$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac0ffe25-28e8-3911-8f92-699fd713acad.roa File: ac0ffe25-28e8-3911-8f92-699fd713acad.roa (raw, json) Hash identifier: 8heFBjqbN+dXgkaNVpt29OflrZYT7k7mcwnxitMwvgY= Subject key identifier: AA:33:BC:80:6C:60:99:0A:F0:D8:92:34:2C:F2:80:B5:3C:FC:13:D9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B477C98CFFC84497D3F9B4EC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac0ffe25-28e8-3911-8f92-699fd713acad.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 20940 IP address blocks: 23.200.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:98:cf:fc:84:49:7d:3f:9b:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=7e52c490-6ea4-42ba-bdce-fbbb6a6af793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:60:4f:9d:8d:7d:37:cd:71:1b:df:ea:36:8c: 20:ae:b7:22:04:6e:fc:e2:f6:9f:d7:02:30:88:9e: e8:1c:f5:90:76:69:5d:62:b8:fa:1e:8f:0e:8a:4d: 30:e1:11:55:d1:3c:24:67:55:c3:84:e6:ac:90:e5: d4:92:42:7c:a9:3b:0a:11:18:ae:8f:16:31:3d:0d: 82:05:b3:c8:78:1a:aa:59:7f:28:7b:51:4f:65:bf: aa:9b:c4:fa:39:8b:8b:0e:f9:77:ae:24:7d:7e:30: 5c:e7:18:6a:51:7e:88:4b:4e:2c:ba:ff:d4:c4:b4: 60:4f:34:77:e9:40:bf:39:5f:ed:60:9f:25:41:49: be:03:22:10:49:1f:a0:92:f7:dc:85:6d:15:b0:3e: 73:8d:db:e9:93:48:d2:ca:d9:bd:06:54:04:a4:59: f2:8b:04:25:0b:00:43:22:82:e9:c6:ce:5b:9b:e4: 88:1e:48:66:21:a1:24:11:17:d7:d6:dd:20:5d:e2: 47:e9:5b:99:e8:c2:1c:be:c6:5b:c2:2a:98:36:00: 2e:23:5a:9b:45:95:3f:0f:a3:2e:02:45:a7:65:73: a1:01:2f:da:99:74:df:b4:41:3c:1f:c1:87:cd:57: 9f:b6:01:c6:33:a9:8f:a4:a4:c2:71:dd:64:ba:b6: 96:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:33:BC:80:6C:60:99:0A:F0:D8:92:34:2C:F2:80:B5:3C:FC:13:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac0ffe25-28e8-3911-8f92-699fd713acad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:4c:14:ed:3e:a7:31:db:53:65:6b:5a:a0:8e:a6:84:78:a3: ca:d3:54:9d:d3:0e:d0:6b:49:a0:14:3b:91:0f:67:94:bf:fd: bc:5d:f8:5b:41:ab:8a:39:38:8f:e5:a9:62:76:c1:cb:8f:81: 7c:b5:8d:d0:de:c6:de:3b:f5:c0:ee:6c:f2:42:e6:f9:93:56: 5f:42:29:c2:9d:5f:b9:f4:f8:05:40:89:fe:e5:ce:8d:45:98: 1b:61:5e:54:d9:c4:d8:33:d4:59:4d:94:21:d4:de:4a:2f:2a: 3a:61:be:d3:fa:3f:03:e3:4c:36:b3:93:a8:76:03:dc:15:ec: 79:1b:b3:3a:39:a9:62:5f:f0:9e:71:6d:61:4a:e3:60:8b:69: 1b:60:ac:24:90:17:c6:e9:85:53:7c:a2:7a:27:bb:be:d0:c4: 74:0a:ed:3a:05:5e:09:a0:b2:70:38:a7:e8:65:0a:f7:53:19: d7:17:63:4d:06:9b:42:3f:8b:ac:c7:c2:ed:d0:b2:45:cb:aa: 17:d3:eb:2f:8b:36:51:ea:54:2c:de:45:ff:d3:71:c5:a8:5c: fc:18:d1:64:00:54:68:c5:b0:53:6c:6b:f7:7a:91:98:18:34: 44:3a:b9:49:e3:91:a0:62:22:a4:bd:30:93:fb:a1:87:29:6a: 55:c5:a4:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfJjP/IRJfT+bTsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk N2U1MmM0OTAtNmVhNC00MmJhLWJkY2UtZmJiYjZhNmFmNzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGBPnY19N81xG9/qNowgrrciBG784vaf1wIw iJ7oHPWQdmldYrj6Ho8Oik0w4RFV0TwkZ1XDhOaskOXUkkJ8qTsKERiujxYxPQ2C BbPIeBqqWX8oe1FPZb+qm8T6OYuLDvl3riR9fjBc5xhqUX6IS04suv/UxLRgTzR3 6UC/OV/tYJ8lQUm+AyIQSR+gkvfchW0VsD5zjdvpk0jSytm9BlQEpFnyiwQlCwBD IoLpxs5bm+SIHkhmIaEkERfX1t0gXeJH6VuZ6MIcvsZbwiqYNgAuI1qbRZU/D6Mu AkWnZXOhAS/amXTftEE8H8GHzVeftgHGM6mPpKTCcd1kuraW1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKozvIBsYJkK8NiSNCzygLU8/BPZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWMwZmZlMjUtMjhlOC0z OTExLThmOTItNjk5ZmQ3MTNhY2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8hIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5MFO0+pzHbU2VrWqCOpoR4o8rTVJ3TDtBrSaAUO5EPZ5S//bxd+FtB q4o5OI/lqWJ2wcuPgXy1jdDext479cDubPJC5vmTVl9CKcKdX7n0+AVAif7lzo1F mBthXlTZxNgz1FlNlCHU3kovKjphvtP6PwPjTDazk6h2A9wV7Hkbszo5qWJf8J5x bWFK42CLaRtgrCSQF8bphVN8ononu77QxHQK7ToFXgmgsnA4p+hlCvdTGdcXY00G m0I/i6zHwu3QskXLqhfT6y+LNlHqVCzeRf/TccWoXPwY0WQAVGjFsFNsa/d6kZgY NEQ6uUnjkaBiIqS9MJP7oYcpalXFpNI= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:00 2025 by rpki-client