$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3fbe237-d2d5-3ca5-b2ea-31ab22a8cae2.roa File: b3fbe237-d2d5-3ca5-b2ea-31ab22a8cae2.roa (raw, json) Hash identifier: x0hcGeg6Yo+YE7gIfMJE6R0my925/nEAyl/Ybg+NE1g= Subject key identifier: 44:78:00:78:DF:0E:CA:E9:24:33:EB:20:18:41:90:B1:72:0F:8F:71 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AFEE6C38CAD3D2AABE87D7080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3fbe237-d2d5-3ca5-b2ea-31ab22a8cae2.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.197.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:c3:8c:ad:3d:2a:ab:e8:7d:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=79c5555b-73e5-4f90-b1bf-4ba2b763004c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2a:34:db:5d:f3:e7:cf:bd:99:63:69:bb:9d: 86:88:98:65:35:ef:be:32:0b:47:76:58:a7:97:00: 8d:bb:9c:47:d1:45:96:1a:cc:64:12:1c:90:ac:c5: 84:4c:ad:b4:89:48:44:8a:8e:71:c9:f6:cf:c4:61: ba:df:f0:9a:d4:20:2b:83:a3:4a:78:a1:3b:d0:d9: 45:8d:df:46:59:e0:91:4b:b6:e2:7d:93:00:be:0f: a8:2d:f0:7a:5f:a7:da:30:25:5e:21:79:16:b4:40: 54:f8:85:72:91:69:d0:53:46:4e:b9:0e:ba:c1:66: 13:e1:c9:3e:ab:0f:e2:60:3d:02:c5:48:52:fd:84: 46:3e:b3:1f:75:34:c4:d2:65:73:07:7c:f3:9e:ab: ec:31:12:96:e5:12:17:b2:9c:6a:97:d5:fe:13:2e: 2d:0b:d0:5a:91:92:c1:67:91:92:50:87:60:ca:48: f6:c4:0f:f3:69:56:3d:22:d0:06:5c:1c:d0:1d:46: 15:3c:05:a5:74:fb:be:ef:9a:a7:4e:17:ab:4a:d9: ea:65:ae:89:bc:d8:d5:bd:02:c6:10:55:f8:8f:90: 5e:03:d7:74:fa:d9:e5:65:31:9a:0e:59:31:b7:cd: 55:25:8f:bc:c0:43:eb:4a:11:97:ed:79:78:e8:8a: c8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:78:00:78:DF:0E:CA:E9:24:33:EB:20:18:41:90:B1:72:0F:8F:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3fbe237-d2d5-3ca5-b2ea-31ab22a8cae2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:82:68:ea:81:9e:05:9b:cc:e8:db:0f:96:1d:96:63:83:6e: 13:1a:30:48:26:14:61:60:f9:e2:e2:b1:ce:ab:17:bc:0e:aa: 4a:0d:c1:ff:45:5c:5e:82:70:8f:45:57:8c:58:86:8f:7c:ba: 5c:51:fd:dd:50:55:a8:a2:f6:1e:4a:4a:f5:c5:2b:1f:3e:00: 4d:ae:e4:51:2b:40:aa:cf:e5:75:2b:0e:8a:3a:e9:bd:87:a2: 1e:54:da:a3:9e:79:57:12:51:fa:25:63:e0:29:9f:18:c7:c9: a5:c2:f0:5f:59:8c:25:c4:3f:d4:d8:eb:71:18:d0:ba:79:4e: c1:d2:9b:aa:bb:11:fa:dd:bf:bb:fc:89:a1:66:79:84:86:c9: e7:cd:f6:e7:30:7c:2c:c3:62:14:d6:85:6c:62:18:68:77:33: 3b:69:9b:20:92:b8:c1:f3:9a:6f:06:e3:94:b9:c1:e7:45:a7: eb:6a:d3:73:71:23:e5:4b:97:65:b0:08:1e:d7:64:3c:df:2e: cb:da:83:8c:df:26:68:2b:83:db:1c:87:94:ae:b2:67:a0:41: 76:fd:b2:ea:44:93:cc:1f:84:6d:c6:00:c1:cf:75:cb:e1:f6: 93:55:78:d9:d0:8d:f2:34:5a:5a:e9:5e:a6:8e:24:2d:36:98: 79:a5:4d:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5sOMrT0qq+h9cIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk NzljNTU1NWItNzNlNS00ZjkwLWIxYmYtNGJhMmI3NjMwMDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgio0213z58+9mWNpu52GiJhlNe++MgtHdlin lwCNu5xH0UWWGsxkEhyQrMWETK20iUhEio5xyfbPxGG63/Ca1CArg6NKeKE70NlF jd9GWeCRS7bifZMAvg+oLfB6X6faMCVeIXkWtEBU+IVykWnQU0ZOuQ66wWYT4ck+ qw/iYD0CxUhS/YRGPrMfdTTE0mVzB3zznqvsMRKW5RIXspxql9X+Ey4tC9BakZLB Z5GSUIdgykj2xA/zaVY9ItAGXBzQHUYVPAWldPu+75qnTherStnqZa6JvNjVvQLG EFX4j5BeA9d0+tnlZTGaDlkxt81VJY+8wEPrShGX7Xl46IrIowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFER4AHjfDsrpJDPrIBhBkLFyD49xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjNmYmUyMzctZDJkNS0z Y2E1LWIyZWEtMzFhYjIyYThjYWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8XcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6CaOqBngWbzOjbD5YdlmODbhMaMEgmFGFg+eLisc6rF7wOqkoNwf9F XF6CcI9FV4xYho98ulxR/d1QVaii9h5KSvXFKx8+AE2u5FErQKrP5XUrDoo66b2H oh5U2qOeeVcSUfolY+ApnxjHyaXC8F9ZjCXEP9TY63EY0Lp5TsHSm6q7Efrdv7v8 iaFmeYSGyefN9ucwfCzDYhTWhWxiGGh3MztpmyCSuMHzmm8G45S5wedFp+tq03Nx I+VLl2WwCB7XZDzfLsvag4zfJmgrg9sch5SusmegQXb9supEk8wfhG3GAMHPdcvh 9pNVeNnQjfI0WlrpXqaOJC02mHmlTcM= -----END CERTIFICATE-----Generated at Mon Oct 20 04:57:38 2025 by rpki-client