$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1c4eb76-1361-3637-a9f7-647873c1c94a.roa File: a1c4eb76-1361-3637-a9f7-647873c1c94a.roa (raw, json) Hash identifier: po0Iruk+WzIBTzfS6tZo2T3bhC57KnlOpVUCF5BgTTU= Subject key identifier: 40:97:A6:EF:35:6E:FB:27:40:B5:9F:BF:64:02:A8:B3:2A:07:1B:B7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B461700A841A99D93B1786D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1c4eb76-1361-3637-a9f7-647873c1c94a.roa Signing time: Mon 22 Sep 2025 01:00:33 +0000 ROA not before: Mon 22 Sep 2025 01:00:33 +0000 ROA not after: Sun 21 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.199.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:17:00:a8:41:a9:9d:93:b1:78:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 01:00:33 2025 GMT Not After : Dec 21 02:00:33 2025 GMT Subject: CN=31f4ca69-05f3-438f-92f4-c27fe188e57d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6c:8f:b8:93:9f:aa:95:2f:48:4c:1b:85:d2: eb:a3:97:d0:04:a6:51:07:be:63:bd:6f:79:b2:f6: 36:c3:60:b2:21:74:fb:28:12:ff:35:37:16:61:cf: 90:4b:34:b4:0f:d0:4e:04:db:67:29:40:00:3a:1b: e2:74:b5:22:05:36:83:b8:59:9e:79:74:11:9c:42: 21:27:db:68:cf:7b:77:cb:93:fe:0a:42:5c:33:64: dc:1b:bd:81:d4:c9:95:c7:5c:50:33:1c:84:98:e3: 74:1c:bc:6c:31:e6:01:68:97:e8:00:43:af:14:b2: 15:68:3b:69:14:ce:ae:26:c3:cc:25:ea:37:ea:bb: 93:8a:51:0e:6b:77:e9:77:23:fa:f9:49:84:47:c7: b5:44:e7:76:16:b7:1f:a1:f9:4e:81:ca:38:35:e0: dc:9c:87:7c:ea:03:f2:fe:42:b8:11:bb:71:40:15: d9:dd:93:42:95:74:b0:19:79:75:29:0d:61:5a:ee: cf:c3:d5:52:f3:e6:1b:7b:77:58:0a:9e:b6:6f:16: 37:40:10:29:83:7d:32:ec:3a:53:9e:bc:6c:69:c6: f7:52:1e:d8:23:5b:ad:12:ae:4f:ee:9f:61:e8:7f: 24:48:09:12:35:47:29:42:d2:46:3a:d3:63:5d:43: 24:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:97:A6:EF:35:6E:FB:27:40:B5:9F:BF:64:02:A8:B3:2A:07:1B:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1c4eb76-1361-3637-a9f7-647873c1c94a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:38:5d:94:a2:25:e5:67:7b:5e:a4:3f:4f:41:a6:1a:08:ce: e0:02:b1:83:90:5b:81:5c:93:0b:58:c3:fa:53:b9:06:f0:ae: d2:80:94:be:56:57:81:e3:40:7f:90:d2:ef:e8:cd:36:3b:b4: 25:12:f7:44:0c:80:00:ba:79:fc:90:82:f6:44:a4:a1:2e:1f: 49:09:dc:f6:b4:ce:b4:74:aa:fe:97:8b:d0:e3:e6:84:b1:64: 52:2c:67:30:e7:d8:36:ab:4f:fe:98:76:33:cd:b8:58:fd:c6: 7a:9c:15:6f:f8:8c:bc:f7:e2:04:b9:d7:49:e8:f4:31:0d:57: d7:68:34:8a:8e:a5:55:00:8b:e1:ab:86:ef:dc:ca:2d:bf:0e: 20:38:af:a2:ca:08:a3:a2:48:d1:28:6e:78:c8:3d:ba:4f:02: 76:46:0f:40:11:6b:63:93:86:98:98:77:9c:40:31:74:cc:02: 41:8d:d5:96:d4:52:64:d8:4f:e9:b1:21:59:f4:2f:5d:86:c4: f7:bc:e7:44:cb:dd:7c:c1:d7:3e:73:70:4d:6d:81:ba:e0:52: 68:d5:1b:d2:a1:7f:27:4f:cb:ff:1e:c5:14:e5:f3:89:05:13: f2:61:ed:20:dd:74:d5:2f:6a:d4:84:a5:9a:ab:f7:bd:55:ed: a1:25:98:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtGFwCoQamdk7F4bYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk MzFmNGNhNjktMDVmMy00MzhmLTkyZjQtYzI3ZmUxODhlNTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGyPuJOfqpUvSEwbhdLro5fQBKZRB75jvW95 svY2w2CyIXT7KBL/NTcWYc+QSzS0D9BOBNtnKUAAOhvidLUiBTaDuFmeeXQRnEIh J9toz3t3y5P+CkJcM2TcG72B1MmVx1xQMxyEmON0HLxsMeYBaJfoAEOvFLIVaDtp FM6uJsPMJeo36ruTilEOa3fpdyP6+UmER8e1ROd2FrcfoflOgco4NeDcnId86gPy /kK4EbtxQBXZ3ZNClXSwGXl1KQ1hWu7Pw9VS8+Ybe3dYCp62bxY3QBApg30y7DpT nrxsacb3Uh7YI1utEq5P7p9h6H8kSAkSNUcpQtJGOtNjXUMkiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECXpu81bvsnQLWfv2QCqLMqBxu3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTFjNGViNzYtMTM2MS0z NjM3LWE5ZjctNjQ3ODczYzFjOTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8dQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIo4XZSiJeVne16kP09BphoIzuACsYOQW4FckwtYw/pTuQbwrtKAlL5W V4HjQH+Q0u/ozTY7tCUS90QMgAC6efyQgvZEpKEuH0kJ3Pa0zrR0qv6Xi9Dj5oSx ZFIsZzDn2DarT/6YdjPNuFj9xnqcFW/4jLz34gS510no9DENV9doNIqOpVUAi+Gr hu/cyi2/DiA4r6LKCKOiSNEobnjIPbpPAnZGD0ARa2OThpiYd5xAMXTMAkGN1ZbU UmTYT+mxIVn0L12GxPe850TL3XzB1z5zcE1tgbrgUmjVG9KhfydPy/8exRTl84kF E/Jh7SDddNUvatSEpZqr971V7aElmMU= -----END CERTIFICATE-----Generated at Tue Nov 4 23:57:18 2025 by rpki-client