$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/023d9560-25ce-3d8b-bbae-05297072b9ad.roa File: 023d9560-25ce-3d8b-bbae-05297072b9ad.roa (raw, json) Hash identifier: 7j1IXhIJ9+IipMseBT4tXwxnwYFRcfslBNj52FX/isE= Subject key identifier: F3:3F:88:D5:44:C6:CC:AB:BD:8C:75:75:66:1C:71:7C:41:B6:79:F3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E20CCF51FEE4728334FD00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/023d9560-25ce-3d8b-bbae-05297072b9ad.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.202.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:0c:cf:51:fe:e4:72:83:34:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=f549ee3e-9c05-440a-8de4-1743cf84c734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:b5:df:79:9a:96:41:e3:bc:ce:cd:bb:28:08: 7d:97:82:f3:b5:50:f0:06:5f:c3:db:eb:7e:53:9a: ea:21:c0:a0:ca:a0:ed:9b:d2:24:8b:2c:0b:bb:f4: a7:20:9c:17:1f:e4:1f:a2:4f:23:7f:69:be:49:43: 48:31:9d:07:22:83:31:4e:d8:79:27:43:7b:27:7d: e8:2f:3d:b9:35:35:7c:96:64:92:78:fd:9c:80:24: bd:58:36:ba:2d:25:96:b0:ab:be:71:85:7e:02:77: e1:14:12:d3:ab:5a:4a:d2:a4:09:db:81:1d:ed:76: 26:b6:06:4e:e1:2f:f0:4e:f8:2c:0b:74:58:a2:e5: 79:5d:00:6f:e5:dc:14:e1:2a:d8:e6:bc:ca:d3:7d: 06:92:9c:43:f3:76:1d:2d:71:8e:53:7c:5e:28:05: 80:12:a9:89:84:94:b2:77:d4:19:b3:04:12:98:6c: b6:c2:f8:5e:c6:7f:9d:33:7e:7f:38:c1:f5:88:54: 69:70:43:bb:8a:c1:23:ad:1f:f4:ea:42:71:c5:f7: 8f:5c:b4:27:3b:a0:54:60:67:9c:bd:f8:fa:d0:d4: 8b:1c:cf:74:20:0a:17:0c:de:43:26:61:7e:bd:f5: 41:7b:a4:33:67:b0:3c:26:11:e1:8b:fd:5c:49:67: 6f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3F:88:D5:44:C6:CC:AB:BD:8C:75:75:66:1C:71:7C:41:B6:79:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/023d9560-25ce-3d8b-bbae-05297072b9ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:22:7a:c4:82:65:fe:86:f4:28:2d:ca:f6:bf:bd:be:00:ee: f2:e4:8d:43:6e:d0:4e:ff:7e:2e:f4:da:3a:6f:a4:df:51:ef: 62:98:f2:4c:37:2e:44:3c:da:44:b0:d0:0f:14:08:ae:d2:9e: 02:bd:36:91:96:2a:1c:4e:9e:92:fa:bf:e7:e5:ca:48:55:dd: b9:20:b8:2e:85:30:da:da:39:4d:1c:44:d7:8e:75:dc:d7:59: 14:56:3a:4d:9f:98:67:4c:21:7e:cc:d8:fe:68:fa:1f:25:37: 8f:f3:55:4c:8c:cd:47:aa:6f:cb:2b:19:00:3a:8d:98:be:4d: 38:e2:cd:81:d4:79:03:d5:17:e3:09:ea:81:95:e7:10:ea:64: e0:6d:e5:64:46:cc:1b:20:6a:d2:2f:9c:30:97:ff:60:c2:a0: fc:db:5a:6c:4a:17:21:01:93:5c:24:f6:73:f2:a0:e6:92:48: f7:be:6f:08:12:66:18:6c:19:27:cd:d7:6d:6c:50:4f:a1:9c: fa:b5:58:8e:49:c0:51:80:8a:7b:db:49:b7:13:45:da:d8:4c: dc:e8:ad:f1:0d:7b:7a:98:fd:60:34:84:1c:ea:3a:4f:50:f0: fb:40:02:da:a0:7e:fb:35:9e:56:81:f1:2c:2d:87:92:ee:b8: 54:59:d7:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4gzPUf7kcoM0/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjU0OWVlM2UtOWMwNS00NDBhLThkZTQtMTc0M2NmODRjNzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+bXfeZqWQeO8zs27KAh9l4LztVDwBl/D2+t+ U5rqIcCgyqDtm9IkiywLu/SnIJwXH+Qfok8jf2m+SUNIMZ0HIoMxTth5J0N7J33o Lz25NTV8lmSSeP2cgCS9WDa6LSWWsKu+cYV+AnfhFBLTq1pK0qQJ24Ed7XYmtgZO 4S/wTvgsC3RYouV5XQBv5dwU4SrY5rzK030GkpxD83YdLXGOU3xeKAWAEqmJhJSy d9QZswQSmGy2wvhexn+dM35/OMH1iFRpcEO7isEjrR/06kJxxfePXLQnO6BUYGec vfj60NSLHM90IAoXDN5DJmF+vfVBe6QzZ7A8JhHhi/1cSWdvkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPM/iNVExsyrvYx1dWYccXxBtnnzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDIzZDk1NjAtMjVjZS0z ZDhiLWJiYWUtMDUyOTcwNzJiOWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8p5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAiesSCZf6G9Cgtyva/vb4A7vLkjUNu0E7/fi702jpvpN9R72KY8kw3 LkQ82kSw0A8UCK7SngK9NpGWKhxOnpL6v+flykhV3bkguC6FMNraOU0cRNeOddzX WRRWOk2fmGdMIX7M2P5o+h8lN4/zVUyMzUeqb8srGQA6jZi+TTjizYHUeQPVF+MJ 6oGV5xDqZOBt5WRGzBsgatIvnDCX/2DCoPzbWmxKFyEBk1wk9nPyoOaSSPe+bwgS ZhhsGSfN121sUE+hnPq1WI5JwFGAinvbSbcTRdrYTNzorfENe3qY/WA0hBzqOk9Q 8PtAAtqgfvs1nlaB8Swth5LuuFRZ16s= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:54 2025 by rpki-client