$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43de1d2e-2d24-35d7-881a-a177dc742059.roa File: 43de1d2e-2d24-35d7-881a-a177dc742059.roa (raw, json) Hash identifier: C8jpSX1+WGLJ9KFRrZRMXh8wgZM865sZheVuIyguUgI= Subject key identifier: 01:B7:01:2A:9A:1E:9B:CE:79:4E:35:C2:D6:A9:57:0F:EE:7B:E3:8D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BBE404ED304A5D0FD07F06380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43de1d2e-2d24-35d7-881a-a177dc742059.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 16625 IP address blocks: 23.198.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:4e:d3:04:a5:d0:fd:07:f0:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=f5db687a-3315-41ca-831b-eb46657df9c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7e:4f:a7:b7:cb:8b:a1:dc:b1:c5:30:f4:44: f5:db:bb:a9:7b:ab:87:70:76:92:6f:04:ae:88:63: 5b:54:cd:ba:80:76:14:91:51:6d:b8:72:23:f0:b2: 28:90:12:af:49:05:99:2f:29:ac:04:9d:76:ce:2e: d5:d4:42:05:a6:d5:8e:9f:2b:0e:e5:86:60:1b:fc: 17:31:fe:6d:3d:e1:ba:54:6b:88:da:d8:3b:e6:94: 7e:2a:dc:8b:83:10:2c:d6:4a:7e:ae:ee:d5:2c:6b: c4:05:82:01:6b:b8:b1:98:f9:7f:06:40:c8:05:80: a3:24:5e:ee:98:3f:11:c8:bc:bc:cf:07:b8:65:07: 51:ad:64:b0:b7:b1:40:ea:b2:9e:c0:38:52:60:63: a9:9f:06:d6:9a:c9:71:f7:0a:c1:d5:94:ad:3b:37: 80:46:de:7f:3d:81:5f:73:07:ef:ce:02:64:56:3e: 30:6c:64:f1:7a:46:41:ab:86:15:1d:ad:b3:f9:07: 87:5c:67:7d:ae:7f:81:36:65:72:c8:a5:c7:70:db: 1e:f0:e2:35:8b:30:92:77:1a:1c:dc:4c:09:1b:9b: 0a:93:e0:25:90:9c:4c:80:ed:74:49:fe:ff:72:66: 83:9a:5e:2a:31:45:a1:4e:89:5e:27:cc:2f:ea:0f: d1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B7:01:2A:9A:1E:9B:CE:79:4E:35:C2:D6:A9:57:0F:EE:7B:E3:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43de1d2e-2d24-35d7-881a-a177dc742059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.198.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:e9:e1:9e:e8:a0:44:34:65:fc:a9:5e:d0:28:68:46:44:26: 38:dd:6b:2d:d8:0a:0e:4a:a6:14:42:1c:03:ea:57:89:8a:dd: 6b:cf:a8:e1:f8:bd:a2:a6:0e:ad:d7:04:2c:76:df:24:64:ac: 04:34:2b:2b:44:c1:13:ad:be:2e:a3:76:20:f7:ed:e1:cb:6b: 23:bc:4b:12:a7:29:c9:19:35:bb:23:cd:42:00:a7:36:8f:25: 03:4c:6e:48:8b:9c:fa:7d:f5:87:e6:e3:e5:fb:fb:60:3d:3b: d9:7a:8a:f6:16:32:79:15:a8:60:b2:8d:ba:bf:1f:a6:f0:6f: 3a:57:55:f4:04:6e:b1:bc:06:e6:f8:04:c6:cd:61:e8:d8:c6: 9f:c4:7a:5a:93:4c:d7:fd:2a:d8:c3:31:5d:b2:27:f1:0d:86: 3e:e9:26:c5:4e:c3:2f:ce:d5:42:69:08:ae:cf:4a:ca:b4:ea: cb:49:d8:19:0b:5b:28:46:85:2b:ba:59:d4:8f:72:52:4d:2c: e8:86:0c:d3:0d:03:54:14:9e:c0:39:77:d1:76:78:4f:42:ab: 70:00:ca:7a:ba:b1:e4:d0:d1:f8:20:66:a7:00:d4:23:2e:2f: 18:11:1a:ab:a2:e8:6d:41:5d:88:b9:9e:7a:e6:90:7b:f0:32: 45:c2:53:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QE7TBKXQ/QfwY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZjVkYjY4N2EtMzMxNS00MWNhLTgzMWItZWI0NjY1N2RmOWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn5Pp7fLi6HcscUw9ET127upe6uHcHaSbwSu iGNbVM26gHYUkVFtuHIj8LIokBKvSQWZLymsBJ12zi7V1EIFptWOnysO5YZgG/wX Mf5tPeG6VGuI2tg75pR+KtyLgxAs1kp+ru7VLGvEBYIBa7ixmPl/BkDIBYCjJF7u mD8RyLy8zwe4ZQdRrWSwt7FA6rKewDhSYGOpnwbWmslx9wrB1ZStOzeARt5/PYFf cwfvzgJkVj4wbGTxekZBq4YVHa2z+QeHXGd9rn+BNmVyyKXHcNse8OI1izCSdxoc 3EwJG5sKk+AlkJxMgO10Sf7/cmaDml4qMUWhToleJ8wv6g/R/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAG3ASqaHpvOeU41wtapVw/ue+ONMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDNkZTFkMmUtMmQyNC0z NWQ3LTg4MWEtYTE3N2RjNzQyMDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8YAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/p4Z7ooEQ0ZfypXtAoaEZEJjjday3YCg5KphRCHAPqV4mK3WvPqOH4 vaKmDq3XBCx23yRkrAQ0KytEwROtvi6jdiD37eHLayO8SxKnKckZNbsjzUIApzaP JQNMbkiLnPp99Yfm4+X7+2A9O9l6ivYWMnkVqGCyjbq/H6bwbzpXVfQEbrG8Bub4 BMbNYejYxp/EelqTTNf9KtjDMV2yJ/ENhj7pJsVOwy/O1UJpCK7PSsq06stJ2BkL WyhGhSu6WdSPclJNLOiGDNMNA1QUnsA5d9F2eE9Cq3AAynq6seTQ0fggZqcA1CMu LxgRGqui6G1BXYi5nnrmkHvwMkXCU4A= -----END CERTIFICATE-----Generated at Tue Nov 4 23:03:41 2025 by rpki-client