$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c748ee3-a3ea-3f64-a802-f795c4d6bbd6.roa File: 4c748ee3-a3ea-3f64-a802-f795c4d6bbd6.roa (raw, json) Hash identifier: +ciqqoM/LZCZi3X7cV5vOuJrFjGSKpKXZYQgvosZrxs= Subject key identifier: 9C:B7:98:26:F3:2D:BB:02:5D:1E:09:A4:7D:F2:33:D5:83:E7:01:46 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B477C9580AE4BDC54732787C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c748ee3-a3ea-3f64-a802-f795c4d6bbd6.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 16625 IP address blocks: 23.201.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:95:80:ae:4b:dc:54:73:27:87:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=90290130-728d-4136-836f-44977f32c985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2a:7f:9b:c9:41:66:d0:55:4b:3f:b3:b1:11: 70:16:fc:3d:e0:60:cf:90:60:cd:af:0a:f1:d4:68: 48:f1:4f:f7:de:13:98:85:53:ab:13:12:4f:f5:c0: de:60:f2:60:b2:98:e8:72:de:58:67:5b:01:ed:7d: 46:17:9f:0f:f3:09:16:a2:40:ed:f2:08:19:b4:9f: 3e:4d:86:5d:29:54:68:78:30:81:d4:1c:76:e5:d7: 7d:b4:6d:4b:33:47:7c:4d:0c:fa:90:8a:c3:b1:80: 7e:23:c4:d6:ee:33:91:5c:66:ea:4a:e1:7e:9d:76: 0c:22:3a:ba:55:ed:4a:4b:c1:e7:9a:9a:3d:b6:24: cb:cb:af:c6:6e:90:d8:66:52:a8:6d:aa:75:e7:1c: 43:65:4d:6c:da:3d:61:30:06:42:58:c1:8f:9e:7e: 2f:47:20:1e:5f:88:4b:cf:85:ae:b3:ba:a5:02:63: 23:2a:a2:45:93:62:7d:30:1f:49:95:a3:55:30:73: 0d:88:bb:ca:e8:97:40:6f:49:c5:e9:8f:d6:11:02: eb:41:ef:76:d3:4b:53:95:af:33:dc:23:2a:24:bd: 9b:bb:a4:7c:8a:a4:93:fd:e6:bb:ee:54:ac:38:72: dc:a5:36:8a:bd:08:31:d1:6d:33:5f:ac:8a:76:a5: c7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B7:98:26:F3:2D:BB:02:5D:1E:09:A4:7D:F2:33:D5:83:E7:01:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c748ee3-a3ea-3f64-a802-f795c4d6bbd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:d5:b2:6b:d5:01:e7:be:ad:d9:dd:5a:d1:fc:71:11:6d:f9: ce:da:e3:c5:d5:e2:44:46:26:43:50:2d:9a:d2:d7:c2:da:05: 94:c5:60:72:35:a7:56:57:35:18:d7:b3:7b:fc:6b:b6:91:d2: 7d:2b:89:f7:61:ae:ec:b7:c4:54:ef:61:23:df:b0:3f:18:05: d5:9d:f6:2c:41:87:07:82:51:7e:d9:6d:d0:ab:d7:06:50:76: 1e:c0:fa:c8:77:e4:1f:fe:c4:e7:24:d0:34:94:97:38:1d:2c: 4a:03:13:93:d5:e6:ec:ea:f1:32:d1:0a:1f:50:40:eb:28:3d: ec:e2:ba:ee:0d:ac:5c:8e:8b:3e:8c:c2:34:f8:29:94:60:fe: 56:c1:d6:c1:48:87:d0:0c:20:b4:e5:66:dc:40:af:bf:47:07: 55:99:b8:da:03:bd:6c:47:68:25:ee:c0:91:5c:0e:94:80:d0: 40:46:78:06:dc:12:a2:55:4a:b1:0f:3b:b0:1d:a1:e3:e3:ff: 42:46:01:d9:c3:5e:49:e3:ee:b7:ec:2a:7f:42:6e:b1:9a:70: 40:d7:5f:48:7b:1c:18:25:27:54:9b:2b:92:ac:f5:98:66:d0: 47:9b:a5:1b:c8:c0:94:80:f2:0e:52:19:9c:ce:d4:bf:12:99: 6f:18:81:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfJWArkvcVHMnh8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk OTAyOTAxMzAtNzI4ZC00MTM2LTgzNmYtNDQ5NzdmMzJjOTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyp/m8lBZtBVSz+zsRFwFvw94GDPkGDNrwrx 1GhI8U/33hOYhVOrExJP9cDeYPJgspjoct5YZ1sB7X1GF58P8wkWokDt8ggZtJ8+ TYZdKVRoeDCB1Bx25dd9tG1LM0d8TQz6kIrDsYB+I8TW7jORXGbqSuF+nXYMIjq6 Ve1KS8Hnmpo9tiTLy6/GbpDYZlKobap15xxDZU1s2j1hMAZCWMGPnn4vRyAeX4hL z4Wus7qlAmMjKqJFk2J9MB9JlaNVMHMNiLvK6JdAb0nF6Y/WEQLrQe9200tTla8z 3CMqJL2bu6R8iqST/ea77lSsOHLcpTaKvQgx0W0zX6yKdqXHGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJy3mCbzLbsCXR4JpH3yM9WD5wFGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGM3NDhlZTMtYTNlYS0z ZjY0LWE4MDItZjc5NWM0ZDZiYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8mUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALVsmvVAee+rdndWtH8cRFt+c7a48XV4kRGJkNQLZrS18LaBZTFYHI1 p1ZXNRjXs3v8a7aR0n0rifdhruy3xFTvYSPfsD8YBdWd9ixBhweCUX7ZbdCr1wZQ dh7A+sh35B/+xOck0DSUlzgdLEoDE5PV5uzq8TLRCh9QQOsoPeziuu4NrFyOiz6M wjT4KZRg/lbB1sFIh9AMILTlZtxAr79HB1WZuNoDvWxHaCXuwJFcDpSA0EBGeAbc EqJVSrEPO7AdoePj/0JGAdnDXknj7rfsKn9CbrGacEDXX0h7HBglJ1SbK5Ks9Zhm 0EebpRvIwJSA8g5SGZzO1L8SmW8Ygdw= -----END CERTIFICATE-----Generated at Mon Oct 20 09:57:13 2025 by rpki-client