$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7663d8f2-3503-3f87-b215-9c337ed2f12e.roa File: 7663d8f2-3503-3f87-b215-9c337ed2f12e.roa (raw, json) Hash identifier: tG6+DLn4QyIksVeEgSPHfHYXO9JmVQbwk2+cTfZotXY= Subject key identifier: B1:A8:F4:C6:A3:17:8E:2C:EC:76:2F:DC:27:10:27:A3:7B:CE:96:EE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B328C49498E44645A7E8A2200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7663d8f2-3503-3f87-b215-9c337ed2f12e.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.210.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:49:49:8e:44:64:5a:7e:8a:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=b3c2bc61-d356-4f17-bca0-0819c61414d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:58:68:44:4d:07:58:04:94:0b:e6:52:90:cb: e1:e4:67:b3:66:2a:65:bc:b1:da:ba:8f:76:6b:0b: 0c:2c:ba:a9:46:af:98:8a:82:ba:87:6a:84:8d:1e: cf:ce:56:b6:bd:58:f7:60:30:59:8c:f9:3d:b0:92: 08:b3:cb:ff:7d:63:28:c3:35:62:35:31:69:70:8b: 98:16:36:16:62:ee:15:d9:9b:8b:9c:0f:4d:fc:be: d3:9a:15:b9:f2:41:86:ed:bc:47:7c:4a:1e:21:4c: cc:ba:86:be:b7:11:3b:5d:ca:f4:e8:d3:fc:41:9d: c6:23:62:d4:db:81:35:f7:0e:45:dd:66:dd:a1:c0: 77:d1:b8:45:25:15:8b:bb:05:a0:04:02:ff:91:36: 17:e2:01:0f:b5:4d:49:33:bc:cc:ee:8d:4d:7e:e5: 7e:ab:1b:05:31:c6:0e:6c:98:31:a1:b2:6d:bd:09: 24:d9:53:28:c4:47:1f:0e:a0:21:d3:cd:be:2c:18: 19:5f:26:64:00:07:03:2b:e1:30:ea:10:f2:8a:01: 1e:22:db:7b:5d:4c:19:45:2b:bd:bb:4b:e6:63:6c: 84:26:ad:81:3e:3d:c0:ec:b4:87:0a:34:cd:36:f8: 67:bf:a3:b1:cc:de:0f:cf:67:66:db:ad:0e:de:52: 1e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A8:F4:C6:A3:17:8E:2C:EC:76:2F:DC:27:10:27:A3:7B:CE:96:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7663d8f2-3503-3f87-b215-9c337ed2f12e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:bc:2d:2b:e5:1a:68:72:d1:a6:cd:5e:65:8d:dc:3a:37:f8: cd:d2:be:0e:f3:b3:aa:fb:89:59:dc:41:6a:ce:d5:e6:ac:f2: 6e:ad:1a:16:86:23:b3:0e:49:b5:d3:15:64:e6:f4:56:d3:41: 4f:22:0c:c3:dd:c6:18:29:18:31:12:f5:a8:eb:18:45:27:99: 33:c7:69:99:e2:8f:e0:4f:b6:00:be:b5:ac:fb:f2:6a:e8:4c: 85:84:e9:8b:b4:77:10:8d:9b:00:53:c8:af:a6:f6:07:f7:5f: 16:fd:16:75:39:a4:de:d5:a9:aa:b3:96:4f:f5:05:5e:af:9b: c2:0f:69:c9:9f:e2:a5:53:df:e2:db:c7:a4:ae:7f:eb:3c:ca: 90:ee:cd:96:2d:05:0f:05:87:f7:36:9b:08:26:18:c2:53:20: 74:8b:5d:df:48:60:2b:f9:f0:10:12:dc:05:45:b9:c6:9e:ba: 46:63:8f:f8:66:0c:c9:bc:0b:de:f0:54:32:36:63:ab:85:dd: 2f:12:d5:31:86:28:d0:4d:d5:f0:6d:37:5c:6f:01:a1:52:2f: ed:3c:fe:21:d9:d6:a8:c0:ea:81:1f:98:64:93:c8:19:66:7c: a9:b3:6c:2a:67:cf:1c:25:18:b5:6c:e9:c4:f5:33:30:38:c7: 44:d4:61:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjElJjkRkWn6KIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk YjNjMmJjNjEtZDM1Ni00ZjE3LWJjYTAtMDgxOWM2MTQxNGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFhoRE0HWASUC+ZSkMvh5GezZiplvLHauo92 awsMLLqpRq+YioK6h2qEjR7Pzla2vVj3YDBZjPk9sJIIs8v/fWMowzViNTFpcIuY FjYWYu4V2ZuLnA9N/L7TmhW58kGG7bxHfEoeIUzMuoa+txE7Xcr06NP8QZ3GI2LU 24E19w5F3WbdocB30bhFJRWLuwWgBAL/kTYX4gEPtU1JM7zM7o1NfuV+qxsFMcYO bJgxobJtvQkk2VMoxEcfDqAh082+LBgZXyZkAAcDK+Ew6hDyigEeItt7XUwZRSu9 u0vmY2yEJq2BPj3A7LSHCjTNNvhnv6OxzN4Pz2dm260O3lIefwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGo9MajF44s7HYv3CcQJ6N7zpbuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzY2M2Q4ZjItMzUwMy0z Zjg3LWIyMTUtOWMzMzdlZDJmMTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9IwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAa8LSvlGmhy0abNXmWN3Do3+M3Svg7zs6r7iVncQWrO1eas8m6tGhaG I7MOSbXTFWTm9FbTQU8iDMPdxhgpGDES9ajrGEUnmTPHaZnij+BPtgC+taz78mro TIWE6Yu0dxCNmwBTyK+m9gf3Xxb9FnU5pN7Vqaqzlk/1BV6vm8IPacmf4qVT3+Lb x6Suf+s8ypDuzZYtBQ8Fh/c2mwgmGMJTIHSLXd9IYCv58BAS3AVFucaeukZjj/hm DMm8C97wVDI2Y6uF3S8S1TGGKNBN1fBtN1xvAaFSL+08/iHZ1qjA6oEfmGSTyBlm fKmzbCpnzxwlGLVs6cT1MzA4x0TUYUI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:34:22 2025 by rpki-client