$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a74cac3-831b-34a3-8538-4f3fc3d5d3a2.roa File: 8a74cac3-831b-34a3-8538-4f3fc3d5d3a2.roa (raw, json) Hash identifier: zSIJOoo5adcxmVr9nfCPRsf9PgH3F6MbKvI1N3FLFlg= Subject key identifier: F7:0B:69:41:EB:EC:9F:C5:9B:01:BD:40:90:A2:F1:E5:34:A1:FE:43 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B328C4643FC846AC47D0F0680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a74cac3-831b-34a3-8538-4f3fc3d5d3a2.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.202.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:46:43:fc:84:6a:c4:7d:0f:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=b6c78e91-90f7-407d-848a-bf62a510e4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:04:a4:ef:75:03:c2:b0:a7:7b:7b:0a:08:16: 71:68:53:77:8e:29:0e:11:21:a1:f0:df:c2:3d:94: 18:4c:8b:4f:24:ac:bd:e2:17:ab:45:c0:6a:e7:86: 24:0e:29:e3:3e:14:71:15:06:2d:7f:1c:ae:bb:44: ed:47:45:8e:9f:40:8b:7f:d9:23:75:5e:23:95:60: 44:b3:ae:0d:da:91:89:05:a9:5a:fc:e6:5c:53:3b: 8b:3e:95:94:d3:ff:35:79:e6:e1:85:51:f7:ff:1e: 93:74:aa:21:85:3f:fb:f1:3e:36:58:4e:a0:a6:85: 66:97:3c:1a:4a:97:1a:b5:fd:02:4a:20:14:2f:2d: bf:31:8f:00:36:16:84:91:b8:93:92:8c:b9:cf:1f: 20:d4:fd:98:54:77:2b:bf:00:0c:28:09:be:6f:12: fa:4f:22:d7:e6:b8:48:c7:7f:df:4f:8e:96:70:da: 09:ef:8c:ba:f2:63:de:f0:9b:a2:df:84:b6:ce:5d: c3:40:e1:85:31:b0:c9:38:9f:05:f0:8d:0b:77:ae: 9d:ae:28:59:d0:1a:dc:3f:0e:ac:c4:96:d9:26:59: 62:6f:ad:38:5a:18:ef:c7:82:59:fb:59:e5:54:83: b2:37:8d:21:5e:e5:02:06:03:0d:8c:63:91:70:0b: 59:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0B:69:41:EB:EC:9F:C5:9B:01:BD:40:90:A2:F1:E5:34:A1:FE:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a74cac3-831b-34a3-8538-4f3fc3d5d3a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:77:5e:66:dd:ef:58:18:9c:06:20:ba:29:7d:5b:ec:b0:ba: a5:ee:2e:0f:a2:35:80:4d:f5:35:02:72:84:d8:99:f2:7f:c7: 76:f0:ba:d4:68:70:80:c5:63:7b:c8:6c:d7:76:6d:ad:0c:b3: 95:53:a3:a7:65:d3:95:5d:03:9d:b3:0f:ff:26:98:3e:bf:b1: 4a:65:9e:c3:9a:d4:db:6f:95:e3:89:05:ce:8a:4c:5c:31:49: a2:74:03:66:83:a8:6e:ce:fc:5e:93:8d:b1:c1:4a:46:26:55: b4:8c:e2:f6:fc:19:f8:67:f7:e6:87:f1:cf:c1:50:c8:03:49: 68:49:fa:2f:78:b6:98:57:fc:7b:f0:d4:e5:13:27:a7:83:a2: 8f:e1:d3:e1:69:25:2a:92:6b:6c:c7:6c:43:39:aa:f4:a4:66: bd:6b:36:e6:ac:8d:1d:f1:64:07:f5:90:91:a5:02:2a:56:23: 44:a6:2d:20:b4:28:92:6c:c2:42:ac:4b:ae:1d:f9:d0:bc:b1: f3:39:6e:e7:ad:fa:c0:e1:9d:5d:74:52:26:e3:5d:80:a6:76: b5:05:4e:fc:55:1f:cc:00:79:f1:34:39:ad:db:2c:94:21:e0: b5:94:b0:b1:d8:72:f8:89:00:ab:cb:47:80:f8:76:fd:16:ba: 4a:34:ca:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjEZD/IRqxH0PBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk YjZjNzhlOTEtOTBmNy00MDdkLTg0OGEtYmY2MmE1MTBlNGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgSk73UDwrCne3sKCBZxaFN3jikOESGh8N/C PZQYTItPJKy94herRcBq54YkDinjPhRxFQYtfxyuu0TtR0WOn0CLf9kjdV4jlWBE s64N2pGJBala/OZcUzuLPpWU0/81eebhhVH3/x6TdKohhT/78T42WE6gpoVmlzwa Spcatf0CSiAULy2/MY8ANhaEkbiTkoy5zx8g1P2YVHcrvwAMKAm+bxL6TyLX5rhI x3/fT46WcNoJ74y68mPe8Jui34S2zl3DQOGFMbDJOJ8F8I0Ld66drihZ0BrcPw6s xJbZJllib604Whjvx4JZ+1nlVIOyN40hXuUCBgMNjGORcAtZWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcLaUHr7J/FmwG9QJCi8eU0of5DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGE3NGNhYzMtODMxYi0z NGEzLTg1MzgtNGYzZmMzZDVkM2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8osMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACN3Xmbd71gYnAYguil9W+ywuqXuLg+iNYBN9TUCcoTYmfJ/x3bwutRo cIDFY3vIbNd2ba0Ms5VTo6dl05VdA52zD/8mmD6/sUplnsOa1NtvleOJBc6KTFwx SaJ0A2aDqG7O/F6TjbHBSkYmVbSM4vb8Gfhn9+aH8c/BUMgDSWhJ+i94tphX/Hvw 1OUTJ6eDoo/h0+FpJSqSa2zHbEM5qvSkZr1rNuasjR3xZAf1kJGlAipWI0SmLSC0 KJJswkKsS64d+dC8sfM5buet+sDhnV10UibjXYCmdrUFTvxVH8wAefE0Oa3bLJQh 4LWUsLHYcviJAKvLR4D4dv0Wuko0ynU= -----END CERTIFICATE-----Generated at Mon Oct 20 00:28:14 2025 by rpki-client