$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2149f387-6400-383b-bc89-e70cdbcca4c8.roa File: 2149f387-6400-383b-bc89-e70cdbcca4c8.roa (raw, json) Hash identifier: n/z7t44+3aGa6eotlKVy9AN1+6F/4bAjy78SoxVx8GM= Subject key identifier: 25:B4:A4:B0:34:64:FF:F2:92:92:49:01:45:8B:08:94:28:BE:D9:D8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B477C820A401BD2AF6BBB8000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2149f387-6400-383b-bc89-e70cdbcca4c8.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 20940 IP address blocks: 23.200.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:82:0a:40:1b:d2:af:6b:bb:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=29ae9878-de8f-43ec-83b4-2c8abe729cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:99:a6:e0:34:eb:20:cf:b4:63:32:a1:9f:ce: 13:bf:3c:ef:5c:85:68:16:da:d6:84:91:7c:af:fb: 73:ad:ec:af:41:18:2d:0c:51:fd:d7:18:87:f0:84: 8d:36:8c:d6:16:a0:74:ff:01:50:25:f8:78:14:cf: 4e:77:5b:f2:75:42:ac:a2:67:35:1c:e0:b9:2c:93: 44:7c:69:4c:c6:80:59:16:09:69:4a:be:e6:10:4b: d9:b6:62:73:42:3b:b1:73:a2:ea:6d:24:e5:0f:7f: 24:1a:3a:02:35:33:83:80:0b:d4:d0:1c:12:7f:bf: 81:a4:f2:10:a6:5f:a8:28:df:5e:ce:bf:5d:fd:a9: 9b:1b:9c:85:f8:8f:17:6a:dd:f3:11:2b:da:a7:9f: bc:31:7c:18:26:27:8d:4e:eb:88:9f:47:05:8c:87: 2b:78:0f:d3:55:1d:a5:9d:ab:20:91:d9:88:30:aa: d5:10:ae:66:31:d7:0d:b7:44:97:2b:67:0f:94:25: 2a:60:35:37:f9:2d:c6:b3:81:d9:cb:78:0b:1d:39: b1:c1:09:2f:95:f7:b6:2e:57:1c:94:1e:c4:01:5d: 02:b4:78:d1:15:bf:c8:94:e3:35:b9:60:47:b5:b2: f2:73:61:8a:5d:83:db:7e:ce:f0:20:3d:21:e3:e7: 4c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B4:A4:B0:34:64:FF:F2:92:92:49:01:45:8B:08:94:28:BE:D9:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2149f387-6400-383b-bc89-e70cdbcca4c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:d1:39:16:ce:db:46:0b:6d:ca:73:d7:b5:62:86:a4:c0:02: 08:d3:97:21:6f:fc:15:22:f8:4f:45:18:5c:43:2e:68:db:2c: 38:4d:0d:7b:46:e5:ef:88:cc:69:ee:46:df:9e:6a:98:c2:83: 8d:13:2c:95:4a:39:0d:49:ef:d6:c6:42:1a:09:bf:2b:37:c8: 2a:96:cc:7b:5f:30:95:ac:93:96:73:1c:59:d1:e8:13:e4:8c: e0:0c:5e:76:03:b7:5a:c4:cf:c0:dc:10:7d:1e:b1:71:06:60: 66:9c:36:d9:a5:27:b5:48:6f:06:f8:92:c0:14:c9:00:93:0f: 68:b0:3b:28:dc:49:cd:c7:97:0a:d3:ce:aa:55:41:8d:e8:c1: fc:a3:ea:98:67:64:f2:cf:c8:13:18:74:53:e4:50:e7:00:a2: 91:9a:5f:b6:d9:d3:93:2f:51:bb:ba:59:99:db:a6:eb:6a:28: 58:8e:bd:9a:6a:70:78:5f:b4:4e:73:b8:54:ab:0a:79:2f:a8: 86:49:20:bd:c1:ca:9d:6d:d7:01:e2:cd:74:4f:31:4e:b8:be: 2f:da:d9:f6:e9:96:77:bb:1d:7b:8e:02:6c:fd:6c:34:17:61: 61:c9:20:29:f9:a4:20:2b:00:a2:4e:19:f3:37:fd:85:d7:f1: ca:e0:47:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfIIKQBvSr2u7gAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk MjlhZTk4NzgtZGU4Zi00M2VjLTgzYjQtMmM4YWJlNzI5Y2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Zmm4DTrIM+0YzKhn84TvzzvXIVoFtrWhJF8 r/tzreyvQRgtDFH91xiH8ISNNozWFqB0/wFQJfh4FM9Od1vydUKsomc1HOC5LJNE fGlMxoBZFglpSr7mEEvZtmJzQjuxc6LqbSTlD38kGjoCNTODgAvU0BwSf7+BpPIQ pl+oKN9ezr9d/ambG5yF+I8Xat3zESvap5+8MXwYJieNTuuIn0cFjIcreA/TVR2l nasgkdmIMKrVEK5mMdcNt0SXK2cPlCUqYDU3+S3Gs4HZy3gLHTmxwQkvlfe2Llcc lB7EAV0CtHjRFb/IlOM1uWBHtbLyc2GKXYPbfs7wID0h4+dMSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCW0pLA0ZP/ykpJJAUWLCJQovtnYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjE0OWYzODctNjQwMC0z ODNiLWJjODktZTcwY2RiY2NhNGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8jaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDRORbO20YLbcpz17VihqTAAgjTlyFv/BUi+E9FGFxDLmjbLDhNDXtG 5e+IzGnuRt+eapjCg40TLJVKOQ1J79bGQhoJvys3yCqWzHtfMJWsk5ZzHFnR6BPk jOAMXnYDt1rEz8DcEH0esXEGYGacNtmlJ7VIbwb4ksAUyQCTD2iwOyjcSc3HlwrT zqpVQY3owfyj6phnZPLPyBMYdFPkUOcAopGaX7bZ05MvUbu6WZnbputqKFiOvZpq cHhftE5zuFSrCnkvqIZJIL3Byp1t1wHizXRPMU64vi/a2fbplne7HXuOAmz9bDQX YWHJICn5pCArAKJOGfM3/YXX8crgR/g= -----END CERTIFICATE-----Generated at Mon Oct 20 02:54:33 2025 by rpki-client