$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e4aaafe-3a90-31d7-a804-4912beedfdee.roa File: 0e4aaafe-3a90-31d7-a804-4912beedfdee.roa (raw, json) Hash identifier: uQ6shxcrU2EVrdJA8GfmBF04DQHTTSZWbrQtrlJ8j/A= Subject key identifier: D9:50:84:3C:33:F3:EA:11:7B:4C:C3:57:94:1D:A6:23:18:C9:F8:CA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B477C9499C3B77000C3F37D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e4aaafe-3a90-31d7-a804-4912beedfdee.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 16625 IP address blocks: 23.201.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:94:99:c3:b7:70:00:c3:f3:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=020f28d4-8937-4cf9-b020-ebeb9b5ce2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b5:0c:df:f8:1a:57:b0:08:fa:20:b6:a8:f4: dc:7a:12:d9:5c:d9:51:b2:55:46:f9:60:d7:1d:e5: 78:ae:85:d0:51:9e:75:b2:0a:e3:52:ae:1c:23:80: e9:88:37:bb:ae:91:d2:fd:15:a4:69:0e:16:53:0e: f4:48:0e:f9:c4:f7:da:37:39:5e:d4:e1:56:2b:2e: 47:dc:80:54:cc:7e:3b:61:af:b7:2b:58:44:83:33: d7:9d:b5:c6:4c:99:fd:72:c0:ff:b8:40:2b:1d:85: 16:0d:90:40:57:34:fa:0b:45:49:ed:e0:97:f7:7e: 8c:34:5f:aa:8f:71:0b:67:dd:b4:3c:87:00:77:66: 6a:c3:84:e4:fc:86:f7:9d:3f:65:ed:ee:56:e6:3b: 75:dd:f0:38:96:11:be:46:3a:8a:15:6a:f1:bc:7e: 80:a8:d2:ed:47:1c:88:f6:c4:76:d3:88:29:be:6d: bb:65:8b:5c:c4:ca:f4:88:87:c2:07:0b:a7:ff:cf: bc:32:0c:46:75:b7:02:2a:b5:ee:fd:48:1c:d2:ac: 64:41:d5:65:44:ed:f4:cf:c0:e1:a7:8f:4f:6c:66: d8:54:df:d3:4b:89:4d:2a:83:72:d1:76:1f:b8:3d: cc:ab:ed:1d:24:07:c8:1d:2e:7f:04:28:2c:ea:0d: 13:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:50:84:3C:33:F3:EA:11:7B:4C:C3:57:94:1D:A6:23:18:C9:F8:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e4aaafe-3a90-31d7-a804-4912beedfdee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:c8:72:37:a8:fa:c5:89:1c:1b:ea:3b:30:db:52:e3:ec:4f: c8:6a:cc:0e:33:f2:76:28:e9:19:3d:51:93:75:09:a3:ee:7f: 15:43:aa:f9:cf:f1:33:8c:e5:2e:3f:77:17:d5:b5:54:de:20: a7:6f:ad:dd:e6:f7:7c:ef:42:53:c5:0b:0d:53:84:c4:77:77: 8a:30:5c:1a:7a:61:1d:9a:c9:3f:a4:69:24:82:2f:3b:8d:07: 81:ee:7e:5d:b7:7c:6d:82:5b:a2:27:51:21:12:68:aa:8f:40: aa:f4:cf:ab:f6:ff:b6:b2:89:9e:b9:43:37:6a:31:10:20:4d: 9f:84:50:a7:cd:dc:e4:4a:3b:6d:aa:01:bd:f0:b4:51:16:c6: 0b:1e:e3:13:b1:c8:4a:d4:f9:f1:ed:c3:a5:36:c2:a3:1c:b2: 24:0e:bc:1b:9a:36:e9:d3:39:c3:74:26:ec:b8:15:f5:c5:0b: f3:26:5e:64:17:cc:a9:2e:3c:58:c5:bb:1d:d2:5c:8f:87:37: 08:4a:0c:57:58:7f:62:59:a9:21:8a:b3:ff:de:dc:e3:dc:19: 94:29:95:0a:95:00:d0:9f:7b:9e:0c:22:88:29:cc:28:98:62: e8:c1:2d:cf:01:e0:56:0d:41:f6:0a:5b:7e:23:2e:0f:f8:b2: 6d:7b:7e:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfJSZw7dwAMPzfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk MDIwZjI4ZDQtODkzNy00Y2Y5LWIwMjAtZWJlYjliNWNlMmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37UM3/gaV7AI+iC2qPTcehLZXNlRslVG+WDX HeV4roXQUZ51sgrjUq4cI4DpiDe7rpHS/RWkaQ4WUw70SA75xPfaNzle1OFWKy5H 3IBUzH47Ya+3K1hEgzPXnbXGTJn9csD/uEArHYUWDZBAVzT6C0VJ7eCX936MNF+q j3ELZ920PIcAd2Zqw4Tk/Ib3nT9l7e5W5jt13fA4lhG+RjqKFWrxvH6AqNLtRxyI 9sR204gpvm27ZYtcxMr0iIfCBwun/8+8MgxGdbcCKrXu/Ugc0qxkQdVlRO30z8Dh p49PbGbYVN/TS4lNKoNy0XYfuD3Mq+0dJAfIHS5/BCgs6g0TZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlQhDwz8+oRe0zDV5QdpiMYyfjKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGU0YWFhZmUtM2E5MC0z MWQ3LWE4MDQtNDkxMmJlZWRmZGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8lAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnIcjeo+sWJHBvqOzDbUuPsT8hqzA4z8nYo6Rk9UZN1CaPufxVDqvnP 8TOM5S4/dxfVtVTeIKdvrd3m93zvQlPFCw1ThMR3d4owXBp6YR2ayT+kaSSCLzuN B4Hufl23fG2CW6InUSESaKqPQKr0z6v2/7ayiZ65QzdqMRAgTZ+EUKfN3ORKO22q Ab3wtFEWxgse4xOxyErU+fHtw6U2wqMcsiQOvBuaNunTOcN0Juy4FfXFC/MmXmQX zKkuPFjFux3SXI+HNwhKDFdYf2JZqSGKs//e3OPcGZQplQqVANCfe54MIogpzCiY YujBLc8B4FYNQfYKW34jLg/4sm17fgk= -----END CERTIFICATE-----Generated at Mon Oct 20 17:36:14 2025 by rpki-client