$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c20bab7-9ad4-3206-8aea-8b15c89c8fc4.roa File: 2c20bab7-9ad4-3206-8aea-8b15c89c8fc4.roa (raw, json) Hash identifier: 7LOmv3X1M1++wH92sa1MLlt0Zw/TP/HBM/5ZgWQIU10= Subject key identifier: DF:EA:BE:65:0C:4D:3E:09:49:27:08:A6:8C:DB:16:94:17:76:A0:DE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E20B9F3077916A50114C20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c20bab7-9ad4-3206-8aea-8b15c89c8fc4.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.202.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:0b:9f:30:77:91:6a:50:11:4c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=f07def80-85d0-4839-bb3a-81c0d656dce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:13:9d:40:59:58:d7:85:8e:99:68:ac:6d:e8: 84:f4:89:51:1c:d8:77:4b:89:e6:7f:42:c0:e9:ff: c7:f5:47:63:95:f9:db:b7:d2:8b:10:ee:a8:c6:1b: 63:a0:07:1a:90:4d:bb:fa:ce:42:3c:c7:b6:2a:a5: d9:ed:80:03:c2:bd:e2:21:55:e9:00:0a:4f:bb:c3: 27:db:1a:9d:f6:74:9c:f0:78:29:22:32:80:58:14: 20:09:29:7c:5b:2a:46:20:01:36:b5:b8:68:cc:3c: fe:9b:0c:ab:5f:8c:49:d8:28:61:84:83:db:22:60: b2:63:ad:e7:5a:84:79:8f:0d:b8:a0:9a:83:cf:b0: ac:92:83:f9:90:c7:06:f3:0e:36:cc:cb:f0:bf:67: 3e:36:43:8b:b6:30:d0:c2:6c:d8:50:0b:72:5a:d9: fa:11:11:93:64:d4:62:22:fb:c7:6c:af:65:40:2b: b0:21:37:01:24:4a:ca:ec:74:01:28:e6:9d:a3:ae: ed:45:d9:1e:31:a2:76:06:de:20:39:17:b8:b9:36: ad:a7:b6:1b:ad:fa:5a:bd:3d:44:b3:46:fe:05:a4: c5:b7:de:0a:80:3f:a0:d3:dd:eb:0d:f4:2c:4e:ea: c5:7d:58:e9:b0:7c:a6:8e:d1:a4:bf:88:20:9c:b2: 40:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EA:BE:65:0C:4D:3E:09:49:27:08:A6:8C:DB:16:94:17:76:A0:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c20bab7-9ad4-3206-8aea-8b15c89c8fc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:d0:07:ea:c3:d1:2b:cc:d1:6d:9b:29:26:51:0a:0f:3c:45: 62:53:6b:66:0b:1b:76:6f:7a:9d:10:39:b1:03:34:a1:42:82: fb:43:f2:84:cc:d2:f1:88:be:8b:3d:83:a5:61:6b:3d:a3:0d: ef:53:af:03:86:80:33:39:23:ce:ac:56:53:02:12:12:a5:85: 26:12:f0:6d:19:98:ab:a4:f1:9b:18:01:9e:29:3a:7e:cb:3f: cf:85:d5:62:30:c7:a9:13:16:d5:39:4c:25:1a:6b:ee:42:51: 19:ff:b8:59:e6:19:9c:34:23:fa:83:ac:d7:3d:42:7f:47:6f: e2:76:93:a0:30:5d:14:de:7b:a7:ab:45:be:7f:42:ca:3b:14: 1f:93:66:5e:42:28:c1:a0:d8:02:a7:86:1f:84:34:83:85:34: b0:ab:18:15:15:65:c4:77:09:08:76:af:22:46:0e:6f:0a:cf: 8d:3a:b1:1b:ba:ca:fd:53:5e:48:ae:e0:48:43:11:19:55:43: 73:6d:d1:1e:ce:75:2e:7d:a2:90:75:bf:76:19:46:41:16:23: 96:0c:00:28:25:57:7b:d9:13:3f:c4:08:f0:ea:c5:26:6b:1d: 18:9c:bd:d5:b3:a9:06:54:18:96:ca:52:5b:62:23:82:19:cf: 8c:38:6c:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4gufMHeRalARTCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjA3ZGVmODAtODVkMC00ODM5LWJiM2EtODFjMGQ2NTZkY2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohOdQFlY14WOmWisbeiE9IlRHNh3S4nmf0LA 6f/H9Udjlfnbt9KLEO6oxhtjoAcakE27+s5CPMe2KqXZ7YADwr3iIVXpAApPu8Mn 2xqd9nSc8HgpIjKAWBQgCSl8WypGIAE2tbhozDz+mwyrX4xJ2ChhhIPbImCyY63n WoR5jw24oJqDz7CskoP5kMcG8w42zMvwv2c+NkOLtjDQwmzYUAtyWtn6ERGTZNRi IvvHbK9lQCuwITcBJErK7HQBKOado67tRdkeMaJ2Bt4gORe4uTatp7YbrfpavT1E s0b+BaTFt94KgD+g093rDfQsTurFfVjpsHymjtGkv4ggnLJAIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/qvmUMTT4JSScIpozbFpQXdqDeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmMyMGJhYjctOWFkNC0z MjA2LThhZWEtOGIxNWM4OWM4ZmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8omMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzQB+rD0SvM0W2bKSZRCg88RWJTa2YLG3Zvep0QObEDNKFCgvtD8oTM 0vGIvos9g6Vhaz2jDe9TrwOGgDM5I86sVlMCEhKlhSYS8G0ZmKuk8ZsYAZ4pOn7L P8+F1WIwx6kTFtU5TCUaa+5CURn/uFnmGZw0I/qDrNc9Qn9Hb+J2k6AwXRTee6er Rb5/Qso7FB+TZl5CKMGg2AKnhh+ENIOFNLCrGBUVZcR3CQh2ryJGDm8Kz406sRu6 yv1TXkiu4EhDERlVQ3Nt0R7OdS59opB1v3YZRkEWI5YMACglV3vZEz/ECPDqxSZr HRicvdWzqQZUGJbKUltiI4IZz4w4bAs= -----END CERTIFICATE-----Generated at Mon Oct 20 07:20:43 2025 by rpki-client