$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbea8fb8-3e32-3ba0-9469-54c0cce4f826.roa File: bbea8fb8-3e32-3ba0-9469-54c0cce4f826.roa (raw, json) Hash identifier: Qt9jeSwUvn0KyGX3/yOt1DKg+g/ItzqF9ha3lFVHmvo= Subject key identifier: 41:A5:3C:44:1F:D5:68:FB:C7:65:FF:65:3C:36:11:34:48:81:EB:6F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B477C993CF31D1D79CB4707C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbea8fb8-3e32-3ba0-9469-54c0cce4f826.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 20940 IP address blocks: 23.200.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:99:3c:f3:1d:1d:79:cb:47:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=bdc8f8b7-6220-481c-a0c0-502781bc01e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:48:fe:b2:ea:85:4b:8c:49:46:f8:60:b6:ad: 80:f4:bc:1a:51:ae:03:4d:14:ce:5e:ea:c7:92:8b: b9:f8:55:8b:6f:97:f1:1b:94:ae:7b:95:8a:ed:e7: dc:b6:08:a4:22:48:a1:39:24:c7:fc:53:ba:65:7c: 24:42:28:d5:33:47:f8:8d:54:cc:cf:19:50:e5:2c: 99:86:56:e3:5b:15:95:7d:ad:67:ce:f6:18:3a:df: 59:f3:7d:68:83:9b:81:f0:03:01:41:35:ed:c2:9c: d7:83:03:6b:3d:0b:da:e7:97:72:c9:a4:20:cf:04: 57:bb:4d:01:4f:a4:cc:c6:34:f6:da:2a:47:d3:30: 3b:a3:0b:6b:86:c0:3f:79:98:3d:01:3d:85:78:15: ff:0f:55:2b:d2:71:83:1a:1a:ca:7f:95:35:28:4a: 3c:49:f0:ca:98:45:9e:61:f6:35:1b:f9:67:ca:ad: a4:27:07:d1:f9:85:c9:19:b3:4a:6a:65:7f:79:37: 2c:5d:a5:01:66:b9:a4:84:7f:83:05:40:c1:98:d7: 6d:5f:ae:7f:76:fd:ec:6f:a7:c3:0f:39:ee:1f:eb: c1:c1:34:c6:6c:46:a5:50:8e:d2:bf:fd:1e:05:33: cc:a4:75:b1:28:0e:89:f9:82:f4:48:88:6c:0f:1d: b6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A5:3C:44:1F:D5:68:FB:C7:65:FF:65:3C:36:11:34:48:81:EB:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbea8fb8-3e32-3ba0-9469-54c0cce4f826.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:47:b4:8a:fb:78:25:c2:41:14:95:97:9c:52:4b:d5:67:4e: 1d:c3:a2:6a:50:53:ae:66:3a:2c:1c:49:f5:49:4c:bd:00:aa: f8:b1:9f:51:64:9d:92:db:73:94:65:b3:38:a8:79:1f:b4:0e: fd:d9:45:27:89:ee:6e:71:c6:6f:38:e3:8c:e0:56:3d:69:64: 48:90:c8:19:82:64:6c:fd:5f:b1:2d:28:8a:13:b0:35:46:18: f2:a0:51:62:87:6c:fc:e1:4f:16:d2:3d:db:ed:54:28:d8:93: a3:2a:58:61:1c:d2:e7:9d:5a:cb:37:48:73:bc:f3:ed:60:0c: e8:74:fe:d8:c1:f7:4a:f2:48:2a:6c:de:03:20:17:fb:10:f3: e9:00:14:77:12:be:0c:93:5c:0c:8c:4b:58:30:e2:30:cb:54: 38:0d:d9:f2:7a:20:ff:76:36:17:09:b5:ac:a5:da:28:9b:41: 29:ea:3e:99:4e:06:dc:41:3e:ff:55:9e:b0:54:9a:a4:37:67: 3b:76:cc:f6:52:5d:32:5b:9c:8e:61:d5:8d:b7:72:51:58:b2: fa:42:f3:04:93:be:90:ee:a5:20:f7:ab:33:6a:6b:63:ae:69: 37:46:5f:95:93:67:7e:77:ef:f9:2d:6b:6d:27:4b:81:0f:fe: c7:ac:40:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfJk88x0dectHB8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk YmRjOGY4YjctNjIyMC00ODFjLWEwYzAtNTAyNzgxYmMwMWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ej+suqFS4xJRvhgtq2A9LwaUa4DTRTOXurH kou5+FWLb5fxG5Sue5WK7efctgikIkihOSTH/FO6ZXwkQijVM0f4jVTMzxlQ5SyZ hlbjWxWVfa1nzvYYOt9Z831og5uB8AMBQTXtwpzXgwNrPQva55dyyaQgzwRXu00B T6TMxjT22ipH0zA7owtrhsA/eZg9AT2FeBX/D1Ur0nGDGhrKf5U1KEo8SfDKmEWe YfY1G/lnyq2kJwfR+YXJGbNKamV/eTcsXaUBZrmkhH+DBUDBmNdtX65/dv3sb6fD DznuH+vBwTTGbEalUI7Sv/0eBTPMpHWxKA6J+YL0SIhsDx22FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGlPEQf1Wj7x2X/ZTw2ETRIgetvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmJlYThmYjgtM2UzMi0z YmEwLTk0NjktNTRjMGNjZTRmODI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8hZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZHtIr7eCXCQRSVl5xSS9VnTh3DompQU65mOiwcSfVJTL0Aqvixn1Fk nZLbc5RlszioeR+0Dv3ZRSeJ7m5xxm8444zgVj1pZEiQyBmCZGz9X7EtKIoTsDVG GPKgUWKHbPzhTxbSPdvtVCjYk6MqWGEc0uedWss3SHO88+1gDOh0/tjB90rySCps 3gMgF/sQ8+kAFHcSvgyTXAyMS1gw4jDLVDgN2fJ6IP92NhcJtayl2iibQSnqPplO BtxBPv9VnrBUmqQ3Zzt2zPZSXTJbnI5h1Y23clFYsvpC8wSTvpDupSD3qzNqa2Ou aTdGX5WTZ3537/kta20nS4EP/sesQOU= -----END CERTIFICATE-----Generated at Tue Nov 4 22:18:04 2025 by rpki-client