$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72c83db3-9b40-3d42-ab53-fb09be609179.roa File: 72c83db3-9b40-3d42-ab53-fb09be609179.roa (raw, json) Hash identifier: cI0OPHZxnYiOttdZDbKxqFilJR0keDiH1mJ+pMyvNFM= Subject key identifier: 65:F7:7B:41:9B:BC:65:20:90:20:BA:15:FA:49:DE:12:6F:17:1C:37 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B434C772851EFD4C20FD21A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72c83db3-9b40-3d42-ab53-fb09be609179.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16625 IP address blocks: 23.198.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:77:28:51:ef:d4:c2:0f:d2:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=42b8b825-1b9f-4ddd-a6a8-6d13c148e124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:16:10:b5:d4:34:43:b3:d6:5b:9e:b2:64:43: 1d:82:82:f7:49:60:e2:31:58:43:0a:e6:24:6a:df: 9f:ed:af:98:5e:0d:6e:2d:3d:2c:25:66:50:e5:23: 4e:da:56:1b:a0:81:7b:15:32:0b:3f:bd:6e:30:bc: 67:64:06:b5:90:fe:f0:5b:01:81:42:7f:40:4a:13: ff:c7:c6:5c:04:43:c7:fc:50:0a:3a:45:0b:a4:c8: e9:1a:b0:a7:51:21:4c:60:f6:ca:43:b2:d8:90:90: 13:e7:86:10:40:d4:e8:6d:b6:79:4a:d5:4b:02:4e: 16:8c:c8:2b:83:9e:14:04:9e:63:5e:1d:03:b0:2d: 65:7b:9c:56:18:54:e5:8a:9d:a3:cb:c9:3d:47:16: 46:2f:cd:ca:cd:a3:fb:06:97:e0:2e:3a:08:98:95: 7f:c7:a6:71:d5:44:a6:94:04:70:ed:6c:8d:24:10: 7e:51:70:14:91:88:5c:d7:b0:0b:ab:8a:ea:3d:1c: b2:bf:37:14:fb:9a:41:c6:b9:a3:ba:b1:88:42:62: 43:86:0e:a2:31:e6:2f:8d:0c:75:12:20:1c:0b:cd: 89:70:98:09:a7:4e:e1:cc:53:ce:4f:f6:78:14:63: 07:1c:f2:e9:d4:62:c5:7e:f1:b7:d7:12:a6:ec:6b: af:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F7:7B:41:9B:BC:65:20:90:20:BA:15:FA:49:DE:12:6F:17:1C:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72c83db3-9b40-3d42-ab53-fb09be609179.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.198.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:38:4d:cd:c5:45:89:d5:cb:39:89:63:45:7c:d4:37:6d:d4: fc:cd:b9:a6:1e:1f:44:c4:84:20:99:a8:23:99:4a:bf:e4:79: 7f:75:07:44:6d:2d:ba:8e:12:fd:3c:86:d1:2b:c9:09:52:f5: 2e:5c:1a:25:05:3f:cf:d4:f6:d5:b0:d8:04:00:a6:14:07:af: 7c:3c:71:08:02:2e:45:f2:b2:cb:f8:f4:a4:e0:aa:17:6d:28: 8e:4f:27:2f:bf:2c:a7:d2:5d:2a:5c:03:56:6d:ea:ae:0c:4d: 93:d5:3b:3e:2a:5d:22:d6:59:07:20:a1:27:14:49:97:f7:58: 75:0c:7d:91:69:7d:07:65:7a:fc:77:32:03:d5:5f:cb:6e:22: 6f:1f:b7:ef:c0:a7:e1:23:75:70:6f:84:02:54:28:a9:62:6d: 34:a7:29:fc:ac:aa:db:5c:b1:58:d4:47:40:48:39:02:6f:48: d3:cc:82:3b:26:b9:84:77:e7:ef:85:ea:3e:68:5c:b3:16:17: 3a:99:dd:ce:89:32:a2:4f:df:f6:8a:61:cc:ad:b0:c4:86:f7: 50:4d:ff:3c:6a:b7:12:0a:3c:64:9a:81:43:44:81:8d:d9:be: 90:ab:30:56:e1:f2:b6:05:fe:ff:7d:02:ba:9f:f7:46:60:d2: 37:d1:2d:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTHcoUe/Uwg/SGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NDJiOGI4MjUtMWI5Zi00ZGRkLWE2YTgtNmQxM2MxNDhlMTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshYQtdQ0Q7PWW56yZEMdgoL3SWDiMVhDCuYk at+f7a+YXg1uLT0sJWZQ5SNO2lYboIF7FTILP71uMLxnZAa1kP7wWwGBQn9AShP/ x8ZcBEPH/FAKOkULpMjpGrCnUSFMYPbKQ7LYkJAT54YQQNTobbZ5StVLAk4WjMgr g54UBJ5jXh0DsC1le5xWGFTlip2jy8k9RxZGL83KzaP7BpfgLjoImJV/x6Zx1USm lARw7WyNJBB+UXAUkYhc17ALq4rqPRyyvzcU+5pBxrmjurGIQmJDhg6iMeYvjQx1 EiAcC82JcJgJp07hzFPOT/Z4FGMHHPLp1GLFfvG31xKm7GuvJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGX3e0GbvGUgkCC6FfpJ3hJvFxw3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzJjODNkYjMtOWI0MC0z ZDQyLWFiNTMtZmIwOWJlNjA5MTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8YgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJY4Tc3FRYnVyzmJY0V81Ddt1PzNuaYeH0TEhCCZqCOZSr/keX91B0Rt LbqOEv08htEryQlS9S5cGiUFP8/U9tWw2AQAphQHr3w8cQgCLkXyssv49KTgqhdt KI5PJy+/LKfSXSpcA1Zt6q4MTZPVOz4qXSLWWQcgoScUSZf3WHUMfZFpfQdlevx3 MgPVX8tuIm8ft+/Ap+EjdXBvhAJUKKlibTSnKfysqttcsVjUR0BIOQJvSNPMgjsm uYR35++F6j5oXLMWFzqZ3c6JMqJP3/aKYcytsMSG91BN/zxqtxIKPGSagUNEgY3Z vpCrMFbh8rYF/v99Arqf90Zg0jfRLQY= -----END CERTIFICATE-----Generated at Tue Nov 4 22:19:52 2025 by rpki-client