$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87929612-bcbe-3cd7-b635-f1d289884be4.roa File: 87929612-bcbe-3cd7-b635-f1d289884be4.roa (raw, json) Hash identifier: Fe2F22abtDov4IrLhq2WPX9ktt0K8khyuVkVcLxO4wY= Subject key identifier: 5C:3F:60:A5:F3:21:5C:81:5D:96:62:03:63:C0:A1:D2:D3:2B:F9:57 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B3556FA601611E4AA58969900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87929612-bcbe-3cd7-b635-f1d289884be4.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.223.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:fa:60:16:11:e4:aa:58:96:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=03fd349b-9fb8-4f63-b5db-e645846ff6a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8d:d0:28:09:a9:8e:fb:91:ca:ed:58:f4:36: 7a:67:17:43:43:9b:61:af:43:5b:1c:44:53:dd:11: 65:f6:dc:b9:2a:a1:5d:08:81:2a:8e:33:59:b7:73: 7d:13:e2:56:84:2f:e9:43:e2:76:1a:99:f1:ed:b3: 70:e8:2d:e4:42:a3:a2:5e:37:f9:06:ac:e5:9d:88: 1f:16:ea:19:54:41:2e:43:23:06:b8:72:ff:de:6d: b9:5c:46:73:b8:be:8a:1a:10:61:56:14:e0:c3:c6: bd:48:66:7a:90:88:07:55:76:be:dd:09:47:19:90: 22:49:ff:88:1f:ae:aa:f2:4b:74:bb:a1:bd:4c:cc: ec:4b:98:6e:53:df:ad:43:e8:a6:2d:b5:f0:fb:ad: b0:f6:1e:01:c7:90:87:6c:6c:f0:4e:de:f2:80:8e: 85:c6:f7:88:86:de:26:5b:67:c7:0b:d5:5b:63:75: 89:ac:48:4c:18:a3:a5:26:04:ac:5a:cb:19:57:c2: d3:23:de:aa:d7:c7:45:f5:b0:70:a9:9e:30:4c:18: 32:58:5a:5c:4b:7e:9d:3b:3f:12:cc:82:0c:c6:4e: 0d:8b:1f:08:7a:f5:d1:81:20:cb:09:72:54:a8:57: 6a:92:db:bf:c3:35:6e:14:37:b1:60:4e:eb:bf:92: b8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:3F:60:A5:F3:21:5C:81:5D:96:62:03:63:C0:A1:D2:D3:2B:F9:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87929612-bcbe-3cd7-b635-f1d289884be4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:28:8f:e1:90:b3:43:2d:fd:c4:f5:2b:8f:94:71:5b:45:cc: ce:96:62:b4:47:5a:94:86:cf:81:2e:65:92:f7:3f:64:00:f5: ce:da:b2:5d:6c:ec:0e:d7:21:d0:65:3e:66:64:a7:e9:5f:a1: 7c:70:bc:74:08:16:0c:fb:04:6b:33:8e:c3:de:e3:07:82:07: 4b:15:29:58:38:01:1f:de:d0:0c:ba:7c:1c:ed:78:9d:2e:a5: fd:37:c9:63:3e:30:0c:ce:7c:7c:66:b1:cc:2b:e2:0e:21:89: 12:21:0a:46:d2:66:76:18:9e:1a:30:05:69:9c:7a:87:d0:bd: 15:ed:4b:1d:83:a1:ee:ea:b2:94:f1:a2:83:98:3f:c9:6d:38: 62:d7:6b:18:36:88:14:41:a2:47:19:c5:06:8b:c6:6b:20:92: ed:5d:32:8a:c2:d6:5c:1d:e3:f1:fc:fc:5c:2f:1a:de:27:98: 0b:82:da:95:09:90:01:5d:b8:92:68:50:30:b0:89:cb:43:de: 7a:8a:51:6d:d4:0b:d4:72:c3:c6:4d:17:7d:80:da:31:98:ba: 44:0d:50:93:d1:2a:bb:57:82:46:a4:6f:13:5e:77:f4:d1:51: dc:5e:6a:07:e0:74:89:02:73:0f:c5:89:3b:53:87:39:26:e4: ec:78:f9:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VvpgFhHkqliWmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk MDNmZDM0OWItOWZiOC00ZjYzLWI1ZGItZTY0NTg0NmZmNmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI3QKAmpjvuRyu1Y9DZ6ZxdDQ5thr0NbHERT 3RFl9ty5KqFdCIEqjjNZt3N9E+JWhC/pQ+J2Gpnx7bNw6C3kQqOiXjf5BqzlnYgf FuoZVEEuQyMGuHL/3m25XEZzuL6KGhBhVhTgw8a9SGZ6kIgHVXa+3QlHGZAiSf+I H66q8kt0u6G9TMzsS5huU9+tQ+imLbXw+62w9h4Bx5CHbGzwTt7ygI6FxveIht4m W2fHC9VbY3WJrEhMGKOlJgSsWssZV8LTI96q18dF9bBwqZ4wTBgyWFpcS36dOz8S zIIMxk4Nix8IevXRgSDLCXJUqFdqktu/wzVuFDexYE7rv5K44wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFw/YKXzIVyBXZZiA2PAodLTK/lXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODc5Mjk2MTItYmNiZS0z Y2Q3LWI2MzUtZjFkMjg5ODg0YmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF98rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0oj+GQs0Mt/cT1K4+UcVtFzM6WYrRHWpSGz4EuZZL3P2QA9c7asl1s 7A7XIdBlPmZkp+lfoXxwvHQIFgz7BGszjsPe4weCB0sVKVg4AR/e0Ay6fBzteJ0u pf03yWM+MAzOfHxmscwr4g4hiRIhCkbSZnYYnhowBWmceofQvRXtSx2Doe7qspTx ooOYP8ltOGLXaxg2iBRBokcZxQaLxmsgku1dMorC1lwd4/H8/FwvGt4nmAuC2pUJ kAFduJJoUDCwictD3nqKUW3UC9Ryw8ZNF32A2jGYukQNUJPRKrtXgkakbxNed/TR UdxeagfgdIkCcw/FiTtThzkm5Ox4+Xo= -----END CERTIFICATE-----Generated at Mon Oct 20 02:54:36 2025 by rpki-client