$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f37c820-031f-3213-ae13-8aab245ec2a3.roa File: 5f37c820-031f-3213-ae13-8aab245ec2a3.roa (raw, json) Hash identifier: 2XWQqpEI3EyROAjUjN7xugAIFAR+Kpc5f821x4C9Z+Q= Subject key identifier: E6:E2:1C:94:A4:5B:D5:22:7D:2E:35:6B:1C:EC:8E:8C:0A:F8:09:7A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E202A1F9CB804A144D1CA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f37c820-031f-3213-ae13-8aab245ec2a3.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.202.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:02:a1:f9:cb:80:4a:14:4d:1c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=d5af96f9-e60f-47f9-9b79-b6643b9fea6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ac:70:e0:80:f1:4a:11:40:22:71:37:57:c2: 48:29:f4:dd:11:49:1a:36:7f:05:fb:13:dd:d8:8a: a5:5a:86:62:ef:53:be:d1:fd:07:2d:e4:77:36:c9: f9:ff:05:92:d9:2c:64:e7:e4:92:46:9d:17:88:db: ab:25:5b:ee:bc:2e:44:78:9a:c5:8e:a6:2d:cc:94: 45:a6:4b:8c:6d:c6:12:7c:45:b6:4c:85:91:fd:24: 87:09:28:fd:aa:23:5d:b6:2a:29:f3:8e:84:d7:b0: 6c:60:ee:1c:04:e1:d6:8b:ac:2d:c6:fd:c3:c9:22: 10:40:5a:f3:b0:c2:d4:d6:3c:9d:f9:89:04:33:ee: 06:bf:dc:a0:b9:32:40:23:44:4b:68:34:d4:16:b9: 62:ca:a2:1d:20:37:e9:e9:27:39:99:3e:50:87:77: 4d:25:93:e1:88:df:18:eb:62:74:00:54:e7:1e:b8: 0e:64:32:ca:10:2b:54:27:d8:81:5f:1e:2a:a6:ad: 34:e4:af:cd:b6:88:01:6a:e4:d2:4b:4f:9d:1a:ad: 7c:7d:dd:12:64:7f:05:af:0d:17:91:e0:c1:13:fb: a0:ae:5a:7b:00:b2:54:d9:f9:3e:ad:a0:bf:0a:23: 46:30:00:1f:db:1b:2e:53:a9:42:cf:20:8d:0e:ee: 44:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E2:1C:94:A4:5B:D5:22:7D:2E:35:6B:1C:EC:8E:8C:0A:F8:09:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f37c820-031f-3213-ae13-8aab245ec2a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:bf:d4:d6:56:79:a8:8a:9f:e9:5d:66:0b:1a:50:7b:5e:e4: 44:8d:7a:9d:36:e1:12:8e:29:9d:92:a1:c2:c4:d8:11:3e:59: a3:25:ba:73:67:47:f5:44:4a:3a:5d:92:f1:8e:57:05:49:7a: 20:fe:b6:2c:0f:32:05:72:e4:94:6f:22:bf:12:21:8c:9c:2c: c7:4a:27:8d:f1:0a:c2:46:9f:88:f1:80:9e:c3:4b:8e:10:50: cd:a6:4a:7d:86:49:af:03:96:a3:68:2e:20:5a:25:d7:00:e3: aa:c3:5c:67:0e:63:35:08:d2:67:d5:14:56:e3:e9:13:0d:78: f8:68:d5:6d:bd:e2:9b:66:41:29:8d:f3:fe:d8:5c:90:94:a3: 6b:14:20:a1:c5:93:60:37:2d:64:36:52:7c:af:af:1c:75:5b: c2:65:01:b9:a3:b4:68:dc:83:3b:ae:fb:cd:9b:92:86:e6:c0: 2b:7b:0a:ba:c2:ad:a3:1e:a8:33:4e:d5:d4:01:fa:f2:7d:26: 0b:6a:a0:01:40:96:15:e0:b5:49:fe:58:7d:44:24:51:77:a6: 7b:cf:92:ea:46:62:51:b4:f4:16:eb:c7:1c:8e:d4:e7:9e:43: eb:e2:64:2e:84:72:f2:a6:cd:df:ea:f8:3d:79:e1:a5:c0:d7: e1:34:1f:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4gKh+cuAShRNHKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDVhZjk2ZjktZTYwZi00N2Y5LTliNzktYjY2NDNiOWZlYTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqxw4IDxShFAInE3V8JIKfTdEUkaNn8F+xPd 2IqlWoZi71O+0f0HLeR3Nsn5/wWS2Sxk5+SSRp0XiNurJVvuvC5EeJrFjqYtzJRF pkuMbcYSfEW2TIWR/SSHCSj9qiNdtiop846E17BsYO4cBOHWi6wtxv3DySIQQFrz sMLU1jyd+YkEM+4Gv9yguTJAI0RLaDTUFrliyqIdIDfp6Sc5mT5Qh3dNJZPhiN8Y 62J0AFTnHrgOZDLKECtUJ9iBXx4qpq005K/NtogBauTSS0+dGq18fd0SZH8Frw0X keDBE/ugrlp7ALJU2fk+raC/CiNGMAAf2xsuU6lCzyCNDu5EsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObiHJSkW9UifS41axzsjowK+Al6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWYzN2M4MjAtMDMxZi0z MjEzLWFlMTMtOGFhYjI0NWVjMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8pxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACS/1NZWeaiKn+ldZgsaUHte5ESNep024RKOKZ2SocLE2BE+WaMlunNn R/VESjpdkvGOVwVJeiD+tiwPMgVy5JRvIr8SIYycLMdKJ43xCsJGn4jxgJ7DS44Q UM2mSn2GSa8DlqNoLiBaJdcA46rDXGcOYzUI0mfVFFbj6RMNePho1W294ptmQSmN 8/7YXJCUo2sUIKHFk2A3LWQ2Unyvrxx1W8JlAbmjtGjcgzuu+82bkobmwCt7CrrC raMeqDNO1dQB+vJ9JgtqoAFAlhXgtUn+WH1EJFF3pnvPkupGYlG09BbrxxyO1Oee Q+viZC6EcvKmzd/q+D154aXA1+E0H78= -----END CERTIFICATE-----Generated at Mon Oct 20 02:35:10 2025 by rpki-client