$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/336f526b-2593-3aa5-a36e-76d9aceff6ab.roa File: 336f526b-2593-3aa5-a36e-76d9aceff6ab.roa (raw, json) Hash identifier: hWtqPbSH5v/IEbABU15w+fmT4wTpWk58h+vLFs1CJDs= Subject key identifier: A3:9B:1C:35:57:EB:A1:35:07:FA:DA:D3:5C:A2:05:EC:02:EA:10:47 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1AF8C599C9CC6B19EAE88 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/336f526b-2593-3aa5-a36e-76d9aceff6ab.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.210.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:af:8c:59:9c:9c:c6:b1:9e:ae:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=71807bcc-b803-44de-b37b-70a1dfd5d49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1f:68:16:98:e3:97:24:c7:17:27:97:a8:10: cb:b0:dc:21:f3:a7:67:ef:f1:7a:a6:35:7c:2c:5f: 97:24:40:f4:5c:78:36:7f:7d:a9:cb:c8:f3:81:53: 4e:16:24:ee:18:0c:7a:60:05:a5:cf:5b:59:46:a2: ed:89:40:d4:dc:4e:a4:08:92:22:6a:aa:e2:37:e9: 40:dc:7c:72:05:3f:85:b0:9d:28:a7:85:26:05:1f: 59:15:a2:54:ba:8a:0e:39:db:a1:6f:3c:20:86:f1: 9e:e3:cd:21:ee:11:66:40:75:db:d0:f2:18:5e:58: 05:54:43:db:40:89:2d:14:30:58:bf:13:ab:d2:b2: 7f:a1:c6:a9:52:a3:a8:8b:37:ce:80:07:9e:a9:7b: a9:8b:33:39:60:36:5a:a2:43:02:46:e7:6a:f7:dd: 5e:00:a6:2d:6c:a8:d5:53:77:17:43:57:55:bf:bb: 23:6a:03:01:7c:25:6c:9a:fa:05:90:dd:65:cf:7a: 71:02:e8:48:e0:c6:f8:81:ba:6c:59:59:16:9e:af: 34:a4:74:95:3a:ec:54:6c:26:a9:bc:bf:12:f8:a5: d5:77:50:95:46:b0:5e:c9:de:66:49:67:2b:85:c5: e4:dd:6a:b1:49:fa:06:8b:df:c4:c5:67:d8:20:09: 0b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9B:1C:35:57:EB:A1:35:07:FA:DA:D3:5C:A2:05:EC:02:EA:10:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/336f526b-2593-3aa5-a36e-76d9aceff6ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:47:e7:d3:d3:4a:a6:32:80:56:9a:03:11:18:e2:c3:c8:31: cc:19:28:e5:e3:bd:e1:58:b1:b2:b5:47:5b:af:64:c8:23:57: 07:be:df:c6:84:aa:93:9b:6b:d5:22:3d:ed:7c:b2:bf:ae:3e: da:b4:7a:31:ef:82:b3:ab:5c:b2:ef:68:10:bf:fd:20:2f:fc: ee:d6:aa:f6:13:57:c2:0c:f4:87:d8:20:d2:ac:1f:9a:a3:31: 52:b8:30:6d:6f:5f:49:9b:9e:d5:d8:bb:f7:1f:31:46:0d:fc: 8f:74:85:1b:19:b3:91:22:08:4d:9e:38:55:8f:37:24:18:c9: 1c:96:41:97:32:34:b9:17:3d:29:6e:c6:b4:11:07:e2:8c:5a: 7f:7b:c0:3c:a4:b0:c6:d8:d5:0d:e9:3b:36:2c:fc:13:a0:44: 2f:49:35:9a:ac:aa:c3:f2:23:17:4c:4b:90:86:03:2f:87:50: 6c:05:e3:90:af:9a:dc:08:d8:04:05:2b:af:6e:92:e1:3d:f2: f4:a8:7b:cc:81:a0:f2:9b:bc:13:36:4f:a8:8f:09:4d:d0:f1: 8c:17:0f:7f:50:c7:2a:31:a7:a0:e9:1b:ac:8b:4c:5c:30:22: 6e:0e:b4:88:52:50:3a:90:ba:57:9a:1d:75:1b:b0:da:9b:5c: 82:37:a1:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0a+MWZycxrGerogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NzE4MDdiY2MtYjgwMy00NGRlLWIzN2ItNzBhMWRmZDVkNDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB9oFpjjlyTHFyeXqBDLsNwh86dn7/F6pjV8 LF+XJED0XHg2f32py8jzgVNOFiTuGAx6YAWlz1tZRqLtiUDU3E6kCJIiaqriN+lA 3HxyBT+FsJ0op4UmBR9ZFaJUuooOOduhbzwghvGe480h7hFmQHXb0PIYXlgFVEPb QIktFDBYvxOr0rJ/ocapUqOoizfOgAeeqXupizM5YDZaokMCRudq991eAKYtbKjV U3cXQ1dVv7sjagMBfCVsmvoFkN1lz3pxAuhI4Mb4gbpsWVkWnq80pHSVOuxUbCap vL8S+KXVd1CVRrBeyd5mSWcrhcXk3WqxSfoGi9/ExWfYIAkL5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKObHDVX66E1B/ra01yiBewC6hBHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzM2ZjUyNmItMjU5My0z YWE1LWEzNmUtNzZkOWFjZWZmNmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9INMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNH59PTSqYygFaaAxEY4sPIMcwZKOXjveFYsbK1R1uvZMgjVwe+38aE qpOba9UiPe18sr+uPtq0ejHvgrOrXLLvaBC//SAv/O7WqvYTV8IM9IfYINKsH5qj MVK4MG1vX0mbntXYu/cfMUYN/I90hRsZs5EiCE2eOFWPNyQYyRyWQZcyNLkXPSlu xrQRB+KMWn97wDyksMbY1Q3pOzYs/BOgRC9JNZqsqsPyIxdMS5CGAy+HUGwF45Cv mtwI2AQFK69ukuE98vSoe8yBoPKbvBM2T6iPCU3Q8YwXD39Qxyoxp6DpG6yLTFww Im4OtIhSUDqQuleaHXUbsNqbXII3ocg= -----END CERTIFICATE-----Generated at Mon Oct 20 10:08:40 2025 by rpki-client