$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c50b095d-9127-3fdf-9018-684535ee2f7c.roa File: c50b095d-9127-3fdf-9018-684535ee2f7c.roa (raw, json) Hash identifier: F3f81mdrDij0PQ2c/telnK1higGCbvz7HDVqLNRTLBY= Subject key identifier: 78:B2:42:73:86:62:C1:94:39:C3:90:55:D9:24:7C:02:79:8E:EF:E6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B715CD7E9B4FC443030E825C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c50b095d-9127-3fdf-9018-684535ee2f7c.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 16625 IP address blocks: 23.210.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:d7:e9:b4:fc:44:30:30:e8:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=ade68c3f-0519-4cad-8e66-59bdc76d008a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c6:fa:c4:8a:1d:33:26:59:d8:52:5b:a0:e7: bb:44:53:d1:76:c3:d0:bb:43:35:74:24:80:0b:4b: a8:14:97:27:1e:dc:54:03:cb:0f:29:45:7f:5f:5f: 9c:39:89:b6:9e:61:c8:68:e3:f7:ca:91:5e:d1:36: 82:ef:1d:c7:06:7c:a9:21:0a:47:a7:50:25:7b:ed: a0:a0:ba:64:cd:92:d9:b6:14:f0:ec:e8:8a:a2:2d: ee:36:1c:2f:84:8f:c1:5f:a1:5a:40:a1:57:bb:b5: 1e:a6:92:05:38:0c:ce:8c:34:92:c3:5d:35:56:f1: b7:a4:a4:23:71:ff:23:b0:15:36:1c:fa:3b:d2:ab: 75:6a:b5:9c:b3:d8:73:28:07:67:85:fe:a6:88:04: 1b:0b:68:ff:dc:df:01:3a:c7:a0:8d:7c:0f:4a:ba: cf:60:20:63:26:35:3f:e6:44:2d:ed:16:2a:74:c3: 73:a8:5a:3d:7c:cd:76:3a:39:33:1c:7a:ec:20:83: 80:2d:bc:1b:de:ce:c5:bb:c1:0f:6a:a1:9b:a8:93: f6:df:ce:bb:30:79:62:12:4d:5a:94:7d:e6:83:c4: 85:39:0d:0b:8a:76:ba:1f:12:76:d3:b5:0d:fd:c9: c1:3c:46:1a:a4:1b:cd:64:0d:8a:ef:39:df:74:c5: 1f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B2:42:73:86:62:C1:94:39:C3:90:55:D9:24:7C:02:79:8E:EF:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c50b095d-9127-3fdf-9018-684535ee2f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:e9:ed:ac:b9:9e:23:8b:d8:3b:32:7a:8d:2c:0b:1e:8d:49: 25:73:b8:94:09:1b:a3:59:7f:c7:7f:a2:b9:1b:f7:5c:2c:a0: 12:42:95:dd:04:c4:70:68:7d:e5:e7:c0:08:ce:87:e8:92:8f: 0b:15:e6:42:f3:e2:9b:e1:97:5c:51:19:6a:2f:12:a8:02:d4: f5:a3:62:5a:e4:ce:7b:4f:e8:2c:d5:fa:7a:29:97:30:55:c9: e6:89:c9:71:31:dc:99:a4:e0:0e:32:bf:80:bf:fc:48:91:8a: 6e:23:42:9d:b5:9f:73:70:fe:1a:42:bd:1a:f5:92:4e:b5:3b: 97:da:bf:f1:63:6a:3a:ab:86:59:77:63:31:01:51:be:a4:27: a0:94:e0:42:d1:6a:2c:4b:5a:96:9f:5e:ba:bf:e5:f5:81:5f: 90:e8:99:ea:ce:c6:ab:8b:fb:f7:a6:c7:d7:4a:72:17:f3:f0: db:6f:48:64:2f:0b:2c:23:72:81:a6:7f:e2:9f:96:9e:f8:ae: 9c:69:4c:29:33:31:76:66:92:e4:12:4a:97:e1:a5:69:66:22: 5c:bc:4a:01:0a:3e:95:66:15:1c:ec:c3:8e:10:66:4a:bd:1b: a3:c3:69:68:c1:92:9b:b9:b1:96:b9:a0:2c:de:23:1e:e2:68: c9:f9:05:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXNfptPxEMDDoJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YWRlNjhjM2YtMDUxOS00Y2FkLThlNjYtNTliZGM3NmQwMDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMb6xIodMyZZ2FJboOe7RFPRdsPQu0M1dCSA C0uoFJcnHtxUA8sPKUV/X1+cOYm2nmHIaOP3ypFe0TaC7x3HBnypIQpHp1Ale+2g oLpkzZLZthTw7OiKoi3uNhwvhI/BX6FaQKFXu7UeppIFOAzOjDSSw101VvG3pKQj cf8jsBU2HPo70qt1arWcs9hzKAdnhf6miAQbC2j/3N8BOsegjXwPSrrPYCBjJjU/ 5kQt7RYqdMNzqFo9fM12OjkzHHrsIIOALbwb3s7Fu8EPaqGbqJP23867MHliEk1a lH3mg8SFOQ0Lina6HxJ207UN/cnBPEYapBvNZA2K7znfdMUfQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHiyQnOGYsGUOcOQVdkkfAJ5ju/mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzUwYjA5NWQtOTEyNy0z ZmRmLTkwMTgtNjg0NTM1ZWUyZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9IcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXp7ay5niOL2Dsyeo0sCx6NSSVzuJQJG6NZf8d/orkb91wsoBJCld0E xHBofeXnwAjOh+iSjwsV5kLz4pvhl1xRGWovEqgC1PWjYlrkzntP6CzV+noplzBV yeaJyXEx3Jmk4A4yv4C//EiRim4jQp21n3Nw/hpCvRr1kk61O5fav/Fjajqrhll3 YzEBUb6kJ6CU4ELRaixLWpafXrq/5fWBX5DomerOxquL+/emx9dKchfz8NtvSGQv CywjcoGmf+Kflp74rpxpTCkzMXZmkuQSSpfhpWlmIly8SgEKPpVmFRzsw44QZkq9 G6PDaWjBkpu5sZa5oCzeIx7iaMn5Bbo= -----END CERTIFICATE-----Generated at Mon Oct 20 09:56:40 2025 by rpki-client