$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/50ada21f-50f5-3663-8d70-d7de1b076b25.roa File: 50ada21f-50f5-3663-8d70-d7de1b076b25.roa (raw, json) Hash identifier: pULnv0uaurcRcnZehWPoOBhsoBOAY037xvU5elOnGig= Subject key identifier: 82:F3:A3:3E:62:A5:0C:94:FB:20:FA:77:DE:CB:57:E7:27:B1:2C:8D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B477C7F88E59C2E0875EBB0C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/50ada21f-50f5-3663-8d70-d7de1b076b25.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 35994 IP address blocks: 23.200.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:7f:88:e5:9c:2e:08:75:eb:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=064d8841-58fd-432d-b8ae-d9fe9761d13d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0b:51:5c:34:b4:fc:d1:05:ca:ec:c5:42:1b: 29:e3:17:e3:be:9e:10:15:5a:ec:f7:f2:30:56:8e: c8:a6:f7:70:b0:10:62:ff:ad:28:7b:c8:6d:ec:74: 17:3a:81:8f:2f:4e:0d:08:dd:50:b0:af:91:a5:7c: 82:14:07:d8:75:27:9c:bb:16:e5:19:b5:66:c6:cc: 33:93:4b:7a:03:e2:00:77:43:21:4e:a8:79:00:d7: c0:c2:f3:38:1f:67:e5:09:1e:bd:61:56:28:af:4d: e4:b7:48:d8:46:7c:7c:20:f4:42:cb:78:4f:91:67: 3a:e5:43:ca:05:66:7f:47:19:65:e2:bf:a2:9d:c0: 65:41:54:44:92:e3:50:e0:11:db:db:d5:fd:dd:ca: fe:7d:d2:1b:28:45:2a:a5:20:32:03:90:22:35:ee: e8:33:42:6c:30:52:1a:c8:10:f1:d2:19:25:cf:b8: 9b:be:c9:b2:9c:07:f0:a6:91:58:03:7d:81:d5:ab: 71:5c:df:7d:bc:53:d5:ee:80:63:d5:dd:91:c3:75: e6:d9:8f:cd:68:c8:e6:94:5e:11:40:69:ae:fa:2d: 89:9e:52:f5:c7:ef:49:8f:c4:6b:ea:d7:e8:7a:19: 30:d6:c2:da:b4:17:0d:59:96:12:f8:9e:83:5b:a5: a8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F3:A3:3E:62:A5:0C:94:FB:20:FA:77:DE:CB:57:E7:27:B1:2C:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/50ada21f-50f5-3663-8d70-d7de1b076b25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:9e:4a:2d:c8:ad:bb:ce:d0:a3:ff:eb:33:b2:62:33:60:f1: 9b:8a:dc:cb:c4:20:f2:51:88:cb:18:a8:5b:3e:43:e9:db:85: ce:39:85:5e:18:a4:28:38:e6:0a:07:65:99:21:7c:f9:b0:e1: 17:91:d5:85:e7:e0:60:25:98:68:23:1e:f9:1d:47:40:66:b8: c4:9b:4a:f4:f8:e0:ee:7a:9b:fe:c6:2e:49:ad:82:31:50:a8: 38:74:34:fa:20:d2:f1:ee:96:49:70:01:97:ce:0c:c4:b6:d4: 31:c9:96:ed:b9:8a:86:e4:f4:0b:ce:0c:2d:e9:c2:6f:66:10: fe:10:0f:df:66:53:d9:c6:ae:2c:fa:a2:0e:bb:e1:48:31:a5: ff:18:4f:ef:fd:39:7c:89:9a:15:24:95:17:a8:83:47:c6:af: 0e:1e:cf:72:da:d0:15:b7:d7:f4:6d:a1:9e:60:ac:d6:70:e0: 93:32:e2:b1:14:5b:c5:d3:02:2e:c7:db:54:77:30:c3:29:20: 42:68:9f:b5:a3:63:6b:c3:41:5a:b2:a7:4a:88:62:eb:6f:20: 6d:98:72:73:50:10:09:1c:63:59:fd:f3:b9:90:c3:90:e9:4b: ec:ee:06:cb:8b:54:a9:f2:0d:49:6d:3d:bb:13:94:6f:98:f0: bb:1e:f0:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfH+I5ZwuCHXrsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk MDY0ZDg4NDEtNThmZC00MzJkLWI4YWUtZDlmZTk3NjFkMTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQtRXDS0/NEFyuzFQhsp4xfjvp4QFVrs9/Iw Vo7IpvdwsBBi/60oe8ht7HQXOoGPL04NCN1QsK+RpXyCFAfYdSecuxblGbVmxswz k0t6A+IAd0MhTqh5ANfAwvM4H2flCR69YVYor03kt0jYRnx8IPRCy3hPkWc65UPK BWZ/Rxll4r+incBlQVREkuNQ4BHb29X93cr+fdIbKEUqpSAyA5AiNe7oM0JsMFIa yBDx0hklz7ibvsmynAfwppFYA32B1atxXN99vFPV7oBj1d2Rw3Xm2Y/NaMjmlF4R QGmu+i2JnlL1x+9Jj8Rr6tfoehkw1sLatBcNWZYS+J6DW6Wo3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILzoz5ipQyU+yD6d97LV+cnsSyNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTBhZGEyMWYtNTBmNS0z NjYzLThkNzAtZDdkZTFiMDc2YjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8gJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeeSi3IrbvO0KP/6zOyYjNg8ZuK3MvEIPJRiMsYqFs+Q+nbhc45hV4Y pCg45goHZZkhfPmw4ReR1YXn4GAlmGgjHvkdR0BmuMSbSvT44O56m/7GLkmtgjFQ qDh0NPog0vHulklwAZfODMS21DHJlu25iobk9AvODC3pwm9mEP4QD99mU9nGriz6 og674Ugxpf8YT+/9OXyJmhUklReog0fGrw4ez3La0BW31/RtoZ5grNZw4JMy4rEU W8XTAi7H21R3MMMpIEJon7WjY2vDQVqyp0qIYutvIG2YcnNQEAkcY1n987mQw5Dp S+zuBsuLVKnyDUltPbsTlG+Y8Lse8FI= -----END CERTIFICATE-----Generated at Mon Oct 20 17:35:19 2025 by rpki-client