$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8277b932-488a-3f08-b0e7-eeb983f49960.roa File: 8277b932-488a-3f08-b0e7-eeb983f49960.roa (raw, json) Hash identifier: 6Wc0BpXmxysVCji3aklDxCWHeTNX9ZaxtF19EgwgI2U= Subject key identifier: F0:FA:2F:20:E9:66:08:94:A8:48:EB:0D:E7:AB:96:A9:EF:75:4D:FD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B434C8C80AFDD9799676D9180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8277b932-488a-3f08-b0e7-eeb983f49960.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.197.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:8c:80:af:dd:97:99:67:6d:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=25cba32c-aa96-40ea-927a-5e170ff6de73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cd:25:8d:5e:cd:eb:9d:d0:ea:b6:2c:18:6b: b6:40:4e:ac:28:a2:38:17:be:b8:2e:ae:94:96:ab: 38:40:3f:88:32:c5:2f:70:b7:7c:74:53:ae:41:e5: 22:07:8d:40:63:85:29:da:24:a4:54:28:20:ee:cf: db:36:10:31:54:8e:a6:9e:33:45:87:54:d2:a8:7b: d1:53:7e:1e:f9:2a:9d:ad:7e:49:b2:81:a9:fa:ef: 7d:72:18:14:c3:44:e4:c1:08:19:15:1b:82:06:1a: 75:34:3c:c5:44:11:1c:f3:6a:08:b7:82:0b:15:e0: a4:fd:f3:92:a6:2a:a3:b1:93:b3:87:79:ff:0e:a7: a1:6e:d6:69:19:17:8e:af:01:78:ce:d4:1c:23:ea: d4:fc:7b:ab:b8:e8:16:85:d7:93:d1:ae:2a:71:bb: 0b:85:cf:7d:b4:8d:8e:1b:cd:32:98:13:3f:7b:6c: cf:cf:81:4f:ac:48:f3:03:50:f9:a9:f7:38:dc:f4: a6:ef:bf:7f:f3:fe:0c:4e:22:19:5c:56:92:ae:71: aa:75:20:55:57:c7:87:ee:40:50:8b:f7:e7:3b:5b: 0e:a3:bb:67:03:46:2f:dc:66:cb:e6:33:3f:d1:90: 6e:d1:64:de:b7:f3:52:d5:f9:75:c5:bd:d1:31:74: d4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FA:2F:20:E9:66:08:94:A8:48:EB:0D:E7:AB:96:A9:EF:75:4D:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8277b932-488a-3f08-b0e7-eeb983f49960.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:2f:d6:a4:54:58:11:96:60:c5:dd:89:91:be:12:09:09:e3: 8c:52:ba:96:9b:96:e9:9a:e0:64:1d:fa:bb:2c:07:f5:fd:80: 3c:f8:20:1b:f7:6a:20:68:88:bb:4e:8b:0b:b6:7b:ab:b4:fe: a3:5d:41:3a:ce:a2:ac:e5:2c:f7:e1:37:0f:62:58:85:4f:e4: 6a:04:a8:ce:4d:f5:84:ba:a7:a9:03:f1:5d:89:c4:e0:0d:d2: fe:57:84:8d:89:7e:ad:a4:0c:33:17:11:69:d2:99:ed:1f:29: ae:94:75:0e:21:01:71:83:57:6f:42:71:de:78:21:a9:ea:3c: 8b:17:d8:e5:22:b3:32:e3:8a:ec:cb:e7:a0:f1:95:2d:ff:33: ec:8e:c1:11:c7:be:a0:75:88:e9:dc:ee:c3:0c:76:0a:03:e8: db:59:65:be:80:97:b3:0f:dc:50:31:4b:a7:a5:b2:99:67:eb: d5:c3:83:1c:a8:2a:2f:9a:a2:82:30:b1:38:9b:8b:41:c1:8d: 10:c7:5a:9e:74:03:20:f8:19:00:fa:aa:cd:4e:77:cc:e5:fb: db:79:a9:4f:95:84:33:0d:e8:44:a8:c6:b7:4a:19:f0:1f:fb: 6b:6b:0b:36:a9:58:ed:e7:a8:ad:cd:23:4b:04:98:63:4b:d5: 89:30:2c:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTIyAr92XmWdtkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MjVjYmEzMmMtYWE5Ni00MGVhLTkyN2EtNWUxNzBmZjZkZTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos0ljV7N653Q6rYsGGu2QE6sKKI4F764Lq6U lqs4QD+IMsUvcLd8dFOuQeUiB41AY4Up2iSkVCgg7s/bNhAxVI6mnjNFh1TSqHvR U34e+SqdrX5JsoGp+u99chgUw0TkwQgZFRuCBhp1NDzFRBEc82oIt4ILFeCk/fOS piqjsZOzh3n/DqehbtZpGReOrwF4ztQcI+rU/HuruOgWhdeT0a4qcbsLhc99tI2O G80ymBM/e2zPz4FPrEjzA1D5qfc43PSm779/8/4MTiIZXFaSrnGqdSBVV8eH7kBQ i/fnO1sOo7tnA0Yv3GbL5jM/0ZBu0WTet/NS1fl1xb3RMXTUDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPD6LyDpZgiUqEjrDeerlqnvdU39MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODI3N2I5MzItNDg4YS0z ZjA4LWIwZTctZWViOTgzZjQ5OTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8XKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsv1qRUWBGWYMXdiZG+EgkJ44xSupabluma4GQd+rssB/X9gDz4IBv3 aiBoiLtOiwu2e6u0/qNdQTrOoqzlLPfhNw9iWIVP5GoEqM5N9YS6p6kD8V2JxOAN 0v5XhI2Jfq2kDDMXEWnSme0fKa6UdQ4hAXGDV29Ccd54IanqPIsX2OUiszLjiuzL 56DxlS3/M+yOwRHHvqB1iOnc7sMMdgoD6NtZZb6Al7MP3FAxS6elspln69XDgxyo Ki+aooIwsTibi0HBjRDHWp50AyD4GQD6qs1Od8zl+9t5qU+VhDMN6ESoxrdKGfAf +2trCzapWO3nqK3NI0sEmGNL1YkwLJo= -----END CERTIFICATE-----Generated at Tue Nov 4 23:55:47 2025 by rpki-client