$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c5898d7-30c6-3a4c-a6d8-499e89f90d1a.roa File: 2c5898d7-30c6-3a4c-a6d8-499e89f90d1a.roa (raw, json) Hash identifier: I7ZYaIwjOYomEj/yT3DFrmSIh7uokwVEvqBc5Yziogk= Subject key identifier: 24:11:C7:1E:7C:B4:68:D5:29:60:B8:32:F2:B3:24:31:98:65:11:D4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B477C94DD857FE05877413880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c5898d7-30c6-3a4c-a6d8-499e89f90d1a.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 16625 IP address blocks: 23.201.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:94:dd:85:7f:e0:58:77:41:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=a023f90f-5322-4e96-944b-1f9084aec709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2d:49:c6:24:c0:ee:3e:45:dc:2c:4f:b6:d4: cd:f1:02:0e:26:aa:d5:db:e1:fe:65:05:2c:eb:79: fa:d8:b9:76:ec:17:ee:ec:00:05:27:88:e7:19:56: 5f:2f:20:e9:94:4c:f2:00:e1:74:74:5f:6d:34:fe: 72:d8:ca:83:ae:81:b5:f8:2c:76:11:e1:35:f0:bb: 3d:a4:5d:ad:ba:48:b6:59:88:fd:78:3f:c7:a9:2d: b2:20:40:40:62:f1:08:27:3b:c5:b4:ab:f0:d8:09: 18:6a:1b:05:ea:20:ad:c4:48:da:c6:d5:20:9d:be: 93:a7:f7:2f:f5:9c:19:bd:d2:31:93:93:88:80:43: 95:3f:09:e7:43:47:1e:47:2e:4a:df:28:b2:ae:11: 9e:e8:dd:b1:6e:90:c3:4a:cc:5d:51:33:fa:44:d1: 86:28:e3:df:43:36:64:4a:30:fd:d4:4a:15:31:31: 0f:35:7d:5d:3f:74:9c:82:5c:94:08:01:b4:77:b3: 20:3b:cd:81:bf:ea:1a:ff:aa:18:19:38:a2:52:1f: ff:a1:3a:c6:7f:20:20:12:4a:9f:70:df:d1:d1:2e: f4:93:0e:4c:dc:87:45:76:6a:36:09:2a:65:fd:87: 9c:a3:58:c9:2c:ec:39:ea:b2:a6:8a:38:f3:6d:c3: b9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:11:C7:1E:7C:B4:68:D5:29:60:B8:32:F2:B3:24:31:98:65:11:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c5898d7-30c6-3a4c-a6d8-499e89f90d1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:e4:6e:fd:5d:5a:3d:f6:a3:38:6e:9b:78:b5:62:e8:90:99: 96:73:12:f4:8e:86:c6:7c:9a:f6:d5:8d:de:78:60:b7:d9:dd: eb:c6:29:b6:80:86:81:2d:fa:b5:5d:03:c8:85:e1:14:49:37: a7:e8:91:1d:17:c9:2c:8e:e0:16:72:da:83:4e:7b:a0:68:73: 53:f3:70:3e:5a:04:1a:ca:bd:fa:4e:79:3e:aa:64:e2:bd:0a: 7d:52:cf:32:c0:4b:52:71:4c:39:65:85:90:f6:a4:ba:1b:93: dc:70:fb:b3:8b:91:88:71:27:bf:6d:92:8e:a3:22:c7:06:47: 33:c5:9f:a9:8d:a3:78:3c:41:19:c4:1c:1e:c6:1a:44:b1:f9: ef:11:07:2b:ab:b7:53:2c:5f:3a:ea:9f:8a:de:b9:fe:f7:d8: 4d:19:20:8c:2e:d0:c2:84:a4:3b:2f:60:cb:3f:b9:5e:e6:dc: cf:47:86:25:68:e0:c5:ad:4e:7e:5e:11:d5:65:b2:ad:54:ef: 90:fa:5d:69:b2:35:be:da:1a:53:8e:51:b7:37:e2:93:2c:fd: 7d:62:8b:40:46:de:b5:97:bb:cf:11:ec:b9:8a:26:86:65:90: fa:58:39:ee:da:13:7f:ba:42:77:fb:19:f6:6a:95:32:63:57: 46:7d:b6:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfJTdhX/gWHdBOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk YTAyM2Y5MGYtNTMyMi00ZTk2LTk0NGItMWY5MDg0YWVjNzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy1JxiTA7j5F3CxPttTN8QIOJqrV2+H+ZQUs 63n62Ll27Bfu7AAFJ4jnGVZfLyDplEzyAOF0dF9tNP5y2MqDroG1+Cx2EeE18Ls9 pF2tuki2WYj9eD/HqS2yIEBAYvEIJzvFtKvw2AkYahsF6iCtxEjaxtUgnb6Tp/cv 9ZwZvdIxk5OIgEOVPwnnQ0ceRy5K3yiyrhGe6N2xbpDDSsxdUTP6RNGGKOPfQzZk SjD91EoVMTEPNX1dP3ScglyUCAG0d7MgO82Bv+oa/6oYGTiiUh//oTrGfyAgEkqf cN/R0S70kw5M3IdFdmo2CSpl/Yeco1jJLOw56rKmijjzbcO5HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQRxx58tGjVKWC4MvKzJDGYZRHUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmM1ODk4ZDctMzBjNi0z YTRjLWE2ZDgtNDk5ZTg5ZjkwZDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8lcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrkbv1dWj32ozhum3i1YuiQmZZzEvSOhsZ8mvbVjd54YLfZ3evGKbaA hoEt+rVdA8iF4RRJN6fokR0XySyO4BZy2oNOe6Boc1PzcD5aBBrKvfpOeT6qZOK9 Cn1SzzLAS1JxTDllhZD2pLobk9xw+7OLkYhxJ79tko6jIscGRzPFn6mNo3g8QRnE HB7GGkSx+e8RByurt1MsXzrqn4reuf732E0ZIIwu0MKEpDsvYMs/uV7m3M9HhiVo 4MWtTn5eEdVlsq1U75D6XWmyNb7aGlOOUbc34pMs/X1ii0BG3rWXu88R7LmKJoZl kPpYOe7aE3+6Qnf7GfZqlTJjV0Z9trI= -----END CERTIFICATE-----Generated at Mon Oct 20 07:28:00 2025 by rpki-client