$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80edd5d2-fe42-3ba1-a700-4674847c470c.roa File: 80edd5d2-fe42-3ba1-a700-4674847c470c.roa (raw, json) Hash identifier: ovvHng6lywrV4M8icxHf8yJNPM1cq+sBoB+PihupjF8= Subject key identifier: 3B:03:C0:89:F9:F4:8C:87:BE:C7:8A:69:B9:8D:51:3E:D5:DD:53:A7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2FC1AC5D714979994FDDB700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80edd5d2-fe42-3ba1-a700-4674847c470c.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.197.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:ac:5d:71:49:79:99:4f:dd:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=fff7b99d-b623-4c2a-8a33-2c3c0d1fbf5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:53:40:e6:6e:81:a4:74:c9:7c:46:55:6a:eb: 31:cd:f3:3c:c4:e0:2a:d0:c3:0c:30:70:1d:45:07: 55:d2:f5:df:c5:c4:5c:1a:c1:3c:70:97:48:59:e5: 39:10:1d:4a:3c:64:43:c9:3c:93:bc:9c:56:73:d0: ca:59:55:75:6d:fb:7a:58:37:71:02:ce:77:9e:76: 52:b2:e5:07:37:e9:fd:c4:c3:05:8f:91:ba:26:cb: 5b:b2:9a:1c:47:03:19:dd:a8:36:71:79:2f:d1:8b: 56:d5:80:fa:17:1d:64:9e:fd:ad:69:14:09:34:b7: 33:68:29:e7:07:20:bd:f3:47:5a:8f:08:f1:74:63: 42:10:25:00:04:20:03:30:cd:74:8a:ab:c2:d1:b5: d4:aa:46:36:d5:b4:97:39:ff:ad:d4:e0:0f:a2:08: 56:35:45:0e:54:6b:f3:d2:b1:49:ba:d4:27:d2:77: fc:d2:a4:1a:a4:72:bd:39:41:20:12:05:88:b8:85: a1:4a:06:84:db:a7:80:71:71:07:99:c3:01:e5:de: f0:27:24:a8:15:3b:d8:45:60:8b:b6:7a:be:f8:cd: 8b:37:61:8d:75:28:37:89:fd:9c:45:36:66:e4:9b: 61:c9:b2:07:81:77:66:f9:46:8d:0a:0a:d4:c0:35: a9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:03:C0:89:F9:F4:8C:87:BE:C7:8A:69:B9:8D:51:3E:D5:DD:53:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80edd5d2-fe42-3ba1-a700-4674847c470c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:bf:ba:b0:be:8a:bc:12:81:86:90:e4:02:a0:e4:15:5b:63: 6a:0d:b5:66:0f:70:2e:6f:5f:66:a7:e0:a8:b2:db:fb:d0:e7: d2:91:53:76:a1:96:b0:9e:b0:99:7d:2a:88:c0:56:d1:32:c3: b1:5c:8d:94:19:53:d9:b0:12:ee:a3:c9:19:d5:36:72:a0:cd: 56:c1:c8:77:5f:43:6f:18:d0:37:fc:f1:d8:9b:22:dc:0d:f1: c8:c0:6e:61:79:5a:c1:d2:22:12:7e:8e:34:b7:53:96:72:1f: c9:d3:62:59:03:2f:19:dc:27:68:ec:92:39:48:4e:d3:67:20: 0f:63:3c:95:88:19:0d:d9:7b:80:37:d4:df:17:b1:d6:2d:c0: 97:9d:7e:e1:d1:09:ed:94:ab:f5:3b:58:ca:aa:6a:12:6e:1c: c5:f1:42:5c:6b:9d:e1:a3:a8:a5:2e:93:ee:a5:8b:81:dd:9f: dc:05:8e:61:57:6c:fb:62:c4:36:e6:b5:13:ff:a0:32:68:89: e9:45:8b:37:2a:23:7e:c3:bb:87:24:a5:d4:8c:e7:f5:1a:e2: ec:18:c9:9a:f0:11:be:4e:08:e1:06:d5:74:91:ad:0a:45:9c: 44:7f:af:79:5b:9e:df:77:51:5e:fd:7f:c1:02:13:c1:b2:40: 06:9a:dd:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwaxdcUl5mU/dtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk ZmZmN2I5OWQtYjYyMy00YzJhLThhMzMtMmMzYzBkMWZiZjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1NA5m6BpHTJfEZVausxzfM8xOAq0MMMMHAd RQdV0vXfxcRcGsE8cJdIWeU5EB1KPGRDyTyTvJxWc9DKWVV1bft6WDdxAs53nnZS suUHN+n9xMMFj5G6JstbspocRwMZ3ag2cXkv0YtW1YD6Fx1knv2taRQJNLczaCnn ByC980dajwjxdGNCECUABCADMM10iqvC0bXUqkY21bSXOf+t1OAPoghWNUUOVGvz 0rFJutQn0nf80qQapHK9OUEgEgWIuIWhSgaE26eAcXEHmcMB5d7wJySoFTvYRWCL tnq++M2LN2GNdSg3if2cRTZm5JthybIHgXdm+UaNCgrUwDWpRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsDwIn59IyHvseKabmNUT7V3VOnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODBlZGQ1ZDItZmU0Mi0z YmExLWE3MDAtNDY3NDg0N2M0NzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8UMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACW/urC+irwSgYaQ5AKg5BVbY2oNtWYPcC5vX2an4Kiy2/vQ59KRU3ah lrCesJl9KojAVtEyw7FcjZQZU9mwEu6jyRnVNnKgzVbByHdfQ28Y0Df88dibItwN 8cjAbmF5WsHSIhJ+jjS3U5ZyH8nTYlkDLxncJ2jskjlITtNnIA9jPJWIGQ3Ze4A3 1N8XsdYtwJedfuHRCe2Uq/U7WMqqahJuHMXxQlxrneGjqKUuk+6li4Hdn9wFjmFX bPtixDbmtRP/oDJoielFizcqI37Du4ckpdSM5/Ua4uwYyZrwEb5OCOEG1XSRrQpF nER/r3lbnt93UV79f8ECE8GyQAaa3Z0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:23:30 2025 by rpki-client