$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/904bf9c4-3d6f-3503-bce9-b69b2a79fa4d.roa File: 904bf9c4-3d6f-3503-bce9-b69b2a79fa4d.roa (raw, json) Hash identifier: Yn4qcShfrVENJovShYdJb9+OiQvSL+Ewa0KDZvPDc1k= Subject key identifier: 38:B1:8B:2A:E7:01:49:44:11:43:16:6D:E6:5F:63:05:45:96:18:87 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B477C95613CFA479907C81A40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/904bf9c4-3d6f-3503-bce9-b69b2a79fa4d.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 16625 IP address blocks: 23.201.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:95:61:3c:fa:47:99:07:c8:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=2f86c523-22bb-439f-860b-ccea20eb86b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:77:d5:bf:33:ba:53:0e:83:82:96:e2:4d:65: d9:40:1d:9c:9a:32:31:cf:94:24:e1:1c:ce:a6:7a: 01:6e:55:6e:59:7e:07:fa:b5:49:4f:e9:83:a5:eb: b7:a8:9b:98:f7:ce:1c:5d:ae:7a:b0:0d:8a:e7:dc: cf:fc:7a:e4:02:25:a9:37:20:52:57:4b:1d:fd:e5: bd:f2:64:10:65:b7:e4:e1:87:d3:5f:dd:dc:04:a7: 64:65:90:24:3c:f7:f5:7c:a2:2f:23:67:03:e5:3b: 79:67:f9:2b:e0:82:51:41:fd:e4:4a:14:29:74:ba: 80:ff:41:ed:81:54:61:8b:e9:be:95:bd:de:4f:45: 14:2f:9e:8f:aa:eb:07:04:1a:2a:dc:23:1b:ae:64: 87:a9:63:47:a9:06:6a:d7:5e:cc:c9:c2:a6:43:6e: fa:70:fd:ab:9b:a5:20:28:96:b6:99:85:b6:8d:6f: 0e:e4:12:8f:19:99:cb:95:8e:56:33:be:c7:3d:2b: 3b:91:eb:ce:f1:76:36:90:2d:29:06:78:ec:73:4d: aa:76:f6:be:ae:73:e0:26:36:c2:df:a2:af:10:56: df:39:2c:24:75:8d:14:20:91:8d:fc:1d:13:22:aa: 4c:ac:a8:fa:69:3d:42:f9:01:15:e1:84:a6:de:48: f2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B1:8B:2A:E7:01:49:44:11:43:16:6D:E6:5F:63:05:45:96:18:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/904bf9c4-3d6f-3503-bce9-b69b2a79fa4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:a5:04:8e:c9:1e:e6:5d:cd:5a:ce:36:76:9a:1b:04:33:c5: 93:8b:5f:bf:93:72:16:a8:1f:2a:f2:7e:4f:8d:7f:1f:d2:ae: 34:01:27:de:e1:be:3f:83:7f:b6:62:77:95:0e:0a:30:84:c9: 3f:6a:5f:f3:88:83:39:3a:d5:2f:87:8d:98:6b:0d:d4:c9:be: 1a:32:8d:fb:2c:46:6a:3c:7e:47:f5:10:d9:f2:1c:ba:27:3e: 5a:e7:0e:36:4d:6b:8b:a7:71:38:51:ac:00:7a:29:9f:b6:c3: 16:9f:67:6d:16:9a:76:39:4f:bf:97:49:ba:c5:bf:65:b6:33: dd:a2:08:e9:f8:c3:d4:52:a2:d1:0c:98:d8:1f:2b:a7:92:ac: a9:70:fc:8b:44:d6:84:2a:07:2c:82:09:4a:18:df:d4:5b:92: 7a:27:8e:95:ce:78:67:b4:6d:14:f5:13:6c:2b:26:09:17:c9: e6:b6:e2:b7:fd:b2:9e:1b:0a:51:a1:9c:db:fc:8b:12:cb:9f: 09:ac:86:ba:ee:a0:da:b7:d5:05:19:dd:92:28:49:5c:2c:2c: ed:d8:65:15:9a:60:a3:0f:84:78:d3:31:fb:d8:e4:3d:ee:70: b4:7f:17:a0:82:0c:08:68:65:93:cb:b1:51:b2:d1:f5:0f:0d: d2:66:46:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfJVhPPpHmQfIGkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk MmY4NmM1MjMtMjJiYi00MzlmLTg2MGItY2NlYTIwZWI4NmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XfVvzO6Uw6DgpbiTWXZQB2cmjIxz5Qk4RzO pnoBblVuWX4H+rVJT+mDpeu3qJuY984cXa56sA2K59zP/HrkAiWpNyBSV0sd/eW9 8mQQZbfk4YfTX93cBKdkZZAkPPf1fKIvI2cD5Tt5Z/kr4IJRQf3kShQpdLqA/0Ht gVRhi+m+lb3eT0UUL56PqusHBBoq3CMbrmSHqWNHqQZq117MycKmQ276cP2rm6Ug KJa2mYW2jW8O5BKPGZnLlY5WM77HPSs7kevO8XY2kC0pBnjsc02qdva+rnPgJjbC 36KvEFbfOSwkdY0UIJGN/B0TIqpMrKj6aT1C+QEV4YSm3kjyDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDixiyrnAUlEEUMWbeZfYwVFlhiHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTA0YmY5YzQtM2Q2Zi0z NTAzLWJjZTktYjY5YjJhNzlmYTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF8mAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJClBI7JHuZdzVrONnaaGwQzxZOLX7+TchaoHyryfk+Nfx/SrjQBJ97h vj+Df7Zid5UOCjCEyT9qX/OIgzk61S+HjZhrDdTJvhoyjfssRmo8fkf1ENnyHLon PlrnDjZNa4uncThRrAB6KZ+2wxafZ20WmnY5T7+XSbrFv2W2M92iCOn4w9RSotEM mNgfK6eSrKlw/ItE1oQqByyCCUoY39RbknonjpXOeGe0bRT1E2wrJgkXyea24rf9 sp4bClGhnNv8ixLLnwmshrruoNq31QUZ3ZIoSVwsLO3YZRWaYKMPhHjTMfvY5D3u cLR/F6CCDAhoZZPLsVGy0fUPDdJmRjA= -----END CERTIFICATE-----Generated at Mon Oct 20 04:57:27 2025 by rpki-client