:82:17:68:92: 17:72:d7:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QE8dyhbj6wYYjUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk MzdkZjM3ODUtYzJkOC00MWY0LTg3YjEtZWZiMmFkNWIzZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfkslsS4GqKCD39aNop0Hbsvh82JSddA96YZ UaucIpvgS+um6raNVbZSJWKKEBy1DRTu/Zj03HGo2hys0qzgT1uiqJk4kRZpsbIr PG5EUSjH7xJeHx9cRLLYSVkfQBDo/RFWf+btbmzhL8GHrIsNCSR5sgNNyyrjGvRO eUz+TDGaL64OPnwu9apY554T11RmlYLI47ERs0OSJ8GGocnvGlrpvpniIP/lwCKh mJw45+utoEQ8sL+395aRKsmpXVX9EzTy7tDcpp0AmQq4yow7dkh8eG3OTWRINNoC ghHc84P0ycc4a6fl/WcQnILeb9HnixTGRxdRKPURYEPntHTzowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8y+beJ80xZEq7drICL3/xNeaDmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjRkMWM2MjUtNTU0ZC0z YzU1LWFmZjUtMmI4YWE5NDAzZTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9LMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABi9hH/H3aW713T+XC04h46DfJDwXgdDEaNhsWwFDhOQvF3DCdvHBthx j6J82uNhSKEUzLNrLXf1lTkhWWY0bCmCFQ5G7H9c7HueKQPQGLuusvp8R7Stmq7G XHB9sa42MSDzVDog2kD8pSF+rk/ecNq5YAe6cDc69O4cmI2LIDm8D+hgp4SOGECf DAjkb/GwbB+q3JK/8e2JkE1Fw4ODBs1aKHdRPNQ23zMnnP+yZmO4mIhQfVOlvl3Q r0aGuDAl/okdrpKHn/Y+zxiPipxM1ld24JuAToCB8V+NHiJgK4KTyf1SnBUxG9mG lQb4zZ/GVLhGellDSRUCghdokhdy1x0= -----END CERTIFICATE-----Generated at Tue Nov 4 23:54:21 2025 by rpki-client