$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ed9a307-dd59-3c0d-9cec-5d6653a76b99.roa File: 8ed9a307-dd59-3c0d-9cec-5d6653a76b99.roa (raw, json) Hash identifier: aUKjyrdcz7D/3DaAxeyaPp1m44ErZuBh6ncoR5ZoDeo= Subject key identifier: A2:25:D9:9C:C0:EE:04:E3:C5:C4:3E:54:35:0D:80:19:4E:D5:DD:88 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E203D66BCDC9196605D378 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ed9a307-dd59-3c0d-9cec-5d6653a76b99.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.202.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:03:d6:6b:cd:c9:19:66:05:d3:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=645504f4-294e-4455-8345-cc3a23c7cbaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0a:b0:50:c4:8b:bf:87:42:ee:a4:52:1d:ab: a0:ad:c5:80:94:db:03:92:37:02:d3:ee:90:d4:ad: 91:c1:c0:66:58:10:ed:56:e2:e5:91:ef:59:ba:00: 4a:b5:1f:38:4b:36:27:8a:12:d3:9d:ff:9d:72:77: c5:b8:18:f2:d0:8b:d2:ae:ea:3a:08:f3:7d:23:07: b2:41:3c:39:6b:b2:f1:fa:51:c4:a0:9a:20:00:b0: b7:1f:16:25:ce:6f:17:50:8a:05:45:44:3a:ac:97: d9:28:5a:58:05:10:dc:a9:1a:36:2a:72:41:2f:49: d1:9f:8d:cf:e2:f1:a8:8c:c6:a9:c2:e3:7e:5e:44: ff:f7:d1:bd:a7:26:94:ca:cb:96:3f:10:f6:a0:5e: da:c3:48:ae:a3:e4:4e:60:70:56:1d:8b:ee:b3:a6: d1:a6:04:f1:26:99:24:1c:1e:ee:bb:dc:48:34:a6: 1b:49:0a:ee:80:52:df:1a:5d:14:57:95:9c:d3:f2: a2:7d:d4:6f:45:10:85:2a:c8:c3:12:20:a0:dd:ba: e3:28:38:ea:1a:74:c6:6f:b4:a9:dd:8f:ec:0e:1f: cd:5e:69:97:18:6a:68:de:a0:e3:c5:27:52:e9:13: 6f:61:1a:cd:a1:18:a3:a8:d9:e3:60:16:ab:78:c6: be:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:25:D9:9C:C0:EE:04:E3:C5:C4:3E:54:35:0D:80:19:4E:D5:DD:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ed9a307-dd59-3c0d-9cec-5d6653a76b99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:63:21:ff:21:d8:a8:14:59:24:4d:ec:46:47:26:fe:bd:25: 2c:7a:c1:e7:fd:19:4b:7d:a8:9d:5d:8b:40:54:7b:19:5c:b1: 02:64:21:4b:92:62:ac:42:f0:97:f7:88:f0:47:b9:fc:8a:2a: cc:35:87:26:da:af:79:b6:ce:93:7e:4a:66:17:3c:37:0c:f5: 1e:0f:7e:a5:4b:3f:6f:17:a7:c4:f5:83:b9:f5:ea:3f:74:99: 8b:16:27:7f:a3:2f:69:5c:07:21:ba:63:10:a0:3b:7b:72:c3: db:0b:69:44:44:92:8a:0d:1e:15:11:3b:dc:1e:97:57:84:3b: f7:b4:a4:e1:c9:97:c6:bf:a2:7d:60:a5:ad:db:14:a4:00:1f: af:3f:1f:e3:4d:b4:ad:4b:a9:fb:6c:42:39:9a:d4:60:e5:3d: 89:93:e5:f8:0d:84:19:64:6d:8f:3f:c6:c1:ae:ed:b7:03:1c: 3d:cf:50:c1:8f:27:9d:83:0c:66:39:a7:c4:0d:fc:08:ad:92: a3:63:2e:f6:1f:37:98:d7:af:a1:ac:8d:95:88:25:95:df:3c: 1a:ba:23:c0:ae:46:2c:05:98:a1:6b:57:d0:d0:28:6e:65:87: e9:03:7a:b7:1c:0b:90:c5:21:2d:9c:76:77:d3:01:94:b0:25: a5:52:19:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4gPWa83JGWYF03gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NjQ1NTA0ZjQtMjk0ZS00NDU1LTgzNDUtY2MzYTIzYzdjYmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAqwUMSLv4dC7qRSHaugrcWAlNsDkjcC0+6Q 1K2RwcBmWBDtVuLlke9ZugBKtR84SzYnihLTnf+dcnfFuBjy0IvSruo6CPN9Iwey QTw5a7Lx+lHEoJogALC3HxYlzm8XUIoFRUQ6rJfZKFpYBRDcqRo2KnJBL0nRn43P 4vGojMapwuN+XkT/99G9pyaUysuWPxD2oF7aw0iuo+ROYHBWHYvus6bRpgTxJpkk HB7uu9xINKYbSQrugFLfGl0UV5Wc0/KifdRvRRCFKsjDEiCg3brjKDjqGnTGb7Sp 3Y/sDh/NXmmXGGpo3qDjxSdS6RNvYRrNoRijqNnjYBareMa+GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIl2ZzA7gTjxcQ+VDUNgBlO1d2IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGVkOWEzMDctZGQ1OS0z YzBkLTljZWMtNWQ2NjUzYTc2Yjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8rwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtjIf8h2KgUWSRN7EZHJv69JSx6wef9GUt9qJ1di0BUexlcsQJkIUuS YqxC8Jf3iPBHufyKKsw1hybar3m2zpN+SmYXPDcM9R4PfqVLP28Xp8T1g7n16j90 mYsWJ3+jL2lcByG6YxCgO3tyw9sLaUREkooNHhURO9wel1eEO/e0pOHJl8a/on1g pa3bFKQAH68/H+NNtK1LqftsQjma1GDlPYmT5fgNhBlkbY8/xsGu7bcDHD3PUMGP J52DDGY5p8QN/AitkqNjLvYfN5jXr6GsjZWIJZXfPBq6I8CuRiwFmKFrV9DQKG5l h+kDerccC5DFIS2cdnfTAZSwJaVSGVo= -----END CERTIFICATE-----Generated at Tue Nov 4 20:58:38 2025 by rpki-client