$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fc55bc3-27df-3b37-b3c0-566c75a4fb14.roa File: 3fc55bc3-27df-3b37-b3c0-566c75a4fb14.roa (raw, json) Hash identifier: GvkDFTnG/Kq0exGBdNakFl8a+V8IfOrtt7WolU119LA= Subject key identifier: 8F:18:99:21:D1:0A:F5:8F:AB:5D:A4:71:38:97:51:22:57:2B:3E:F0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE196ABBCC4E6FC92D4072180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fc55bc3-27df-3b37-b3c0-566c75a4fb14.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.200.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:ab:bc:c4:e6:fc:92:d4:07:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=98cd9359-c0e8-4d40-97bb-4b82f254c6fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:58:1f:ff:97:b2:01:4f:89:4c:fd:15:45:98: 37:85:2b:c8:45:c0:08:e1:65:c0:78:bc:2e:1b:1d: 08:a7:97:37:ec:5d:25:1b:46:81:da:45:7d:a7:45: c1:23:05:64:5c:01:fe:45:ae:84:4a:2a:76:3a:c4: 44:25:61:7a:88:f7:fa:ad:0d:92:75:c5:7c:cf:b4: b2:7a:3e:34:27:6a:d5:f6:4b:0e:c2:fc:8e:f6:72: 8e:fe:60:64:a4:56:77:37:8c:13:31:22:8a:2b:55: 9a:d4:0d:79:6f:74:c6:16:da:3d:2e:12:37:b7:61: 80:09:77:84:d0:47:6e:0d:4a:8c:20:fe:81:14:d0: 5c:49:7f:a7:a2:41:96:54:09:ff:52:28:ca:e5:50: 99:cd:e8:ba:e2:2b:87:73:b7:51:f0:be:c6:53:1d: c6:d2:ec:50:bd:9e:b3:b5:93:c3:48:09:2b:20:4e: 17:52:6e:68:c3:c2:9b:0d:17:cf:73:ad:05:2c:61: 7b:06:00:67:74:b4:00:49:4d:5e:41:40:dc:a0:e5: b9:4a:2b:2a:e8:52:03:22:04:69:3e:dd:37:1b:9e: 41:55:c3:75:c2:26:0a:02:09:c2:f0:7e:db:d8:20: dc:af:20:1b:1d:96:49:86:4c:73:e5:f7:cd:39:1b: d2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:18:99:21:D1:0A:F5:8F:AB:5D:A4:71:38:97:51:22:57:2B:3E:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fc55bc3-27df-3b37-b3c0-566c75a4fb14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:fd:15:d4:22:00:98:80:5b:c7:20:0e:4d:e4:7b:99:78:d0: 87:4f:80:6b:de:7c:50:b7:f8:37:ee:77:a5:17:9e:f6:96:ee: 49:52:46:10:b3:3b:87:1c:6b:b5:47:2b:b5:a7:53:b3:8c:e1: 45:34:69:5b:40:1c:66:56:81:28:80:f9:12:f5:c4:ae:e6:0a: ac:b7:59:73:89:c5:ef:17:ac:e7:ea:7f:d1:e5:a2:06:a7:e3: dd:90:f6:a0:56:ea:0e:92:d2:5f:e1:62:5e:6c:77:0c:3e:fa: 19:ae:e3:22:62:b8:4c:50:3f:ea:4a:bb:54:2a:bc:88:13:5e: 81:ca:5d:40:d5:37:5e:03:80:b5:44:ec:83:f3:d9:a0:1b:0f: 63:63:1e:ff:b5:16:e3:a6:da:8f:0c:3f:df:6f:a0:c1:ad:17: 08:ee:73:fa:2a:69:10:58:b4:03:b1:58:69:6e:37:a8:44:7d: 97:94:dc:aa:d1:48:54:07:6d:b2:45:56:cd:83:c5:6e:da:ba: 6c:90:fc:df:89:3d:e7:96:93:83:88:a7:d6:c4:75:c0:71:c5: 65:99:b5:87:59:10:d3:6d:56:fa:21:fa:75:ef:ff:21:91:0c: 88:c4:ed:5e:ca:c8:2a:a9:13:8c:49:3c:17:a4:62:9b:0b:1f: 40:44:9e:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlqu8xOb8ktQHIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk OThjZDkzNTktYzBlOC00ZDQwLTk3YmItNGI4MmYyNTRjNmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlgf/5eyAU+JTP0VRZg3hSvIRcAI4WXAeLwu Gx0Ip5c37F0lG0aB2kV9p0XBIwVkXAH+Ra6ESip2OsREJWF6iPf6rQ2SdcV8z7Sy ej40J2rV9ksOwvyO9nKO/mBkpFZ3N4wTMSKKK1Wa1A15b3TGFto9LhI3t2GACXeE 0EduDUqMIP6BFNBcSX+nokGWVAn/UijK5VCZzei64iuHc7dR8L7GUx3G0uxQvZ6z tZPDSAkrIE4XUm5ow8KbDRfPc60FLGF7BgBndLQASU1eQUDcoOW5Sisq6FIDIgRp Pt03G55BVcN1wiYKAgnC8H7b2CDcryAbHZZJhkxz5ffNORvSDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8YmSHRCvWPq12kcTiXUSJXKz7wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2ZjNTViYzMtMjdkZi0z YjM3LWIzYzAtNTY2Yzc1YTRmYjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8jlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEP9FdQiAJiAW8cgDk3ke5l40IdPgGvefFC3+Dfud6UXnvaW7klSRhCz O4cca7VHK7WnU7OM4UU0aVtAHGZWgSiA+RL1xK7mCqy3WXOJxe8XrOfqf9Hlogan 492Q9qBW6g6S0l/hYl5sdww++hmu4yJiuExQP+pKu1QqvIgTXoHKXUDVN14DgLVE 7IPz2aAbD2NjHv+1FuOm2o8MP99voMGtFwjuc/oqaRBYtAOxWGluN6hEfZeU3KrR SFQHbbJFVs2DxW7aumyQ/N+JPeeWk4OIp9bEdcBxxWWZtYdZENNtVvoh+nXv/yGR DIjE7V7KyCqpE4xJPBekYpsLH0BEngY= -----END CERTIFICATE-----Generated at Sat Aug 23 20:54:24 2025 by rpki-client