$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e8bed2cf-2c1e-3877-a1cd-4d36b38d357f.roa File: e8bed2cf-2c1e-3877-a1cd-4d36b38d357f.roa (raw, json) Hash identifier: 2Ya6KOd8MRg1I6+RZ833EPM3P45bxjdSLPyaQ4q3YRY= Subject key identifier: 15:22:6C:FC:DC:08:85:80:3A:BF:71:F7:6B:01:8E:78:B4:EB:2A:4A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA932932308FFE45D5A06C5C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e8bed2cf-2c1e-3877-a1cd-4d36b38d357f.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 16625 IP address blocks: 23.198.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:93:23:08:ff:e4:5d:5a:06:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=ad0609ea-555a-4daf-b055-1d62c57e0e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:74:a4:e5:ff:2c:fb:9f:e7:f7:ce:90:94:45: a9:68:5d:2f:62:93:3d:20:19:b7:f4:a3:48:d3:6e: 6b:9c:36:e3:be:f2:81:fb:af:a4:be:7f:7a:df:e0: 6d:05:c7:ed:dd:1e:db:62:68:02:2a:91:77:43:11: 4b:69:08:9a:9b:67:28:1a:be:bc:6f:9a:27:b9:33: f9:a1:89:7e:4c:47:00:aa:2c:b5:02:9e:f0:65:a7: 87:6c:e6:b8:af:3e:e4:48:92:62:0f:1d:c1:13:91: 2b:5c:35:91:df:73:f2:03:4e:cc:dd:d4:bb:94:17: 4b:8f:0e:c0:5d:48:e8:98:a5:5f:10:71:21:31:15: a1:d2:05:a9:ce:f7:c7:95:8e:c8:3f:6f:11:51:fa: 95:b8:d1:85:56:9d:8e:85:d2:7a:8d:3f:9e:a1:65: a0:ee:cf:4a:97:7f:ed:b1:d9:47:0a:94:06:43:48: d3:59:c0:00:73:af:19:87:2f:67:99:89:87:6b:4b: 05:96:66:34:1c:e4:bf:cc:bb:a0:08:87:cf:07:b8: 60:69:84:5d:83:ba:c1:4c:50:3f:09:cb:cd:76:75: 82:08:82:66:99:ec:04:e1:9d:30:56:99:2b:c5:87: f1:3b:25:73:f9:94:25:08:74:9f:06:94:81:6e:4a: 04:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:22:6C:FC:DC:08:85:80:3A:BF:71:F7:6B:01:8E:78:B4:EB:2A:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e8bed2cf-2c1e-3877-a1cd-4d36b38d357f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.198.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:a4:0c:88:9e:b3:81:42:f2:e6:20:83:31:27:b7:c2:be:59: 42:ca:12:fd:96:b5:a2:eb:24:d5:82:c2:35:3e:5c:9c:1c:62: 90:c6:81:35:03:22:26:f2:00:ac:1d:94:aa:fe:1f:d0:4a:dd: d6:e3:e1:01:c4:64:fe:fc:a3:d7:93:23:bd:63:8b:f5:e2:13: 24:76:60:e8:f7:b1:de:5d:f0:45:10:ad:b7:56:54:5c:35:a8: 11:83:15:80:62:e4:2b:63:24:ee:4f:05:a9:c3:e5:8a:22:11: 7c:e2:55:bb:ba:5e:69:26:11:db:03:26:fa:b0:44:44:a9:6e: d0:95:cf:97:51:6b:97:46:cc:86:47:eb:35:80:1b:af:d9:7c: 70:38:f6:96:4c:c3:46:8a:98:05:bc:17:5d:db:13:47:1f:a4: 27:69:19:a9:ae:41:ee:fb:51:ce:08:c0:50:ee:58:b8:6b:eb: a4:a6:ee:50:fe:75:05:cd:c0:f5:85:b0:91:ad:4d:73:c2:d4: ce:7e:a8:02:59:69:c9:d7:82:2b:6e:51:fc:ee:07:f4:b4:33: f2:40:df:5b:41:63:f5:65:e9:5b:b1:7c:42:95:d3:f5:bb:ce: d7:b2:54:32:64:db:3e:51:61:59:91:8b:02:ba:ff:f6:f4:8e: 07:c9:0e:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMpMjCP/kXVoGxcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YWQwNjA5ZWEtNTU1YS00ZGFmLWIwNTUtMWQ2MmM1N2UwZTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHSk5f8s+5/n986QlEWpaF0vYpM9IBm39KNI 025rnDbjvvKB+6+kvn963+BtBcft3R7bYmgCKpF3QxFLaQiam2coGr68b5onuTP5 oYl+TEcAqiy1Ap7wZaeHbOa4rz7kSJJiDx3BE5ErXDWR33PyA07M3dS7lBdLjw7A XUjomKVfEHEhMRWh0gWpzvfHlY7IP28RUfqVuNGFVp2OhdJ6jT+eoWWg7s9Kl3/t sdlHCpQGQ0jTWcAAc68Zhy9nmYmHa0sFlmY0HOS/zLugCIfPB7hgaYRdg7rBTFA/ CcvNdnWCCIJmmewE4Z0wVpkrxYfxOyVz+ZQlCHSfBpSBbkoEWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUibPzcCIWAOr9x92sBjni06ypKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZThiZWQyY2YtMmMxZS0z ODc3LWExY2QtNGQzNmIzOGQzNTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8b4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGkDIies4FC8uYggzEnt8K+WULKEv2WtaLrJNWCwjU+XJwcYpDGgTUD IibyAKwdlKr+H9BK3dbj4QHEZP78o9eTI71ji/XiEyR2YOj3sd5d8EUQrbdWVFw1 qBGDFYBi5CtjJO5PBanD5YoiEXziVbu6XmkmEdsDJvqwRESpbtCVz5dRa5dGzIZH 6zWAG6/ZfHA49pZMw0aKmAW8F13bE0cfpCdpGamuQe77Uc4IwFDuWLhr66Sm7lD+ dQXNwPWFsJGtTXPC1M5+qAJZacnXgituUfzuB/S0M/JA31tBY/Vl6VuxfEKV0/W7 zteyVDJk2z5RYVmRiwK6//b0jgfJDv8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:01:41 2025 by rpki-client