$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9ee21dd-8971-3caf-aada-5528dda5b951.roa File: a9ee21dd-8971-3caf-aada-5528dda5b951.roa (raw, json) Hash identifier: XxKQMakrP5S/poa5Zc/n/I34TqoCINb/vEdvqhNZdxg= Subject key identifier: 5E:5B:07:06:0F:48:B3:5F:11:1C:E7:BF:F8:57:D4:57:26:DB:8E:71 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B72C1F122D4342724A88C6380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9ee21dd-8971-3caf-aada-5528dda5b951.roa Signing time: Wed 08 Oct 2025 01:00:29 +0000 ROA not before: Wed 08 Oct 2025 01:00:29 +0000 ROA not after: Tue 06 Jan 2026 02:00:29 +0000 asID: 20940 IP address blocks: 23.210.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:c1:f1:22:d4:34:27:24:a8:8c:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 8 01:00:29 2025 GMT Not After : Jan 6 02:00:29 2026 GMT Subject: CN=ec13e238-b8fb-4ba7-a2b8-0ef54d6cc8fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8f:d7:ee:71:2c:ca:38:e4:5d:5a:b2:4e:c7: da:68:6b:e0:12:a1:1b:18:05:57:ac:cc:65:25:0c: 4b:ac:62:06:65:de:80:08:03:91:f3:53:0f:66:ad: 39:42:36:80:b9:33:86:75:ff:a7:e3:67:ed:83:6b: 42:70:f4:b5:87:6e:c3:1d:7d:fa:15:6d:0b:2c:b4: d9:e0:48:6e:07:bf:73:35:51:cd:40:f9:ad:64:87: 92:c4:1d:fc:31:7c:59:bf:22:ed:a9:b3:42:8b:f6: 3b:57:d9:b9:a0:5c:fc:38:93:1c:33:8b:5f:ff:28: de:ba:01:c3:4b:9f:86:75:c3:c4:dd:c3:bf:4b:79: 4a:62:31:56:bb:a2:0b:9e:6b:44:90:de:94:fe:4d: 3d:c7:4e:f8:f1:86:30:f5:99:1d:cd:d3:f9:91:57: 1b:37:c7:dd:25:83:13:aa:a3:fb:1a:c1:71:d5:60: a4:00:11:3b:43:08:99:ff:fd:ab:c3:84:51:f0:c1: f2:9e:25:8f:ba:60:09:02:1e:c7:a3:07:73:50:ae: e9:96:d3:85:56:49:ad:2c:96:39:42:9c:bb:c2:e2: e6:de:ca:90:cb:dd:3c:6f:54:aa:a2:57:45:62:94: 99:9a:56:84:bc:41:27:06:33:da:d2:31:bf:4b:30: a2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5B:07:06:0F:48:B3:5F:11:1C:E7:BF:F8:57:D4:57:26:DB:8E:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9ee21dd-8971-3caf-aada-5528dda5b951.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:52:cf:40:81:49:76:2c:52:28:44:9c:48:80:cd:9d:d9:23: 5b:a7:7d:b1:4f:be:b5:5d:51:26:44:7f:a5:cf:87:ed:08:cf: 3c:a7:c6:52:4c:2b:7f:ca:a2:53:5c:07:d7:42:b0:36:20:72: aa:eb:5d:9a:d7:72:42:f3:29:1b:90:bc:1c:d3:4b:43:01:4d: 59:c2:ac:a5:02:31:e0:4a:2f:0c:39:52:f9:81:e9:3f:f2:95: e5:ef:fd:09:dc:4e:e7:95:8b:10:a4:c6:e5:57:33:70:0e:e1: 6e:e4:a9:14:b1:87:59:62:a5:bf:c2:71:a9:f9:de:3f:9f:99: 66:ea:2d:97:d3:57:47:83:3e:80:a5:47:a7:a1:4f:4f:34:e4: 19:7e:8b:f5:b6:67:22:92:15:5d:4a:d6:7e:32:c6:77:f5:12: f6:22:5e:b6:97:37:82:7b:bc:45:55:e0:d9:d5:07:e3:f5:ba: 35:15:72:1b:78:e2:81:fd:16:53:bb:37:2e:02:30:32:3f:79: 53:27:a9:12:ec:37:39:a8:ad:49:a6:e3:02:a8:b5:fc:69:d6: 38:20:36:0e:96:1c:64:e0:5d:e5:b2:50:0a:02:77:15:1e:1e: cf:e9:c4:71:f6:3c:53:f6:fe:e0:48:6f:70:4a:c6:95:80:66: a6:9e:0b:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtywfEi1DQnJKiMY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwODAxMDAyOVoXDTI2MDEwNjAyMDAyOVowLzEtMCsGA1UEAxMk ZWMxM2UyMzgtYjhmYi00YmE3LWEyYjgtMGVmNTRkNmNjOGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI/X7nEsyjjkXVqyTsfaaGvgEqEbGAVXrMxl JQxLrGIGZd6ACAOR81MPZq05QjaAuTOGdf+n42ftg2tCcPS1h27DHX36FW0LLLTZ 4EhuB79zNVHNQPmtZIeSxB38MXxZvyLtqbNCi/Y7V9m5oFz8OJMcM4tf/yjeugHD S5+GdcPE3cO/S3lKYjFWu6ILnmtEkN6U/k09x0748YYw9ZkdzdP5kVcbN8fdJYMT qqP7GsFx1WCkABE7QwiZ//2rw4RR8MHyniWPumAJAh7HowdzUK7pltOFVkmtLJY5 Qpy7wuLm3sqQy908b1SqoldFYpSZmlaEvEEnBjPa0jG/SzCizwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5bBwYPSLNfERznv/hX1Fcm245xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTllZTIxZGQtODk3MS0z Y2FmLWFhZGEtNTUyOGRkYTViOTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9IHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5Sz0CBSXYsUihEnEiAzZ3ZI1unfbFPvrVdUSZEf6XPh+0IzzynxlJM K3/KolNcB9dCsDYgcqrrXZrXckLzKRuQvBzTS0MBTVnCrKUCMeBKLww5UvmB6T/y leXv/QncTueVixCkxuVXM3AO4W7kqRSxh1lipb/Ccan53j+fmWbqLZfTV0eDPoCl R6ehT0805Bl+i/W2ZyKSFV1K1n4yxnf1EvYiXraXN4J7vEVV4NnVB+P1ujUVcht4 4oH9FlO7Ny4CMDI/eVMnqRLsNzmorUmm4wKotfxp1jggNg6WHGTgXeWyUAoCdxUe Hs/pxHH2PFP2/uBIb3BKxpWAZqaeCyc= -----END CERTIFICATE-----Generated at Mon Oct 20 02:36:31 2025 by rpki-client