$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e8337a90-f1e5-36ba-96e6-27a396bf87e9.roa File: e8337a90-f1e5-36ba-96e6-27a396bf87e9.roa (raw, json) Hash identifier: b/JOyoh/GcTYnnEuEsCj+NJwqjcc0CCdlf56MAfr1xw= Subject key identifier: 68:01:41:20:F8:97:25:61:B0:D6:B2:C9:7D:14:1C:68:66:19:D6:C2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA0D26E552A0391AB212B9DE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e8337a90-f1e5-36ba-96e6-27a396bf87e9.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 16625 IP address blocks: 23.198.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:6e:55:2a:03:91:ab:21:2b:9d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=9efec21d-1cfa-47cc-90d9-bfa2861da465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:98:66:79:b5:c9:bc:f8:a9:5b:84:58:e9:58: b2:ad:81:ed:f4:10:42:32:2a:42:de:05:6f:77:5e: ab:77:61:71:c6:08:2c:a8:d0:19:3d:38:d6:4b:a3: 17:3a:00:6d:4b:2d:85:f0:ab:07:a5:dc:80:4f:87: a5:4f:17:04:b4:45:4b:63:2c:43:fb:f2:6a:99:75: b0:5c:4b:e9:c7:0f:0f:a4:fe:1a:0b:85:ed:ab:e6: 26:be:68:47:57:ed:b6:f9:41:8b:93:1a:4b:10:6b: 95:46:86:ab:37:b4:2c:7e:b2:7c:4f:aa:9a:d9:55: 81:ba:0c:e6:1f:ca:12:60:c5:9a:bb:db:9b:7b:d4: 34:31:8b:3f:f4:47:5b:f1:f4:27:53:52:ac:96:90: 2d:8d:a1:2b:0a:1f:2d:d6:03:ea:9e:37:e3:24:1b: fc:c3:27:83:1a:d3:ac:9b:11:2d:74:58:4a:3e:1f: 00:4e:2a:68:34:b3:75:72:d2:42:f0:79:37:0a:39: 77:d5:e5:eb:34:05:7f:b1:bd:2a:e5:f4:e3:5e:c2: 2b:a6:53:04:c2:3f:7a:ec:3d:ba:58:27:a7:7a:b2: c7:c1:73:d9:2c:8c:16:d4:78:89:5a:14:16:5d:ab: 20:c4:0c:99:10:90:68:19:f1:14:63:a1:f3:2c:cc: 93:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:01:41:20:F8:97:25:61:B0:D6:B2:C9:7D:14:1C:68:66:19:D6:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e8337a90-f1e5-36ba-96e6-27a396bf87e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.198.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:2f:62:ce:27:2a:86:8d:2e:d7:02:b5:49:07:46:6f:12:a2: 76:11:37:cd:96:d7:6d:30:76:f5:4b:c9:24:2b:42:98:64:f9: fe:2c:53:64:86:14:5b:c9:c5:11:b5:15:d8:61:44:fb:8c:49: 10:35:77:4f:c4:f9:55:25:4f:b8:98:5a:69:5b:cb:6f:b3:b6: 98:90:a7:99:d0:77:7d:d0:2b:3b:ec:63:f2:73:4b:e2:94:34: f0:f8:d0:6c:2c:ee:af:22:6f:ef:c6:ec:29:cd:ac:8a:94:dc: 85:9d:94:df:b2:a8:21:e4:c6:13:32:dc:37:41:e7:e9:28:57: 5d:32:f5:21:65:8e:f0:45:77:de:28:e1:84:75:33:a7:53:da: b9:21:2e:b7:29:9b:a2:09:c3:8f:e0:ec:a2:0c:18:58:e4:08: c3:b2:76:f7:c4:fe:f5:a1:c1:8e:0e:ee:83:3d:9f:36:44:0b: 03:9e:08:2f:f7:56:b8:d3:d1:cc:02:96:a1:f5:23:56:dc:81: c8:6d:16:8e:9b:d8:e8:74:14:f8:8d:f8:ee:cd:3e:95:6d:6b: 69:9d:f5:8c:ce:63:91:31:68:17:6f:8d:57:55:09:19:56:ba: a0:fb:1d:88:98:59:5e:b5:f6:cc:48:41:87:0f:64:04:6d:93: cc:20:cf:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0m5VKgORqyErneAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk OWVmZWMyMWQtMWNmYS00N2NjLTkwZDktYmZhMjg2MWRhNDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJhmebXJvPipW4RY6ViyrYHt9BBCMipC3gVv d16rd2FxxggsqNAZPTjWS6MXOgBtSy2F8KsHpdyAT4elTxcEtEVLYyxD+/JqmXWw XEvpxw8PpP4aC4Xtq+YmvmhHV+22+UGLkxpLEGuVRoarN7QsfrJ8T6qa2VWBugzm H8oSYMWau9ube9Q0MYs/9Edb8fQnU1KslpAtjaErCh8t1gPqnjfjJBv8wyeDGtOs mxEtdFhKPh8ATipoNLN1ctJC8Hk3Cjl31eXrNAV/sb0q5fTjXsIrplMEwj967D26 WCenerLHwXPZLIwW1HiJWhQWXasgxAyZEJBoGfEUY6HzLMyTswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgBQSD4lyVhsNayyX0UHGhmGdbCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTgzMzdhOTAtZjFlNS0z NmJhLTk2ZTYtMjdhMzk2YmY4N2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8bsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4vYs4nKoaNLtcCtUkHRm8SonYRN82W120wdvVLySQrQphk+f4sU2SG FFvJxRG1FdhhRPuMSRA1d0/E+VUlT7iYWmlby2+ztpiQp5nQd33QKzvsY/JzS+KU NPD40Gws7q8ib+/G7CnNrIqU3IWdlN+yqCHkxhMy3DdB5+koV10y9SFljvBFd94o 4YR1M6dT2rkhLrcpm6IJw4/g7KIMGFjkCMOydvfE/vWhwY4O7oM9nzZECwOeCC/3 VrjT0cwClqH1I1bcgchtFo6b2Oh0FPiN+O7NPpVta2md9YzOY5ExaBdvjVdVCRlW uqD7HYiYWV619sxIQYcPZARtk8wgz4M= -----END CERTIFICATE-----Generated at Tue Nov 4 23:54:49 2025 by rpki-client