$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c5ad46a-4e3f-3b12-8e65-bd65a888a68c.roa File: 4c5ad46a-4e3f-3b12-8e65-bd65a888a68c.roa (raw, json) Hash identifier: WlFvvgmR11oyP/oCedq1Zx9QEnO20MmVZcUBeMliKvk= Subject key identifier: 58:AC:47:55:46:63:FA:B8:3D:6D:0C:D2:D1:C3:4A:E6:0E:EC:AE:D3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E20CAD2CC46214424B46C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c5ad46a-4e3f-3b12-8e65-bd65a888a68c.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.202.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:0c:ad:2c:c4:62:14:42:4b:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=fba82068-c87d-4b89-8494-f0d1fd929378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:49:b2:21:4b:07:2e:2c:8d:84:81:83:5a:bf: 91:1f:fc:90:51:55:3d:c2:ec:0b:a6:9d:5f:f0:69: 55:25:92:a3:56:38:2f:30:9d:03:46:ec:0e:44:60: 13:f0:8c:55:63:48:47:4a:15:cf:5a:69:b1:5f:97: 81:e8:50:80:c6:8d:92:98:1b:0e:d3:67:36:9f:e4: 56:75:86:0e:f8:8f:89:ca:0d:dd:90:30:ea:87:4c: fb:e1:dd:90:f9:48:3c:e7:fe:28:a8:fb:3b:07:41: 92:39:2c:1b:75:ec:92:8d:4d:bb:f3:a7:20:f2:66: ac:24:4b:c6:23:5f:17:d7:7a:06:d6:f8:b1:ad:a8: 2a:4b:3f:62:6a:05:e9:d6:9c:f2:46:f2:56:a4:fd: 91:c1:03:21:2f:f9:15:4d:fc:dd:bb:ee:70:9d:2e: 37:6f:85:06:4b:31:1b:02:aa:c9:ac:cc:2d:aa:78: f5:89:ba:c6:ee:f5:01:88:a1:11:9a:7a:65:f4:bc: 2a:b1:55:85:88:83:9b:02:bc:67:31:e4:8a:60:2e: e9:d2:74:da:58:4d:fb:e5:a8:46:4f:9a:4f:e9:bc: 1d:bf:35:f8:c1:20:9e:07:58:cd:d8:9d:37:ae:18: a1:81:8f:17:1a:7d:b3:4a:0e:a9:1a:8a:23:6a:d8: ce:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:AC:47:55:46:63:FA:B8:3D:6D:0C:D2:D1:C3:4A:E6:0E:EC:AE:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c5ad46a-4e3f-3b12-8e65-bd65a888a68c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:8f:c4:6f:32:eb:5a:58:f7:db:6c:bf:9b:be:bf:73:25:c6: d0:3a:ac:a0:91:0d:d6:48:bd:11:d0:a0:25:18:25:f7:fb:96: b8:2f:d5:8e:f3:ee:44:c6:6e:e2:b0:d8:8b:1d:a6:69:f6:75: a0:43:83:95:d5:83:0d:60:00:2b:ca:c4:c2:c0:e9:c1:66:ad: 21:e9:79:bf:97:e7:c1:c1:8a:c8:4e:52:39:be:79:82:63:da: 1f:8e:70:dc:04:26:a2:ff:48:fc:51:ef:8c:b6:d6:43:65:f7: 8f:8b:80:99:08:c9:45:c5:ad:76:e1:a6:00:1f:a5:68:44:0b: 9a:dc:38:3b:5d:e2:4c:58:7f:44:31:0c:d9:de:b8:44:54:79: 71:c9:ad:a1:ce:1c:41:22:d9:2f:56:68:4f:a5:9c:5e:3b:f6: 8e:9d:f6:ca:44:7d:0d:d9:28:72:71:6c:f9:39:19:48:78:86: ea:2c:4d:e1:bc:91:5b:72:ef:8a:fe:c6:c8:fe:5c:5b:b1:45: 03:90:1d:30:c3:35:fc:c3:07:0d:66:a0:df:90:6d:d7:a3:87: 3f:83:86:14:67:c7:06:60:67:e9:8b:0b:84:8f:64:28:ef:a6: 25:de:5f:09:ec:19:5c:b5:33:9d:e6:9a:3d:e1:d2:e5:51:09: 50:6c:2c:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4gytLMRiFEJLRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZmJhODIwNjgtYzg3ZC00Yjg5LTg0OTQtZjBkMWZkOTI5Mzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokmyIUsHLiyNhIGDWr+RH/yQUVU9wuwLpp1f 8GlVJZKjVjgvMJ0DRuwORGAT8IxVY0hHShXPWmmxX5eB6FCAxo2SmBsO02c2n+RW dYYO+I+Jyg3dkDDqh0z74d2Q+Ug85/4oqPs7B0GSOSwbdeySjU2786cg8masJEvG I18X13oG1vixragqSz9iagXp1pzyRvJWpP2RwQMhL/kVTfzdu+5wnS43b4UGSzEb AqrJrMwtqnj1ibrG7vUBiKERmnpl9LwqsVWFiIObArxnMeSKYC7p0nTaWE375ahG T5pP6bwdvzX4wSCeB1jN2J03rhihgY8XGn2zSg6pGoojatjOsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFisR1VGY/q4PW0M0tHDSuYO7K7TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGM1YWQ0NmEtNGUzZi0z YjEyLThlNjUtYmQ2NWE4ODhhNjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8pyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGPxG8y61pY99tsv5u+v3MlxtA6rKCRDdZIvRHQoCUYJff7lrgv1Y7z 7kTGbuKw2Isdpmn2daBDg5XVgw1gACvKxMLA6cFmrSHpeb+X58HBishOUjm+eYJj 2h+OcNwEJqL/SPxR74y21kNl94+LgJkIyUXFrXbhpgAfpWhEC5rcODtd4kxYf0Qx DNneuERUeXHJraHOHEEi2S9WaE+lnF479o6d9spEfQ3ZKHJxbPk5GUh4huosTeG8 kVty74r+xsj+XFuxRQOQHTDDNfzDBw1moN+Qbdejhz+DhhRnxwZgZ+mLC4SPZCjv piXeXwnsGVy1M53mmj3h0uVRCVBsLD4= -----END CERTIFICATE-----Generated at Tue Nov 4 22:18:10 2025 by rpki-client