$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68411e85-9e3d-3498-8379-62706668bebe.roa File: 68411e85-9e3d-3498-8379-62706668bebe.roa (raw, json) Hash identifier: Q+NnxjVp3za9CtofLmqvioC8NZzWm7tM86PRC9jk6zg= Subject key identifier: 44:A1:7C:55:D5:16:4B:DF:2C:36:30:DD:D0:BD:ED:F8:99:1F:E9:39 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B434C8A51C015C8E08F10C1E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68411e85-9e3d-3498-8379-62706668bebe.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16625 IP address blocks: 23.195.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:8a:51:c0:15:c8:e0:8f:10:c1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=71aee87b-e5dd-4595-9a62-2b31ccad6c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cf:cc:5a:ba:93:02:3b:51:aa:ea:ba:b0:53: 19:cb:ef:41:d5:94:2d:ef:21:fd:90:d6:3e:83:32: 9d:a1:0c:cc:cd:03:07:fc:40:05:e0:a0:d8:ae:d6: 3a:a4:de:21:91:91:51:ab:fd:f1:3b:36:7d:3b:9e: 77:a9:61:5b:f6:4c:ca:ef:ab:ef:9e:16:c9:fe:1e: bb:bf:55:8b:b4:94:2e:b3:5e:c5:00:4d:99:57:3a: 87:bd:0a:92:90:4f:de:e8:5f:2c:9e:55:99:e1:b0: 06:7f:9f:52:1b:59:04:67:67:31:0f:45:1c:eb:20: e6:e1:1c:73:f0:39:16:60:fa:64:cc:0a:35:fe:b4: d2:65:fa:50:03:0c:0d:bb:d0:45:11:bc:6f:19:82: 8a:a5:3f:c0:d6:7a:52:bd:5d:ef:3e:19:09:fe:ce: c1:73:37:17:f3:63:86:20:d8:fa:bb:7a:b7:e7:b0: b0:20:2a:a8:a7:a0:5c:ca:e2:58:98:b8:83:5f:ab: 2d:ab:e0:5b:01:b7:a7:35:a1:fb:ec:a8:1c:cb:e4: 57:27:e1:50:0a:26:3f:b1:dd:e4:40:d7:d3:14:17: f5:b1:9f:68:e1:85:37:be:33:80:35:25:2e:c0:9f: 55:33:a4:da:8a:32:03:a0:6b:8b:be:c0:08:91:e5: 90:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A1:7C:55:D5:16:4B:DF:2C:36:30:DD:D0:BD:ED:F8:99:1F:E9:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68411e85-9e3d-3498-8379-62706668bebe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:c7:ff:e9:52:14:9f:2d:b7:66:cf:9c:59:27:72:04:55:cd: a7:bb:1c:8a:20:06:67:f8:3b:53:37:10:df:55:48:df:de:7a: 9a:13:b4:54:6c:06:cc:8e:4e:42:16:06:9b:5d:16:6e:08:a2: 19:26:d3:68:22:3e:22:a4:f7:bc:ee:56:ad:ab:1b:98:42:4a: 6a:a1:f0:d5:c7:63:b3:d2:7c:3e:ac:6d:d4:6e:9b:d6:21:94: 25:63:31:40:ce:da:1a:96:d9:f4:bd:f3:9a:c7:76:61:bb:77: d5:44:66:18:c4:72:34:43:22:80:9e:dd:7b:15:9b:97:76:e9: 0a:14:74:4f:eb:37:6d:f0:be:f4:7c:7b:0a:d3:fb:63:be:40: d5:5e:95:1f:2a:ba:e6:44:a5:45:95:49:8b:80:bf:32:e0:32: cc:ca:02:4d:6e:42:71:e6:4a:b7:38:39:fd:50:60:88:1f:b9: e4:29:8d:97:5f:f8:f4:7a:47:d8:95:30:ef:23:e1:e1:58:1b: 3e:0f:e9:94:c6:79:84:42:2d:9f:51:5e:9b:6d:34:c7:33:65: d9:41:67:5a:58:a4:1f:41:97:46:5d:88:19:42:c5:7a:54:ad: b2:38:bf:4a:d4:9e:a8:73:fe:d3:f6:32:82:78:50:63:4d:0a: a3:39:11:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTIpRwBXI4I8QweAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NzFhZWU4N2ItZTVkZC00NTk1LTlhNjItMmIzMWNjYWQ2Yzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjc/MWrqTAjtRquq6sFMZy+9B1ZQt7yH9kNY+ gzKdoQzMzQMH/EAF4KDYrtY6pN4hkZFRq/3xOzZ9O553qWFb9kzK76vvnhbJ/h67 v1WLtJQus17FAE2ZVzqHvQqSkE/e6F8snlWZ4bAGf59SG1kEZ2cxD0Uc6yDm4Rxz 8DkWYPpkzAo1/rTSZfpQAwwNu9BFEbxvGYKKpT/A1npSvV3vPhkJ/s7BczcX82OG INj6u3q357CwICqop6BcyuJYmLiDX6stq+BbAbenNaH77Kgcy+RXJ+FQCiY/sd3k QNfTFBf1sZ9o4YU3vjOANSUuwJ9VM6TaijIDoGuLvsAIkeWQ0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEShfFXVFkvfLDYw3dC97fiZH+k5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjg0MTFlODUtOWUzZC0z NDk4LTgzNzktNjI3MDY2NjhiZWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8OYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbH/+lSFJ8tt2bPnFkncgRVzae7HIogBmf4O1M3EN9VSN/eepoTtFRs BsyOTkIWBptdFm4Iohkm02giPiKk97zuVq2rG5hCSmqh8NXHY7PSfD6sbdRum9Yh lCVjMUDO2hqW2fS985rHdmG7d9VEZhjEcjRDIoCe3XsVm5d26QoUdE/rN23wvvR8 ewrT+2O+QNVelR8quuZEpUWVSYuAvzLgMszKAk1uQnHmSrc4Of1QYIgfueQpjZdf +PR6R9iVMO8j4eFYGz4P6ZTGeYRCLZ9RXpttNMczZdlBZ1pYpB9Bl0ZdiBlCxXpU rbI4v0rUnqhz/tP2MoJ4UGNNCqM5EXY= -----END CERTIFICATE-----Generated at Mon Oct 20 04:18:31 2025 by rpki-client