$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/439a45eb-6aac-3e07-a6cd-a58855498729.roa File: 439a45eb-6aac-3e07-a6cd-a58855498729.roa (raw, json) Hash identifier: d3S6hxztZ2GILhOGK7dQFn3vEoHQmtMRjVhcJ69Lo3E= Subject key identifier: 9E:10:40:40:C6:A5:6F:AE:C7:11:F6:14:42:83:4B:CF:C7:3F:4E:85 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4616FF852A9AF036741EC700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/439a45eb-6aac-3e07-a6cd-a58855498729.roa Signing time: Mon 22 Sep 2025 01:00:33 +0000 ROA not before: Mon 22 Sep 2025 01:00:33 +0000 ROA not after: Sun 21 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.199.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:16:ff:85:2a:9a:f0:36:74:1e:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 01:00:33 2025 GMT Not After : Dec 21 02:00:33 2025 GMT Subject: CN=433faa0b-8f97-4add-a3c2-e785e8faf5c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3b:3c:ff:86:09:07:e6:04:5a:2f:c3:84:cb: 2b:3e:72:e6:b5:e1:49:af:d9:b6:be:1d:c0:83:32: 10:c6:93:5b:ff:14:ac:7c:77:ed:9b:8b:5e:72:91: a2:57:d6:92:3a:08:6e:4c:2a:83:3c:f2:2c:f6:6e: 64:9b:b9:13:37:1c:49:a1:46:c1:85:fe:64:20:d9: 91:00:e6:1b:3e:06:fb:c2:06:21:0e:d5:67:19:86: ca:8e:9f:7c:88:78:73:90:13:cf:e2:c6:f0:a9:15: e8:6b:82:26:0a:65:24:b1:59:75:34:11:4e:8f:ba: 21:3b:bd:0a:71:98:6e:91:f7:2e:64:c2:cb:53:31: 92:9e:fb:9c:c9:1c:22:ed:89:67:2c:72:60:e4:d3: b3:93:15:33:d1:88:03:ad:0f:86:2f:f1:92:5e:34: 95:5e:82:5e:2a:01:52:ef:07:74:ca:e7:be:47:1b: 86:71:2c:11:58:6d:93:09:35:50:8b:8a:6d:58:f4: 85:d5:f2:d8:6b:92:b6:db:d7:ba:c2:81:85:c2:43: 29:0b:9a:a0:fc:a5:59:8b:92:7b:a4:21:94:f0:ff: 0b:8f:eb:f1:75:84:9a:88:06:9e:34:e9:6e:1a:05: e3:57:a1:6d:32:7b:41:42:26:49:5a:2f:66:ad:5b: a4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:10:40:40:C6:A5:6F:AE:C7:11:F6:14:42:83:4B:CF:C7:3F:4E:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/439a45eb-6aac-3e07-a6cd-a58855498729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:c2:a4:3b:43:e5:9b:9a:d4:f5:14:03:13:7c:18:e1:a7:6d: a1:17:84:86:d7:36:aa:c9:24:33:2d:7b:cf:91:3b:e9:54:32: 94:9f:22:9b:f3:cb:00:01:d9:18:92:52:65:a2:c3:4b:0d:ba: 41:19:63:d5:0f:52:bb:00:6e:41:8f:b6:c3:78:20:d5:2d:3e: 2d:25:2d:87:13:9a:16:55:3c:a5:17:54:c5:64:d5:ff:f5:63: 48:1b:c6:54:9d:10:37:9d:54:83:dc:1d:32:8a:92:5c:25:45: dd:e7:da:9c:33:01:25:8a:2b:eb:90:7a:79:d3:b8:e9:98:a9: dc:ae:5d:12:6d:af:88:68:0a:92:9c:d7:d9:1a:38:e3:6d:f9: 5c:dc:fb:09:7e:04:b4:c0:39:4b:94:44:16:9d:cd:5e:37:51: e9:6d:38:6f:ad:40:55:8f:48:c7:d5:d2:e5:23:65:03:ab:e7: 0f:c2:6c:41:c8:a6:26:6a:f1:10:b8:bc:2b:ce:00:1e:fe:b9: ce:2f:7a:26:7a:c7:97:f4:1c:10:78:71:55:c8:03:13:22:d3: d9:5a:17:ce:4d:27:b0:21:97:32:53:f9:bd:c1:0e:39:ef:64: 98:c8:8a:f5:17:fe:66:d4:cb:f8:8f:68:70:f0:4c:ad:06:4a: b0:73:1b:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtGFv+FKprwNnQexwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk NDMzZmFhMGItOGY5Ny00YWRkLWEzYzItZTc4NWU4ZmFmNWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzs8/4YJB+YEWi/DhMsrPnLmteFJr9m2vh3A gzIQxpNb/xSsfHftm4tecpGiV9aSOghuTCqDPPIs9m5km7kTNxxJoUbBhf5kINmR AOYbPgb7wgYhDtVnGYbKjp98iHhzkBPP4sbwqRXoa4ImCmUksVl1NBFOj7ohO70K cZhukfcuZMLLUzGSnvucyRwi7YlnLHJg5NOzkxUz0YgDrQ+GL/GSXjSVXoJeKgFS 7wd0yue+RxuGcSwRWG2TCTVQi4ptWPSF1fLYa5K229e6woGFwkMpC5qg/KVZi5J7 pCGU8P8Lj+vxdYSaiAaeNOluGgXjV6FtMntBQiZJWi9mrVukpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4QQEDGpW+uxxH2FEKDS8/HP06FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDM5YTQ1ZWItNmFhYy0z ZTA3LWE2Y2QtYTU4ODU1NDk4NzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8cwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDCpDtD5Zua1PUUAxN8GOGnbaEXhIbXNqrJJDMte8+RO+lUMpSfIpvz ywAB2RiSUmWiw0sNukEZY9UPUrsAbkGPtsN4INUtPi0lLYcTmhZVPKUXVMVk1f/1 Y0gbxlSdEDedVIPcHTKKklwlRd3n2pwzASWKK+uQennTuOmYqdyuXRJtr4hoCpKc 19kaOONt+Vzc+wl+BLTAOUuURBadzV43UeltOG+tQFWPSMfV0uUjZQOr5w/CbEHI piZq8RC4vCvOAB7+uc4veiZ6x5f0HBB4cVXIAxMi09laF85NJ7AhlzJT+b3BDjnv ZJjIivUX/mbUy/iPaHDwTK0GSrBzGzw= -----END CERTIFICATE-----Generated at Mon Oct 20 02:18:25 2025 by rpki-client