$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fb1beb2-f5fb-33a6-bb1b-50100906c4a7.roa File: 3fb1beb2-f5fb-33a6-bb1b-50100906c4a7.roa (raw, json) Hash identifier: BLmuIOTCGbpCzXQng+WLG8lbAnFxnhPgXZzSYrsr4+8= Subject key identifier: 1A:FA:C4:9F:8A:3D:F6:46:6A:4C:E9:50:87:44:2B:EA:B2:0C:27:A3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B328C4D428B1C1A5D34341680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fb1beb2-f5fb-33a6-bb1b-50100906c4a7.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.210.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:4d:42:8b:1c:1a:5d:34:34:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=c648fce8-541b-46a1-99e5-f402b584c5c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6e:1f:3d:b1:60:96:a6:68:b4:26:dc:25:61: 30:d1:96:60:20:bc:68:84:5a:54:2c:b9:59:7d:22: 55:89:a4:9c:9b:f4:69:7a:8f:a5:34:bb:b6:7c:45: 7d:b7:52:49:84:82:f6:33:d2:03:b4:85:29:24:cc: 87:e7:7a:a0:e3:76:40:4b:5c:4d:89:4f:0d:93:af: 66:5d:c1:7d:6b:7f:84:40:e1:4d:b8:67:4e:c9:6f: c9:2d:f7:20:de:cd:16:1d:83:1b:95:20:97:80:7f: ca:cd:a0:b3:49:08:49:18:9f:8f:d6:e1:a8:4c:66: e3:8c:a7:2d:3f:71:1f:2b:03:ef:d6:c8:33:39:4e: 67:f8:8f:b9:27:5b:2b:64:01:a6:1e:eb:3b:9f:cf: d4:a3:28:e1:c0:b4:0e:5b:0c:ab:16:79:32:df:b5: 24:d2:5e:f5:38:24:f5:b5:a9:9a:e4:b3:8c:7a:30: 13:f3:03:fb:72:24:1a:f2:c6:8e:76:45:6b:74:0b: 42:36:13:38:87:fd:7b:71:2d:8e:94:df:b9:17:26: 21:40:29:f0:2b:eb:e0:a8:9c:53:21:33:bb:11:26: 7c:ea:4c:2f:8f:a7:84:38:85:cb:59:37:7d:15:56: 75:c0:8d:74:73:ad:25:75:f7:e5:42:71:0e:5f:02: e5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:FA:C4:9F:8A:3D:F6:46:6A:4C:E9:50:87:44:2B:EA:B2:0C:27:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fb1beb2-f5fb-33a6-bb1b-50100906c4a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:0e:bb:e5:46:47:cc:54:81:7b:4b:1d:48:42:74:b2:af:3c: 7f:cb:0f:84:90:bf:b0:e2:d5:00:37:5a:7b:b8:49:fd:24:70: bb:b2:07:2e:65:d3:d9:84:f5:bf:29:a0:8f:e6:ef:6e:7f:f1: 93:2e:3e:12:b3:a8:90:a0:d9:26:b2:99:3b:a6:d0:51:83:3f: 16:04:a3:9d:cf:c5:75:b8:c0:c8:bc:05:ae:88:8e:b9:82:dd: 32:68:84:58:33:44:09:61:66:2d:cd:a5:64:96:8f:68:07:cc: 11:0d:fe:fb:4f:eb:88:5c:15:6b:65:11:ae:c7:d4:47:4f:8b: 21:d4:03:c3:86:2c:25:54:d7:9d:21:bb:84:e4:cc:84:15:22: c5:67:86:70:82:84:37:16:9e:0d:ae:0e:ad:55:85:29:b4:43: 1a:c2:d2:83:e6:37:32:74:cb:af:da:c9:66:db:15:99:37:7b: 84:b5:c3:09:88:0b:82:cf:24:92:88:6d:f6:2b:c2:1d:c4:89: 79:73:40:f4:46:05:b9:ac:75:b5:8f:5b:07:ed:ac:9f:99:69: 89:30:da:eb:48:a7:97:4d:92:21:da:db:d4:14:f9:ff:81:79: f4:a4:72:22:22:2b:37:ec:94:45:a0:65:7a:93:c1:42:68:db: 4f:b5:f4:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjE1CixwaXTQ0FoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk YzY0OGZjZTgtNTQxYi00NmExLTk5ZTUtZjQwMmI1ODRjNWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW4fPbFglqZotCbcJWEw0ZZgILxohFpULLlZ fSJViaScm/Rpeo+lNLu2fEV9t1JJhIL2M9IDtIUpJMyH53qg43ZAS1xNiU8Nk69m XcF9a3+EQOFNuGdOyW/JLfcg3s0WHYMblSCXgH/KzaCzSQhJGJ+P1uGoTGbjjKct P3EfKwPv1sgzOU5n+I+5J1srZAGmHus7n8/UoyjhwLQOWwyrFnky37Uk0l71OCT1 tama5LOMejAT8wP7ciQa8saOdkVrdAtCNhM4h/17cS2OlN+5FyYhQCnwK+vgqJxT ITO7ESZ86kwvj6eEOIXLWTd9FVZ1wI10c60ldfflQnEOXwLllwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBr6xJ+KPfZGakzpUIdEK+qyDCejMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2ZiMWJlYjItZjVmYi0z M2E2LWJiMWItNTAxMDA5MDZjNGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9I6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYOu+VGR8xUgXtLHUhCdLKvPH/LD4SQv7Di1QA3Wnu4Sf0kcLuyBy5l 09mE9b8poI/m725/8ZMuPhKzqJCg2SaymTum0FGDPxYEo53PxXW4wMi8Ba6IjrmC 3TJohFgzRAlhZi3NpWSWj2gHzBEN/vtP64hcFWtlEa7H1EdPiyHUA8OGLCVU150h u4TkzIQVIsVnhnCChDcWng2uDq1VhSm0QxrC0oPmNzJ0y6/ayWbbFZk3e4S1wwmI C4LPJJKIbfYrwh3EiXlzQPRGBbmsdbWPWwftrJ+ZaYkw2utIp5dNkiHa29QU+f+B efSkciIiKzfslEWgZXqTwUJo20+19KU= -----END CERTIFICATE-----Generated at Mon Oct 20 04:54:52 2025 by rpki-client