$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33c2c016-3788-395f-a4a6-a51e7ea7a5de.roa File: 33c2c016-3788-395f-a4a6-a51e7ea7a5de.roa (raw, json) Hash identifier: wBLr26kHPzHN5h1OioM2IoAd9YJMVD+p4S7YxZc0wF4= Subject key identifier: 28:C2:DE:10:FE:CF:47:2E:8E:F0:FE:07:15:3A:28:9A:A8:AA:C6:CE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B434C8937E052442B2CE21C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33c2c016-3788-395f-a4a6-a51e7ea7a5de.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 23693 IP address blocks: 23.195.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:89:37:e0:52:44:2b:2c:e2:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=717b71c1-6a0f-44f0-8bdf-6a9bf2a6a8f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a6:8b:bb:01:f1:44:92:8f:8f:54:9b:3e:4d: a8:dc:bc:8b:59:7e:c8:38:f3:65:95:35:0b:24:bc: 31:d3:a4:2d:53:2a:c5:ae:10:db:0d:5e:f1:ba:f6: ce:2d:00:ed:c6:ae:7c:19:b2:e5:7e:9a:b1:ce:39: 9f:84:6c:e0:8e:a1:11:13:bc:95:c6:9a:46:ec:f1: f1:25:5b:67:56:0b:21:fc:a7:29:44:6c:1c:a5:8a: 9a:bc:c6:9a:02:7f:5b:cf:33:9e:d4:b1:9e:b1:93: 53:1f:96:8d:9a:45:ec:8c:5c:9a:7e:46:ed:34:07: 11:8d:13:ae:04:ce:a9:ce:f4:1b:16:3d:3c:02:0a: 43:0e:fd:e8:80:38:82:06:a1:d9:b3:34:1e:7a:74: 01:3a:c8:69:f7:d2:c1:aa:bf:75:e8:4e:e9:49:a3: e8:4c:9f:f7:dd:81:c1:15:cd:49:33:02:fb:93:75: 8f:49:75:00:24:8e:63:c9:92:e8:48:00:69:1c:4e: 7b:1e:7f:f3:13:ab:79:9d:f9:b5:9a:de:1c:b7:a8: af:3c:38:84:8b:67:37:48:d4:a7:5d:e3:91:58:46: e2:4f:68:dc:93:d8:64:f6:e6:df:e9:96:99:69:c3: f5:ce:50:83:03:8a:fb:4b:a4:78:c9:9b:f7:46:d3: de:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C2:DE:10:FE:CF:47:2E:8E:F0:FE:07:15:3A:28:9A:A8:AA:C6:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33c2c016-3788-395f-a4a6-a51e7ea7a5de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:45:ad:0d:cf:09:67:00:d5:47:19:94:95:52:9b:b2:5a:44: 17:93:88:4b:4a:55:4e:98:1f:4a:97:dc:9b:66:f6:78:eb:7a: a4:eb:ba:61:7e:aa:08:be:a9:0c:b8:6d:4e:5d:66:fd:bc:cf: f9:ef:4d:56:00:1a:3e:3b:29:09:56:a3:cb:21:66:c4:04:66: fe:5a:a0:a6:be:23:cb:1d:bd:e2:6e:fd:22:48:01:d2:c6:24: 97:c6:db:ec:35:db:ad:29:27:77:2f:2c:82:05:d0:eb:de:6f: de:94:a0:4b:1e:4d:43:bb:e7:6c:09:93:d7:53:e3:f4:37:52: 9b:6c:aa:5d:99:15:c6:23:f8:2e:38:bc:0d:3d:a7:97:97:54: ba:c9:7f:72:e0:04:08:c5:7f:a1:6a:2e:80:e1:58:d5:4f:14: 9d:88:ee:bd:f1:63:94:44:1e:68:a5:bc:82:77:c3:6c:58:cb: b6:e6:b6:ed:94:71:29:b2:6d:61:0b:5e:2b:5e:06:2d:60:50: 92:f4:bc:6a:7a:79:06:9c:48:e8:d6:95:48:2f:b3:d0:86:65: dc:e4:40:11:55:84:34:4c:b1:ee:34:9b:0d:58:15:36:d0:98: 59:85:65:84:14:8b:44:85:b9:59:7c:23:89:6f:61:88:41:54: 0a:fd:4e:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTIk34FJEKyziHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NzE3YjcxYzEtNmEwZi00NGYwLThiZGYtNmE5YmYyYTZhOGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaaLuwHxRJKPj1SbPk2o3LyLWX7IOPNllTUL JLwx06QtUyrFrhDbDV7xuvbOLQDtxq58GbLlfpqxzjmfhGzgjqERE7yVxppG7PHx JVtnVgsh/KcpRGwcpYqavMaaAn9bzzOe1LGesZNTH5aNmkXsjFyafkbtNAcRjROu BM6pzvQbFj08AgpDDv3ogDiCBqHZszQeenQBOshp99LBqr916E7pSaPoTJ/33YHB Fc1JMwL7k3WPSXUAJI5jyZLoSABpHE57Hn/zE6t5nfm1mt4ct6ivPDiEi2c3SNSn XeORWEbiT2jck9hk9ubf6ZaZacP1zlCDA4r7S6R4yZv3RtPelwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjC3hD+z0cujvD+BxU6KJqoqsbOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzNjMmMwMTYtMzc4OC0z OTVmLWE0YTYtYTUxZTdlYTdhNWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8M0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdFrQ3PCWcA1UcZlJVSm7JaRBeTiEtKVU6YH0qX3Jtm9njreqTrumF+ qgi+qQy4bU5dZv28z/nvTVYAGj47KQlWo8shZsQEZv5aoKa+I8sdveJu/SJIAdLG JJfG2+w1260pJ3cvLIIF0Oveb96UoEseTUO752wJk9dT4/Q3Uptsql2ZFcYj+C44 vA09p5eXVLrJf3LgBAjFf6FqLoDhWNVPFJ2I7r3xY5REHmilvIJ3w2xYy7bmtu2U cSmybWELXiteBi1gUJL0vGp6eQacSOjWlUgvs9CGZdzkQBFVhDRMse40mw1YFTbQ mFmFZYQUi0SFuVl8I4lvYYhBVAr9Tpc= -----END CERTIFICATE-----Generated at Tue Oct 21 04:45:43 2025 by rpki-client