$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/769e33f2-962b-3a0a-bd8e-e3cbc8708bdc.roa File: 769e33f2-962b-3a0a-bd8e-e3cbc8708bdc.roa (raw, json) Hash identifier: SGVJj6KzJZ2dNN5Sp1FIvYr3HXB+NxZKNIb2lLxuh+Y= Subject key identifier: AE:A3:C8:9C:23:C0:3E:CB:09:F0:0F:8B:B2:05:54:6C:14:43:EF:0D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E202FC8AABCA5F766CB700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/769e33f2-962b-3a0a-bd8e-e3cbc8708bdc.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.202.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:02:fc:8a:ab:ca:5f:76:6c:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=cd3714ff-20ab-4e32-bfb2-c08d30dad4f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:42:69:fe:77:3a:b5:4f:e1:97:5e:e7:fd:15: f7:4d:7b:c3:7e:e6:d2:40:4c:59:fc:4e:a9:dd:71: b7:73:57:d0:ab:a4:81:5b:db:e6:73:f8:7d:88:2d: 4a:26:26:e2:67:c0:08:9b:c5:0f:1b:86:7a:d3:10: 1c:ee:8f:94:b2:6f:51:59:08:24:7c:b4:30:37:82: f9:bb:90:00:8f:10:ba:63:a6:50:3d:0f:9b:ea:75: 8c:32:15:1c:70:1a:fd:83:0e:74:e0:b3:b2:47:3b: 5e:99:42:bd:9d:6f:05:b0:99:bb:5e:ad:93:85:a0: e7:9a:78:a4:60:b4:5e:9e:5d:6a:74:f0:e0:c3:1e: c4:7f:22:81:62:4e:ee:04:1e:50:39:01:d8:e1:e3: 0d:a1:11:7a:01:fb:95:de:13:1a:b4:69:81:da:7e: 02:72:72:fe:d6:8a:00:27:a2:70:4d:d4:55:11:b6: fa:95:16:90:68:b8:fb:a4:7b:7a:ea:00:e2:6a:7d: 1d:91:65:a5:73:f0:ba:34:14:3f:a4:e7:62:11:c7: e3:33:40:16:17:96:14:45:35:62:42:48:3c:34:23: 8f:cb:56:a3:c2:7d:0b:a6:c5:b0:06:ed:77:94:f0: a9:b5:60:77:ad:88:25:e3:d8:17:cb:fc:f4:66:91: df:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A3:C8:9C:23:C0:3E:CB:09:F0:0F:8B:B2:05:54:6C:14:43:EF:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/769e33f2-962b-3a0a-bd8e-e3cbc8708bdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:ea:6d:88:07:48:57:04:c2:c8:3b:b2:ab:15:13:57:1d:4b: 44:72:04:00:30:78:54:d1:95:7e:54:f0:71:0e:81:3a:b1:ab: ec:7d:b6:35:0e:12:42:7f:2f:66:bc:e8:f0:d8:d2:90:1e:26: f1:f2:8e:53:0c:6c:ee:ba:a9:2c:dc:85:2b:48:23:6d:84:29: fe:56:cc:b9:5d:2e:b5:2a:57:77:7b:00:dd:6e:fd:c9:bb:bf: aa:95:aa:c1:6f:ee:b3:58:95:a0:ee:9c:c1:19:1b:42:f7:60: 73:70:d1:64:48:be:c0:3a:95:57:68:0f:05:be:c3:e4:f9:89: 34:58:bf:83:45:5f:2c:1c:9d:1e:50:18:85:53:03:ed:da:7d: b4:b9:ea:af:89:2c:21:77:1b:0d:02:a7:25:21:27:64:fd:44: e4:f9:97:08:a7:9e:af:1c:c2:0b:9a:92:8b:af:d4:9b:2a:7f: 44:9a:a3:25:a0:06:30:2a:7e:fe:87:e7:b8:ee:72:22:33:07: fd:59:72:fe:30:da:1d:52:b1:33:94:f7:25:db:ff:d9:b1:e5: 9c:1d:11:8a:66:62:78:dc:0c:07:41:d4:88:bf:d6:c5:c1:4f: 76:af:9f:49:fb:e9:2d:25:0a:0b:02:43:af:ee:f1:f5:4d:ae: b2:7c:f4:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4gL8iqvKX3ZstwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk Y2QzNzE0ZmYtMjBhYi00ZTMyLWJmYjItYzA4ZDMwZGFkNGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUJp/nc6tU/hl17n/RX3TXvDfubSQExZ/E6p 3XG3c1fQq6SBW9vmc/h9iC1KJibiZ8AIm8UPG4Z60xAc7o+Usm9RWQgkfLQwN4L5 u5AAjxC6Y6ZQPQ+b6nWMMhUccBr9gw504LOyRztemUK9nW8FsJm7Xq2ThaDnmnik YLRenl1qdPDgwx7EfyKBYk7uBB5QOQHY4eMNoRF6AfuV3hMatGmB2n4CcnL+1ooA J6JwTdRVEbb6lRaQaLj7pHt66gDian0dkWWlc/C6NBQ/pOdiEcfjM0AWF5YURTVi Qkg8NCOPy1ajwn0LpsWwBu13lPCptWB3rYgl49gXy/z0ZpHfBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6jyJwjwD7LCfAPi7IFVGwUQ+8NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzY5ZTMzZjItOTYyYi0z YTBhLWJkOGUtZTNjYmM4NzA4YmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8qAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXqbYgHSFcEwsg7sqsVE1cdS0RyBAAweFTRlX5U8HEOgTqxq+x9tjUO EkJ/L2a86PDY0pAeJvHyjlMMbO66qSzchStII22EKf5WzLldLrUqV3d7AN1u/cm7 v6qVqsFv7rNYlaDunMEZG0L3YHNw0WRIvsA6lVdoDwW+w+T5iTRYv4NFXywcnR5Q GIVTA+3afbS56q+JLCF3Gw0CpyUhJ2T9ROT5lwinnq8cwguakouv1Jsqf0SaoyWg BjAqfv6H57juciIzB/1Zcv4w2h1SsTOU9yXb/9mx5ZwdEYpmYnjcDAdB1Ii/1sXB T3avn0n76S0lCgsCQ6/u8fVNrrJ89KA= -----END CERTIFICATE-----Generated at Mon Oct 20 20:32:58 2025 by rpki-client