$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/578652ad-873b-31f7-8cb3-6aa669dd9e4d.roa File: 578652ad-873b-31f7-8cb3-6aa669dd9e4d.roa (raw, json) Hash identifier: P3jmY2GiBTfQ8yq8ck8HCyzixmMRti2WKgRAOxNbgu8= Subject key identifier: D5:3B:2D:6E:7F:7F:49:4D:0C:52:83:9A:A9:3C:B5:22:D1:2C:F9:35 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B074EF195457FA741AC8A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/578652ad-873b-31f7-8cb3-6aa669dd9e4d.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.210.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:4e:f1:95:45:7f:a7:41:ac:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=664849bd-ceb2-47fb-ae4a-fc82e882d0fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:74:e8:ee:33:21:c5:13:f5:21:3d:d5:ef:6b: 49:9a:79:a7:a2:bc:4d:f7:32:e1:4c:2d:61:e4:b6: 79:4a:12:3a:63:41:30:8e:3f:46:fb:b7:ed:79:36: b0:a9:a7:13:16:fd:ed:c9:89:16:ce:cc:ca:99:f4: 09:e8:44:34:b4:55:8a:4a:80:49:9a:97:28:54:a0: c0:e2:6c:bd:58:11:96:74:33:9e:62:92:8e:f1:03: 47:e8:fb:a8:56:27:f5:8e:9e:01:c1:e6:dc:57:78: f5:4c:5d:43:fa:97:db:7f:41:b0:f5:64:2d:82:6c: 5b:76:8b:dd:3e:89:f1:75:51:31:43:35:83:ec:36: b4:6d:2a:4a:10:f1:10:d1:25:be:90:9d:c0:79:6a: d2:6e:b1:dd:f8:dc:3d:78:82:5c:5b:29:b2:0e:e4: 71:a9:0b:41:47:05:9f:91:3b:92:12:cc:25:aa:91: 4c:45:af:3a:b4:c2:d5:57:5a:ca:c4:4e:c5:4a:62: f5:01:a6:58:54:32:65:1d:35:47:80:2d:e3:93:16: 21:ed:f5:d5:80:8f:db:2c:7a:0f:e3:96:09:0a:2e: 2b:18:72:aa:dd:92:04:f6:ce:c4:11:bc:1e:dd:f0: b4:3d:e2:b9:21:65:14:16:c9:a1:27:74:b2:51:e2: 2f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3B:2D:6E:7F:7F:49:4D:0C:52:83:9A:A9:3C:B5:22:D1:2C:F9:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/578652ad-873b-31f7-8cb3-6aa669dd9e4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:a3:a7:de:8e:84:d1:50:90:be:e5:42:d5:d4:a0:e0:15:a0: 38:80:6d:69:3d:6f:7f:51:dd:d4:a3:59:68:2d:93:4e:b9:7a: f1:e7:9a:7f:95:99:86:3a:ab:4d:91:82:25:95:13:46:61:e6: cb:fa:5a:6f:b6:b4:64:c7:60:a2:54:38:0a:07:71:56:d8:60: 85:93:fb:5f:49:a1:96:71:a5:be:5c:46:0b:3e:4e:90:4c:fa: c2:5b:c0:42:eb:9b:30:65:b3:1d:04:c4:65:09:7b:ed:80:44: 71:84:94:c8:5f:75:54:d3:fe:3c:cb:6e:ac:21:af:56:5b:3b: a0:eb:3d:52:9a:88:81:45:91:be:57:04:a3:24:68:b3:7b:09: 4d:4c:30:83:d5:01:c7:6a:d9:d7:de:c9:65:1e:4e:b6:b3:dc: 00:2e:79:88:a4:75:9a:d9:ce:d0:82:98:59:9e:3d:bb:56:6e: 40:eb:ff:3f:fa:f6:cd:5e:b1:64:d0:20:22:f7:7d:e3:13:83: 1d:02:fb:c5:22:6e:14:5a:fb:38:99:93:f4:2c:c4:af:44:bd: d1:86:03:4f:8a:98:7d:18:31:9a:14:b5:88:cc:2f:8c:c4:90: d5:2f:7f:ad:4c:86:cc:64:d2:75:20:43:e3:8d:b4:e7:51:ee: 23:15:94:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB07xlUV/p0GsioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NjY0ODQ5YmQtY2ViMi00N2ZiLWFlNGEtZmM4MmU4ODJkMGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXTo7jMhxRP1IT3V72tJmnmnorxN9zLhTC1h 5LZ5ShI6Y0Ewjj9G+7fteTawqacTFv3tyYkWzszKmfQJ6EQ0tFWKSoBJmpcoVKDA 4my9WBGWdDOeYpKO8QNH6PuoVif1jp4BwebcV3j1TF1D+pfbf0Gw9WQtgmxbdovd PonxdVExQzWD7Da0bSpKEPEQ0SW+kJ3AeWrSbrHd+Nw9eIJcWymyDuRxqQtBRwWf kTuSEswlqpFMRa86tMLVV1rKxE7FSmL1AaZYVDJlHTVHgC3jkxYh7fXVgI/bLHoP 45YJCi4rGHKq3ZIE9s7EEbwe3fC0PeK5IWUUFsmhJ3SyUeIvrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNU7LW5/f0lNDFKDmqk8tSLRLPk1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTc4NjUyYWQtODczYi0z MWY3LThjYjMtNmFhNjY5ZGQ5ZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9IsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+jp96OhNFQkL7lQtXUoOAVoDiAbWk9b39R3dSjWWgtk065evHnmn+V mYY6q02RgiWVE0Zh5sv6Wm+2tGTHYKJUOAoHcVbYYIWT+19JoZZxpb5cRgs+TpBM +sJbwELrmzBlsx0ExGUJe+2ARHGElMhfdVTT/jzLbqwhr1ZbO6DrPVKaiIFFkb5X BKMkaLN7CU1MMIPVAcdq2dfeyWUeTraz3AAueYikdZrZztCCmFmePbtWbkDr/z/6 9s1esWTQICL3feMTgx0C+8UibhRa+ziZk/QsxK9EvdGGA0+KmH0YMZoUtYjML4zE kNUvf61Mhsxk0nUgQ+ONtOdR7iMVlHo= -----END CERTIFICATE-----Generated at Mon Oct 20 07:42:37 2025 by rpki-client