$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5778168b-78f7-342d-a98b-66bd47abb9db.roa File: 5778168b-78f7-342d-a98b-66bd47abb9db.roa (raw, json) Hash identifier: T2qJlNqpE7lf4o9nsN/1rGn7BgIvp9+W1OqCc9vpOlY= Subject key identifier: 46:DE:43:00:40:D6:82:D6:17:B3:37:39:96:53:37:33:33:84:EB:DD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA5023ACDC49950E66C52A540 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5778168b-78f7-342d-a98b-66bd47abb9db.roa Signing time: Sun 26 Oct 2025 01:00:31 +0000 ROA not before: Sun 26 Oct 2025 01:00:31 +0000 ROA not after: Sat 24 Jan 2026 02:00:31 +0000 asID: 16625 IP address blocks: 23.198.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a5:02:3a:cd:c4:99:50:e6:6c:52:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 26 01:00:31 2025 GMT Not After : Jan 24 02:00:31 2026 GMT Subject: CN=31d5b64f-4108-40b9-a87a-17f7a407eb1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ad:24:d8:bb:11:1b:d9:9d:44:9f:24:32:8c: 65:0d:c7:92:40:28:30:c4:1c:2e:4e:ba:79:76:82: 1c:1c:19:68:14:57:2b:74:11:39:25:88:0e:dd:d9: f2:d3:c5:59:2b:b0:a9:90:47:df:52:41:bf:79:30: cb:0d:1c:a2:e8:20:e4:0e:33:36:5b:05:93:d6:57: e6:05:0a:63:1e:38:6d:2d:ce:ce:ff:ef:03:3c:11: 66:76:d6:e1:45:6f:19:5a:d3:48:e5:18:74:29:93: 8a:59:a2:cc:00:29:20:cc:1b:09:3b:a4:bf:c6:3f: d1:2d:73:73:03:bf:9d:40:73:cd:f0:fb:75:3a:3e: 1a:5b:9e:95:06:32:7f:ca:88:37:8f:5a:57:e3:7e: 00:0b:5c:f3:3f:84:32:9f:33:e8:a4:7d:97:99:7b: 0c:bf:ab:c6:f3:72:0e:8a:a8:13:bc:e6:71:28:f4: f4:8b:2c:7e:f0:4c:a7:d7:53:ea:af:a7:ff:84:9c: ad:70:01:b1:60:68:a0:53:c3:d6:c8:37:43:64:ca: 7f:c2:2c:53:72:7c:41:00:db:f4:f0:8f:11:a3:f5: 2b:ff:18:0c:6e:5a:5b:98:e3:4c:b5:4f:00:c6:7c: 96:ca:74:d7:6f:18:5b:49:b8:95:ec:38:ff:cd:59: 11:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DE:43:00:40:D6:82:D6:17:B3:37:39:96:53:37:33:33:84:EB:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5778168b-78f7-342d-a98b-66bd47abb9db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.198.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:fe:46:84:4c:4e:02:80:49:f1:21:d3:f8:34:0a:21:5f:94: 80:91:35:b0:54:f1:80:f8:0b:ae:73:57:8c:49:cf:47:fc:e7: e5:1a:6b:48:9b:1f:84:ad:10:45:66:6d:59:5b:f3:61:87:35: c8:7b:7e:42:4a:3d:67:30:b3:3e:54:32:d1:78:d7:4d:e3:95: 98:11:8d:10:a0:70:ae:00:44:eb:ca:47:ba:8a:75:37:51:54: 7e:bc:0f:59:37:ba:15:fb:68:28:bd:8a:bf:94:c1:c5:77:7e: 71:66:54:0d:74:c8:25:c7:35:2e:96:e7:0d:55:ef:0a:c3:2f: f6:6b:13:ad:ae:a8:c4:50:95:10:17:29:4d:68:c5:68:9c:19: 02:7b:bf:a5:0f:c9:f3:fb:15:66:2f:ff:df:99:47:85:31:af: be:c0:c4:6f:f2:48:8f:81:d7:63:53:a2:46:d6:20:c4:85:0d: 5d:b1:df:2e:d6:53:6c:ce:69:ad:40:f8:2a:a2:21:fe:65:b9: 76:b8:43:ec:fd:95:d3:2c:f2:7b:0a:2a:70:40:d9:36:c9:ed: c6:5a:3f:2d:14:84:c9:d0:4a:54:c2:07:ed:dd:12:c7:ef:8a: 47:7b:dc:af:2c:95:ad:ab:e9:28:d1:96:71:bb:36:b3:03:12: 0d:87:54:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEulAjrNxJlQ5mxSpUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNjAxMDAzMVoXDTI2MDEyNDAyMDAzMVowLzEtMCsGA1UEAxMk MzFkNWI2NGYtNDEwOC00MGI5LWE4N2EtMTdmN2E0MDdlYjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK0k2LsRG9mdRJ8kMoxlDceSQCgwxBwuTrp5 doIcHBloFFcrdBE5JYgO3dny08VZK7CpkEffUkG/eTDLDRyi6CDkDjM2WwWT1lfm BQpjHjhtLc7O/+8DPBFmdtbhRW8ZWtNI5Rh0KZOKWaLMACkgzBsJO6S/xj/RLXNz A7+dQHPN8Pt1Oj4aW56VBjJ/yog3j1pX434AC1zzP4QynzPopH2XmXsMv6vG83IO iqgTvOZxKPT0iyx+8Eyn11Pqr6f/hJytcAGxYGigU8PWyDdDZMp/wixTcnxBANv0 8I8Ro/Ur/xgMblpbmONMtU8AxnyWynTXbxhbSbiV7Dj/zVkRuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbeQwBA1oLWF7M3OZZTNzMzhOvdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTc3ODE2OGItNzhmNy0z NDJkLWE5OGItNjZiZDQ3YWJiOWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8b0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABX+RoRMTgKASfEh0/g0CiFflICRNbBU8YD4C65zV4xJz0f85+Uaa0ib H4StEEVmbVlb82GHNch7fkJKPWcwsz5UMtF4103jlZgRjRCgcK4AROvKR7qKdTdR VH68D1k3uhX7aCi9ir+UwcV3fnFmVA10yCXHNS6W5w1V7wrDL/ZrE62uqMRQlRAX KU1oxWicGQJ7v6UPyfP7FWYv/9+ZR4Uxr77AxG/ySI+B12NTokbWIMSFDV2x3y7W U2zOaa1A+CqiIf5luXa4Q+z9ldMs8nsKKnBA2TbJ7cZaPy0UhMnQSlTCB+3dEsfv ikd73K8sla2r6SjRlnG7NrMDEg2HVNQ= -----END CERTIFICATE-----Generated at Tue Nov 4 22:45:06 2025 by rpki-client