$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/00434a5e-e975-3440-8f29-099d765c504f.roa File: 00434a5e-e975-3440-8f29-099d765c504f.roa (raw, json) Hash identifier: TjTdT1kmF7dIhX40fGjkGj7uy71BLP6cQ6OwLKM4Igk= Subject key identifier: D1:08:F5:B6:AC:90:84:C2:B4:4F:DF:67:46:5D:88:69:78:40:A6:D0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B477C821D35157F91CB99A200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/00434a5e-e975-3440-8f29-099d765c504f.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 16625 IP address blocks: 23.200.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:82:1d:35:15:7f:91:cb:99:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=32d39b6e-a2da-466b-add0-05ee337039e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:62:ca:97:d7:2b:6c:09:19:10:c1:55:65:49: ed:93:b4:ac:44:66:02:79:6a:83:26:c9:13:f3:63: 37:13:ba:84:3e:fd:67:b0:35:83:cb:a1:75:67:c8: 93:13:84:ff:c6:5e:30:d1:03:dc:1b:6f:4d:19:0d: c9:b1:1f:8f:a1:f8:a1:eb:c4:ad:38:cb:a6:ff:36: a3:dd:27:6c:6d:44:62:fa:13:9d:30:25:2c:2a:8a: 31:a9:82:6a:82:40:c0:68:d5:e2:00:2f:44:14:06: 12:0f:e9:45:53:6f:e9:a3:32:f9:6b:1f:04:bd:3a: eb:e5:15:bf:4f:fe:b8:f7:7b:06:e8:c3:2b:66:d5: 77:41:b5:c4:ae:34:ad:44:4f:4b:1e:dd:76:02:2f: 56:f9:c7:fd:ee:7e:42:62:35:bb:91:e2:88:0a:88: db:06:79:09:09:19:bf:17:ed:ef:33:6f:36:5c:7a: 4f:c4:54:f9:d6:54:7c:31:32:84:a8:d0:27:5e:43: d0:06:1d:77:ee:3a:00:4e:86:f3:21:31:9a:f2:07: ca:ad:0d:97:55:8d:03:2a:ac:eb:95:9c:c5:7e:76: 74:38:e2:5f:c2:84:7e:2d:e0:f3:95:15:f6:40:89: 60:d2:95:0b:97:0b:5c:82:89:b0:0f:1a:e9:49:51: c5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:08:F5:B6:AC:90:84:C2:B4:4F:DF:67:46:5D:88:69:78:40:A6:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/00434a5e-e975-3440-8f29-099d765c504f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:6f:09:2f:7b:46:df:49:85:41:b1:04:d0:c5:ca:95:b5:7a: 99:43:8f:29:d5:c9:51:8d:0b:4d:bd:e3:3b:42:82:94:99:01: 03:ed:42:b2:47:72:17:f7:31:d0:17:9b:59:cd:ab:7c:39:09: 20:94:af:04:c1:87:ea:5a:95:7f:2e:42:ed:18:8b:d0:d0:14: c9:26:bd:f5:45:8b:55:c9:d2:36:ff:f1:09:4c:3d:ed:1d:a4: b9:13:f6:cd:d4:a3:91:c1:62:0e:1a:e4:b0:c2:3b:4f:4b:0e: ee:b5:58:f0:d1:c2:50:cf:f2:28:e4:28:4b:24:02:ab:f5:5f: d0:72:0d:90:2c:ef:c4:b3:61:bd:60:91:b5:b2:70:6f:54:91: 3c:34:d2:22:24:80:d3:2e:fe:2c:6f:f9:b6:c1:1f:83:39:27: f6:f3:98:8d:2d:b0:02:47:35:3d:32:82:be:23:f5:68:77:c5: a2:9b:78:e8:5a:6c:f9:72:a5:c8:50:5e:a0:fa:e9:54:b4:cc: 5b:16:02:0b:d5:6a:db:39:40:c6:01:62:5b:b9:6a:72:d1:41: fb:4e:d1:5f:bc:03:09:6b:38:e7:9c:18:27:91:6e:90:02:74: dd:45:3d:63:61:71:d6:e0:23:ff:3b:24:1e:c8:07:03:58:67: ee:20:35:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfIIdNRV/kcuZogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk MzJkMzliNmUtYTJkYS00NjZiLWFkZDAtMDVlZTMzNzAzOWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GLKl9crbAkZEMFVZUntk7SsRGYCeWqDJskT 82M3E7qEPv1nsDWDy6F1Z8iTE4T/xl4w0QPcG29NGQ3JsR+Pofih68StOMum/zaj 3SdsbURi+hOdMCUsKooxqYJqgkDAaNXiAC9EFAYSD+lFU2/pozL5ax8EvTrr5RW/ T/6493sG6MMrZtV3QbXErjStRE9LHt12Ai9W+cf97n5CYjW7keKICojbBnkJCRm/ F+3vM282XHpPxFT51lR8MTKEqNAnXkPQBh137joATobzITGa8gfKrQ2XVY0DKqzr lZzFfnZ0OOJfwoR+LeDzlRX2QIlg0pULlwtcgomwDxrpSVHFbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEI9baskITCtE/fZ0ZdiGl4QKbQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDA0MzRhNWUtZTk3NS0z NDQwLThmMjktMDk5ZDc2NWM1MDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8jcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdvCS97Rt9JhUGxBNDFypW1eplDjynVyVGNC0294ztCgpSZAQPtQrJH chf3MdAXm1nNq3w5CSCUrwTBh+palX8uQu0Yi9DQFMkmvfVFi1XJ0jb/8QlMPe0d pLkT9s3Uo5HBYg4a5LDCO09LDu61WPDRwlDP8ijkKEskAqv1X9ByDZAs78SzYb1g kbWycG9UkTw00iIkgNMu/ixv+bbBH4M5J/bzmI0tsAJHNT0ygr4j9Wh3xaKbeOha bPlypchQXqD66VS0zFsWAgvVats5QMYBYlu5anLRQftO0V+8AwlrOOecGCeRbpAC dN1FPWNhcdbgI/87JB7IBwNYZ+4gNeI= -----END CERTIFICATE-----Generated at Mon Oct 20 05:05:59 2025 by rpki-client