$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8212462-975b-3021-970a-20bf4a9a2bbc.roa File: a8212462-975b-3021-970a-20bf4a9a2bbc.roa (raw, json) Hash identifier: xyx0w+CymK9/FWXQdSF4uw0SyqNC8GJP9zGnNQUfk+c= Subject key identifier: 80:77:ED:87:0D:EF:DB:38:D0:F0:BA:70:2E:A6:AE:1E:97:24:FC:97 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B461702BE3FC746FD27A68100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8212462-975b-3021-970a-20bf4a9a2bbc.roa Signing time: Mon 22 Sep 2025 01:00:33 +0000 ROA not before: Mon 22 Sep 2025 01:00:33 +0000 ROA not after: Sun 21 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.199.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:17:02:be:3f:c7:46:fd:27:a6:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 01:00:33 2025 GMT Not After : Dec 21 02:00:33 2025 GMT Subject: CN=1eb568e7-c093-40ce-89fa-2c553a02589b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:23:2a:28:92:59:7d:08:ac:36:5c:9d:02:20: d5:4f:6a:8b:f0:50:b7:6e:86:43:60:46:ee:d8:c1: 4f:80:82:c1:dc:a0:c6:8b:78:ed:49:dc:e5:71:3e: 30:f2:0a:71:db:ed:a2:dd:7c:b9:c9:3b:db:02:64: 6b:f5:94:f5:ca:2b:3d:3b:37:78:b9:6a:ec:fb:c0: c8:78:32:0c:f1:8a:7d:34:95:d2:3e:5b:61:ad:df: ec:73:a2:6f:e8:ee:78:60:ab:e6:1a:f3:92:bb:24: 4b:c3:f8:7f:2e:6e:0d:7c:88:a2:1d:3b:1a:44:4f: c9:3a:37:4d:61:eb:cf:b4:3c:33:da:21:7a:0c:29: 47:27:d8:7b:33:8f:38:05:fa:a2:b0:cd:09:f2:23: 09:94:8b:f0:53:60:c1:6f:33:e4:2a:fa:58:22:73: cd:bb:0d:69:f4:56:b0:ed:2f:5e:b8:59:73:a9:a2: 51:bb:30:45:00:8d:e2:1d:21:3d:3f:6d:02:43:9e: ba:d0:b1:30:04:ff:fb:80:98:c5:19:9d:ff:71:df: 24:2a:af:82:f5:c8:b7:32:b0:fe:91:12:9c:90:97: a2:a5:c3:98:b3:49:df:d5:42:c9:a8:7b:39:38:b8: ad:c6:5a:1d:ad:58:b9:00:0a:bd:b0:77:d7:bb:a1: 28:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:77:ED:87:0D:EF:DB:38:D0:F0:BA:70:2E:A6:AE:1E:97:24:FC:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8212462-975b-3021-970a-20bf4a9a2bbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:75:fa:99:47:a5:57:b0:22:16:fc:d1:a7:e1:e0:e9:5e:7e: ce:5c:8d:63:fc:c4:5c:60:36:81:74:7f:7f:82:86:5c:1b:14: 42:6a:93:da:9e:25:01:5a:fb:6b:14:10:a7:e7:ae:4a:1d:15: 5c:a7:ea:39:91:d8:b7:2b:d2:39:2d:aa:dc:10:2c:77:82:cf: 1a:ba:38:26:91:99:83:42:13:9f:7d:12:ed:d1:9b:c9:8a:78: 7b:89:3b:99:72:3f:87:bd:38:25:66:cf:15:67:d2:fb:2c:97: ad:46:47:93:e4:da:15:ef:50:b3:96:68:16:99:4f:cf:f0:1a: 12:6d:30:ad:0d:71:88:72:66:c3:57:d3:2e:f0:2d:bd:7b:8e: a0:c5:10:64:36:c5:a2:78:eb:53:aa:19:e7:c3:90:74:4f:46: af:50:85:2a:0b:34:62:f8:47:ed:de:21:63:e6:05:18:7e:32: f0:c0:fe:5f:e6:d1:e6:6c:36:7a:8f:43:18:c6:70:3d:80:b4: ef:d2:eb:a6:73:7c:36:e5:8e:dc:f5:6f:b6:5f:2d:ff:cf:a0: af:a4:1f:2a:64:34:d3:80:09:5d:c9:85:bf:fb:38:5c:58:14: 66:d5:25:d1:9b:85:d4:46:c8:f7:c6:7a:47:6b:a5:1b:66:fa: 79:a3:2d:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtGFwK+P8dG/SemgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk MWViNTY4ZTctYzA5My00MGNlLTg5ZmEtMmM1NTNhMDI1ODliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyMqKJJZfQisNlydAiDVT2qL8FC3boZDYEbu 2MFPgILB3KDGi3jtSdzlcT4w8gpx2+2i3Xy5yTvbAmRr9ZT1yis9Ozd4uWrs+8DI eDIM8Yp9NJXSPlthrd/sc6Jv6O54YKvmGvOSuyRLw/h/Lm4NfIiiHTsaRE/JOjdN YevPtDwz2iF6DClHJ9h7M484BfqisM0J8iMJlIvwU2DBbzPkKvpYInPNuw1p9Faw 7S9euFlzqaJRuzBFAI3iHSE9P20CQ5660LEwBP/7gJjFGZ3/cd8kKq+C9ci3MrD+ kRKckJeipcOYs0nf1ULJqHs5OLitxlodrVi5AAq9sHfXu6EolwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIB37YcN79s40PC6cC6mrh6XJPyXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTgyMTI0NjItOTc1Yi0z MDIxLTk3MGEtMjBiZjRhOWEyYmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8dKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA91+plHpVewIhb80afh4Olefs5cjWP8xFxgNoF0f3+ChlwbFEJqk9qe JQFa+2sUEKfnrkodFVyn6jmR2Lcr0jktqtwQLHeCzxq6OCaRmYNCE599Eu3Rm8mK eHuJO5lyP4e9OCVmzxVn0vssl61GR5Pk2hXvULOWaBaZT8/wGhJtMK0NcYhyZsNX 0y7wLb17jqDFEGQ2xaJ461OqGefDkHRPRq9QhSoLNGL4R+3eIWPmBRh+MvDA/l/m 0eZsNnqPQxjGcD2AtO/S66ZzfDbljtz1b7ZfLf/PoK+kHypkNNOACV3Jhb/7OFxY FGbVJdGbhdRGyPfGekdrpRtm+nmjLaU= -----END CERTIFICATE-----Generated at Tue Nov 4 22:20:11 2025 by rpki-client