$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b8a8cda-8690-35a3-9929-fd524c6e5cf9.roa File: 8b8a8cda-8690-35a3-9929-fd524c6e5cf9.roa (raw, json) Hash identifier: BTpeE6V7wUjMOo6NH7GLpNte7C03rEwvtszazZp9f20= Subject key identifier: DF:6F:0D:57:50:84:A1:5A:BA:E8:A0:76:F2:35:95:BB:4E:BF:D8:1C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B477C93F94300DD7EF9113440 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b8a8cda-8690-35a3-9929-fd524c6e5cf9.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 20940 IP address blocks: 23.201.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:93:f9:43:00:dd:7e:f9:11:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=54954bbd-f6c4-4b74-a576-02dc201ddf3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2c:3b:d3:7b:35:1b:40:90:0e:f0:1b:40:e5: a5:80:65:5a:c5:12:41:ed:05:ad:e7:e0:11:0c:97: 32:47:27:23:9c:3b:9d:49:e9:e2:61:2c:4f:08:aa: 01:f7:f4:32:52:10:aa:38:cc:a6:a2:e9:ab:84:fb: 82:bc:97:27:0a:0a:9f:19:1f:18:e9:ea:77:90:fd: 33:80:2c:ad:62:bd:e9:18:cf:b8:d3:ac:06:e4:6a: b1:6e:57:58:71:55:5c:f5:c9:b5:3e:42:91:aa:72: 01:10:71:0d:78:c4:14:37:7c:1d:b5:68:cf:11:26: c7:7b:00:ab:3f:66:a1:38:98:ab:7e:88:16:46:70: 90:54:1b:b6:e7:5b:f9:ed:7f:a9:94:94:1b:d5:90: 6b:2c:77:d9:23:d6:21:91:e5:63:dd:13:64:d4:c2: 9e:e5:00:d2:1e:9c:22:cc:ef:77:2f:37:dc:72:78: 00:62:b2:c9:f5:12:1f:7e:8a:22:31:21:c3:e9:eb: af:be:d3:81:f4:b2:45:f6:e5:bc:6c:52:9c:d9:65: c4:55:de:de:ca:dd:9c:8a:34:ca:12:a4:cb:3e:d9: a6:91:13:ef:cf:19:0a:0a:b2:ab:70:a3:c0:60:ad: f3:c0:49:30:02:cc:a0:71:9b:0a:02:c2:03:4f:f8: ba:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6F:0D:57:50:84:A1:5A:BA:E8:A0:76:F2:35:95:BB:4E:BF:D8:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b8a8cda-8690-35a3-9929-fd524c6e5cf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:97:af:7b:cd:93:4a:b8:ef:10:75:83:91:70:39:e6:5d:30: 1e:e9:14:72:fd:99:fb:e0:37:c3:ad:af:12:4f:a7:a3:15:b3: 6c:63:3f:35:10:aa:fb:13:79:c3:68:eb:07:f9:3b:a9:03:54: de:73:cd:87:db:ed:08:9a:e6:cc:65:47:79:85:d2:4e:58:7e: 29:18:80:11:6d:7f:f1:31:10:09:fd:47:5b:64:f8:ed:9a:be: 4b:ff:3f:bc:90:5f:a7:46:fb:90:be:23:90:a2:ee:63:1a:d2: f7:66:85:57:37:04:1f:08:bb:fc:e8:e3:90:62:11:fc:35:33: b2:9a:f9:d6:21:83:ec:32:fd:cf:11:5d:62:6f:fd:ce:a2:56: 1b:c2:16:95:4a:ec:74:a4:20:33:7c:6b:3f:60:e6:1e:a1:a5: 80:41:ea:2e:2b:6c:02:76:cb:75:4d:69:03:79:04:50:38:fa: 34:0b:53:79:9e:09:8e:53:a3:df:d3:48:8a:1e:0b:eb:05:45: ba:54:bd:b2:8f:64:12:ff:85:3e:93:97:83:36:26:03:2b:17: 46:a8:fb:d8:d6:2c:89:1d:3f:db:83:b7:83:0a:1a:cc:8b:7d: 96:b7:05:36:fd:55:fe:46:64:d5:8e:39:24:40:f8:0d:4a:3e: 40:35:e6:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfJP5QwDdfvkRNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk NTQ5NTRiYmQtZjZjNC00Yjc0LWE1NzYtMDJkYzIwMWRkZjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Cw703s1G0CQDvAbQOWlgGVaxRJB7QWt5+AR DJcyRycjnDudSeniYSxPCKoB9/QyUhCqOMymoumrhPuCvJcnCgqfGR8Y6ep3kP0z gCytYr3pGM+406wG5GqxbldYcVVc9cm1PkKRqnIBEHENeMQUN3wdtWjPESbHewCr P2ahOJirfogWRnCQVBu251v57X+plJQb1ZBrLHfZI9YhkeVj3RNk1MKe5QDSHpwi zO93LzfccngAYrLJ9RIffooiMSHD6euvvtOB9LJF9uW8bFKc2WXEVd7eyt2cijTK EqTLPtmmkRPvzxkKCrKrcKPAYK3zwEkwAsygcZsKAsIDT/i6lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9vDVdQhKFauuigdvI1lbtOv9gcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGI4YThjZGEtODY5MC0z NWEzLTk5MjktZmQ1MjRjNmU1Y2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8ktMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuXr3vNk0q47xB1g5FwOeZdMB7pFHL9mfvgN8OtrxJPp6MVs2xjPzUQ qvsTecNo6wf5O6kDVN5zzYfb7Qia5sxlR3mF0k5YfikYgBFtf/ExEAn9R1tk+O2a vkv/P7yQX6dG+5C+I5Ci7mMa0vdmhVc3BB8Iu/zo45BiEfw1M7Ka+dYhg+wy/c8R XWJv/c6iVhvCFpVK7HSkIDN8az9g5h6hpYBB6i4rbAJ2y3VNaQN5BFA4+jQLU3me CY5To9/TSIoeC+sFRbpUvbKPZBL/hT6Tl4M2JgMrF0ao+9jWLIkdP9uDt4MKGsyL fZa3BTb9Vf5GZNWOOSRA+A1KPkA15so= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:17 2025 by rpki-client