$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64841697-ca97-3404-a190-d16b2e7f169e.roa File: 64841697-ca97-3404-a190-d16b2e7f169e.roa (raw, json) Hash identifier: Fn8W9o7hqnDWBeODOYndAhz/DUP4yQ4MmZbjUaQgn0M= Subject key identifier: A3:C0:AB:B7:A9:36:98:5C:FE:EA:7D:DC:38:A5:B5:F9:AE:E8:68:A8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B477C97C65802FDD5E97790C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64841697-ca97-3404-a190-d16b2e7f169e.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 16625 IP address blocks: 23.200.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:97:c6:58:02:fd:d5:e9:77:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=293854b6-0f8b-44d9-9c69-7744c8de42d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e3:d7:30:e1:66:c1:8b:f5:b5:10:3f:f9:79: be:ef:7b:34:db:27:e8:2b:ad:a9:6c:39:65:30:d0: b1:8b:03:65:0e:ab:23:d7:a3:2f:85:82:ad:52:91: 55:b5:86:4e:2e:ab:a3:8f:c7:2c:41:42:98:91:69: f8:60:14:a2:08:d7:a2:33:31:4c:bf:6b:8f:0f:4c: e2:c0:06:7c:cf:4c:1f:3e:f6:81:d3:d4:77:45:cd: fc:43:01:08:3a:1f:ba:d0:69:1f:ba:1b:50:43:c1: 72:c9:d5:cb:32:0a:7e:38:f1:1e:f0:68:89:51:48: 70:b5:2a:7f:f7:f5:3d:98:25:bf:db:36:d3:8c:0e: 57:86:e3:7c:d1:95:70:db:30:c4:c1:53:72:7e:6b: e9:aa:2e:62:02:04:73:82:dd:a2:b6:79:67:0f:8b: 22:d7:9f:33:a0:94:ac:a5:42:e4:a8:85:b3:93:e2: 3c:6c:84:42:e0:8f:7b:a6:8c:b3:9b:71:6c:cc:37: 47:78:0f:6d:8b:ee:30:a7:43:a1:07:aa:42:ea:00: 1f:d8:a3:77:0a:7b:f9:6a:b7:cd:e1:f1:64:53:16: e0:fa:52:e9:21:b3:3e:1b:06:de:f5:23:d8:5b:9e: 1f:92:1d:10:a9:27:68:03:d2:11:4c:20:61:3b:d7: 85:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C0:AB:B7:A9:36:98:5C:FE:EA:7D:DC:38:A5:B5:F9:AE:E8:68:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64841697-ca97-3404-a190-d16b2e7f169e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:a3:50:af:f2:89:bf:d1:83:c4:a1:be:b2:6d:7c:5a:ee:44: db:b6:37:fc:6f:2b:7a:b6:b5:69:85:dc:ca:79:f2:bf:cb:26: b9:bd:72:0c:fb:c9:b5:e4:1e:14:49:0b:0d:d8:d3:bb:7b:e8: dd:85:8a:26:c6:d8:14:f1:3d:f4:4d:a4:14:e3:b5:f7:d8:0a: 7d:e6:2b:5d:84:30:9e:9e:aa:f3:48:97:36:3e:ff:38:68:59: 36:9a:80:97:b8:2c:39:e1:5e:05:0b:06:42:02:df:e5:a5:2b: 15:3c:6e:31:42:0a:6d:30:4e:b1:f4:7d:81:3a:9e:86:17:70: 74:cd:bc:1e:4d:dc:da:03:2f:37:4b:88:64:cf:fd:db:04:a9: 19:81:eb:df:a6:5a:1e:82:6b:f1:75:b9:3f:b8:76:69:ea:b6: 42:f0:24:07:7e:86:e3:56:67:fd:ca:f7:6c:86:bf:23:51:00: f6:0c:01:39:f2:d8:30:b6:ce:b8:ad:d9:b9:ae:89:a8:8f:7d: c9:af:ca:8e:b7:13:b0:b6:19:9d:35:9c:68:40:4b:5b:ce:8a: 05:4e:63:b8:63:94:05:4c:56:e3:09:82:bc:8b:f5:92:78:d8: 61:7d:a8:d4:16:c1:e0:bd:63:91:34:05:a6:2b:4c:a8:02:13: c9:01:b1:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfJfGWAL91el3kMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk MjkzODU0YjYtMGY4Yi00NGQ5LTljNjktNzc0NGM4ZGU0MmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuPXMOFmwYv1tRA/+Xm+73s02yfoK62pbDll MNCxiwNlDqsj16MvhYKtUpFVtYZOLqujj8csQUKYkWn4YBSiCNeiMzFMv2uPD0zi wAZ8z0wfPvaB09R3Rc38QwEIOh+60GkfuhtQQ8FyydXLMgp+OPEe8GiJUUhwtSp/ 9/U9mCW/2zbTjA5XhuN80ZVw2zDEwVNyfmvpqi5iAgRzgt2itnlnD4si158zoJSs pULkqIWzk+I8bIRC4I97poyzm3FszDdHeA9ti+4wp0OhB6pC6gAf2KN3Cnv5arfN 4fFkUxbg+lLpIbM+Gwbe9SPYW54fkh0QqSdoA9IRTCBhO9eFaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPAq7epNphc/up93Diltfmu6GioMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjQ4NDE2OTctY2E5Ny0z NDA0LWExOTAtZDE2YjJlN2YxNjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8gQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyjUK/yib/Rg8ShvrJtfFruRNu2N/xvK3q2tWmF3Mp58r/LJrm9cgz7 ybXkHhRJCw3Y07t76N2FiibG2BTxPfRNpBTjtffYCn3mK12EMJ6eqvNIlzY+/zho WTaagJe4LDnhXgULBkIC3+WlKxU8bjFCCm0wTrH0fYE6noYXcHTNvB5N3NoDLzdL iGTP/dsEqRmB69+mWh6Ca/F1uT+4dmnqtkLwJAd+huNWZ/3K92yGvyNRAPYMATny 2DC2zrit2bmuiaiPfcmvyo63E7C2GZ01nGhAS1vOigVOY7hjlAVMVuMJgryL9ZJ4 2GF9qNQWweC9Y5E0BaYrTKgCE8kBsf0= -----END CERTIFICATE-----Generated at Mon Oct 20 05:15:52 2025 by rpki-client