$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d207af8-de6f-311e-a680-cd8199ace67a.roa File: 9d207af8-de6f-311e-a680-cd8199ace67a.roa (raw, json) Hash identifier: 3EiWvIQ6+R1rV1+32/e8FxBOC1jazKIFETcVVHHKn+4= Subject key identifier: DC:1F:43:26:E4:A0:9B:E9:7E:EF:C1:31:61:CF:58:D7:3B:7F:21:38 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B477C95C7283246333C714C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d207af8-de6f-311e-a680-cd8199ace67a.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 20940 IP address blocks: 23.201.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:95:c7:28:32:46:33:3c:71:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=b9a485dc-4def-4411-96e7-bda63b0b49ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:94:fe:55:4a:c9:3e:06:6c:a9:dc:90:6a:eb: b3:5a:e0:00:db:49:03:38:e2:2e:10:ee:61:55:2c: 72:d2:de:05:28:ce:8f:33:fa:43:5e:7c:e0:1c:54: 4a:fa:ea:fb:a6:fd:75:44:05:21:c0:c5:79:c5:5b: cb:fd:6d:29:9c:79:ef:ab:51:88:d1:e1:65:7d:63: c7:bf:19:c9:a1:4b:57:1b:b5:91:38:4a:a9:f7:a5: 18:cc:e6:90:08:84:b5:d9:94:3f:b8:85:8c:99:c4: 07:0b:9c:27:4a:dd:42:52:c5:32:a5:76:9b:e7:f4: 55:0f:78:55:ff:f2:3c:e0:4b:d5:89:db:4d:e9:29: 1a:ad:c2:cc:e6:0d:be:2d:7a:27:32:a1:bf:21:b3: 3e:6b:8d:b2:e3:b7:d0:b5:db:bb:77:ca:7c:70:4a: 87:fd:fb:6d:85:dc:ad:5d:19:fe:87:dc:2c:70:de: d6:ab:94:13:52:c2:61:06:90:44:5c:a5:51:7b:70: 67:e7:0c:59:3b:78:70:4c:cb:34:e7:81:e5:b9:91: aa:57:71:87:c9:f6:89:5a:da:6c:c6:15:c7:ee:05: 40:72:85:97:a1:1d:88:8b:ff:5f:bb:f5:a1:ac:b8: bf:55:c5:5f:16:7e:8e:26:cb:b1:4a:6d:ea:55:16: 17:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1F:43:26:E4:A0:9B:E9:7E:EF:C1:31:61:CF:58:D7:3B:7F:21:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d207af8-de6f-311e-a680-cd8199ace67a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:37:2c:d3:59:7d:cb:c9:17:fb:e6:c0:58:ab:95:2c:83:04: 05:87:79:e3:c0:d3:c1:38:2f:fc:6a:5b:8e:9f:9d:d6:d6:ac: 6c:50:2e:df:d9:7d:c8:b9:93:63:a7:28:31:9b:4a:c3:64:c1: 0c:59:61:00:48:25:c7:1d:45:36:30:4c:03:d9:be:c1:7c:99: 9b:75:ef:4b:10:9b:ea:6c:62:89:f1:42:b6:1d:1e:20:9a:96: 62:f2:6a:e1:b2:6c:e7:56:62:85:55:6f:4c:3f:10:2b:b7:74: 7e:c0:be:f4:e1:f9:58:1a:d2:ce:32:ce:7d:c8:e3:0d:2a:93: 8b:56:9c:bd:43:43:0e:df:73:50:ee:3f:61:2a:ca:78:3f:0b: f8:8f:c4:39:7d:d0:2f:a4:97:33:fc:70:00:6a:72:3b:6b:b7: ad:da:05:aa:af:36:46:8d:8e:fe:c8:a6:82:9c:6c:ea:1d:1f: 98:58:85:db:ef:34:43:09:22:6f:11:21:df:34:27:be:9d:fd: 3b:4b:48:66:9b:6b:22:27:66:47:0a:d3:3c:81:e2:3d:b1:85: 5c:2f:a9:1d:6c:6e:3d:65:bf:c9:7d:94:1e:d9:d9:d3:dc:5c: c2:01:a8:a5:4d:19:1e:ea:e2:8a:2f:6b:17:eb:de:37:06:e3: 2a:74:bb:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfJXHKDJGMzxxTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk YjlhNDg1ZGMtNGRlZi00NDExLTk2ZTctYmRhNjNiMGI0OWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJT+VUrJPgZsqdyQauuzWuAA20kDOOIuEO5h VSxy0t4FKM6PM/pDXnzgHFRK+ur7pv11RAUhwMV5xVvL/W0pnHnvq1GI0eFlfWPH vxnJoUtXG7WROEqp96UYzOaQCIS12ZQ/uIWMmcQHC5wnSt1CUsUypXab5/RVD3hV //I84EvVidtN6SkarcLM5g2+LXonMqG/IbM+a42y47fQtdu7d8p8cEqH/ftthdyt XRn+h9wscN7Wq5QTUsJhBpBEXKVRe3Bn5wxZO3hwTMs054HluZGqV3GHyfaJWtps xhXH7gVAcoWXoR2Ii/9fu/WhrLi/VcVfFn6OJsuxSm3qVRYXIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwfQybkoJvpfu/BMWHPWNc7fyE4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWQyMDdhZjgtZGU2Zi0z MTFlLWE2ODAtY2Q4MTk5YWNlNjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8nDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADY3LNNZfcvJF/vmwFirlSyDBAWHeePA08E4L/xqW46fndbWrGxQLt/Z fci5k2OnKDGbSsNkwQxZYQBIJccdRTYwTAPZvsF8mZt170sQm+psYonxQrYdHiCa lmLyauGybOdWYoVVb0w/ECu3dH7AvvTh+Vga0s4yzn3I4w0qk4tWnL1DQw7fc1Du P2Eqyng/C/iPxDl90C+klzP8cABqcjtrt63aBaqvNkaNjv7IpoKcbOodH5hYhdvv NEMJIm8RId80J76d/TtLSGabayInZkcK0zyB4j2xhVwvqR1sbj1lv8l9lB7Z2dPc XMIBqKVNGR7q4oovaxfr3jcG4yp0u30= -----END CERTIFICATE-----Generated at Wed Nov 5 04:34:04 2025 by rpki-client