$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c588837b-ecec-34e5-9a02-6b872078d923.roa File: c588837b-ecec-34e5-9a02-6b872078d923.roa (raw, json) Hash identifier: 4LbDTfWG9zGYK5KMRZVCWDyahey3RVAOBEioaNwarms= Subject key identifier: C7:DE:1B:04:16:FA:1B:1D:3D:CB:D9:C0:19:40:2C:4A:A4:0E:D1:3E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B434C768EE6662E0010474B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c588837b-ecec-34e5-9a02-6b872078d923.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.197.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:76:8e:e6:66:2e:00:10:47:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=7d1e2d69-11f9-49e8-a197-a777f4fdc591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e4:cf:22:75:fe:97:d2:be:1a:bb:f8:65:64: 97:27:15:ec:c8:22:50:f3:0b:99:44:7d:25:0a:f1: d8:3b:dc:be:bb:29:ed:cc:a2:ea:d7:20:f4:06:f6: 16:2b:33:fe:73:5e:59:6d:c8:00:de:18:b1:64:0a: 97:5f:88:c5:d4:9a:19:4a:cd:73:2c:40:29:cd:40: 00:43:9c:97:75:f4:44:95:60:b5:98:f2:33:d2:42: 94:48:06:e5:ea:27:1f:78:88:f3:ce:e6:2d:5e:5e: f9:75:02:dd:6f:bf:b9:45:f9:fd:7a:c2:9e:e2:25: 5e:2a:3c:07:79:33:b2:ff:82:a6:fb:08:a7:88:6f: 6b:df:d0:67:96:07:2a:dd:e7:71:4d:ab:e3:d2:95: 8e:16:56:24:aa:5c:8b:e4:3b:a2:0a:e6:a2:1d:a1: c7:47:32:8b:00:2d:8e:1a:45:8f:b2:2a:65:b9:64: 98:0e:16:ff:50:07:73:c1:98:7d:53:02:e2:e7:2f: 95:67:8b:a8:cd:e6:44:10:f7:e3:8e:ae:53:4b:7c: f2:39:b5:8b:15:83:79:14:7b:e0:96:a2:ec:c7:15: fa:16:65:00:9f:fc:20:20:61:53:b6:f9:ba:8b:9d: 91:28:fa:bf:1d:bf:6e:f3:27:e7:03:f3:d7:2f:ad: ea:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DE:1B:04:16:FA:1B:1D:3D:CB:D9:C0:19:40:2C:4A:A4:0E:D1:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c588837b-ecec-34e5-9a02-6b872078d923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:55:14:48:4a:1e:74:20:47:5a:72:83:11:40:9c:83:7b:d1: 63:62:c8:db:2a:ad:6b:d6:e7:a9:9e:77:17:02:55:a5:08:8a: 48:9f:35:89:f0:f5:9a:0b:48:82:4e:4e:fc:bb:5f:c6:7f:91: 61:b8:d5:12:2f:6b:b0:75:6c:9d:03:0e:e6:90:58:2d:28:54: c7:41:27:e5:56:f5:c3:4d:e8:05:5b:e0:1b:04:7e:2a:63:0b: 6d:3f:f5:c4:4a:5a:b3:27:dd:18:85:b7:c5:d7:7b:88:9a:5f: 78:08:e4:c0:ba:eb:13:8f:04:f3:29:ad:5c:91:46:bc:4d:93: 8d:ce:ea:8f:bf:3e:02:d4:15:3c:0f:d1:bb:3e:4e:4c:88:f8: e1:c6:42:ad:34:ef:29:4d:49:34:1c:98:e1:a4:b2:bd:43:5a: 80:7d:16:b7:1f:cc:97:96:1a:34:b7:16:25:0a:a6:c6:8d:7e: b5:d4:68:31:88:08:d6:c1:ae:15:4e:f6:e8:4e:ac:80:a1:7f: 3f:40:5e:89:39:08:a7:59:80:89:69:9c:c4:6e:1a:6a:22:d3: a9:06:ca:cc:1b:07:e2:18:7f:a9:c3:ca:d8:f9:ea:14:07:67: a6:aa:4d:a6:57:57:d8:05:4d:41:92:d9:02:74:c9:5b:52:7d: e8:a9:f7:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTHaO5mYuABBHSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk N2QxZTJkNjktMTFmOS00OWU4LWExOTctYTc3N2Y0ZmRjNTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguTPInX+l9K+Grv4ZWSXJxXsyCJQ8wuZRH0l CvHYO9y+uyntzKLq1yD0BvYWKzP+c15ZbcgA3hixZAqXX4jF1JoZSs1zLEApzUAA Q5yXdfRElWC1mPIz0kKUSAbl6icfeIjzzuYtXl75dQLdb7+5Rfn9esKe4iVeKjwH eTOy/4Km+winiG9r39Bnlgcq3edxTavj0pWOFlYkqlyL5DuiCuaiHaHHRzKLAC2O GkWPsipluWSYDhb/UAdzwZh9UwLi5y+VZ4uozeZEEPfjjq5TS3zyObWLFYN5FHvg lqLsxxX6FmUAn/wgIGFTtvm6i52RKPq/Hb9u8yfnA/PXL63qgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfeGwQW+hsdPcvZwBlALEqkDtE+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzU4ODgzN2ItZWNlYy0z NGU1LTlhMDItNmI4NzIwNzhkOTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8XPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdVFEhKHnQgR1pygxFAnIN70WNiyNsqrWvW56medxcCVaUIikifNYnw 9ZoLSIJOTvy7X8Z/kWG41RIva7B1bJ0DDuaQWC0oVMdBJ+VW9cNN6AVb4BsEfipj C20/9cRKWrMn3RiFt8XXe4iaX3gI5MC66xOPBPMprVyRRrxNk43O6o+/PgLUFTwP 0bs+TkyI+OHGQq007ylNSTQcmOGksr1DWoB9FrcfzJeWGjS3FiUKpsaNfrXUaDGI CNbBrhVO9uhOrIChfz9AXok5CKdZgIlpnMRuGmoi06kGyswbB+IYf6nDytj56hQH Z6aqTaZXV9gFTUGS2QJ0yVtSfeip97A= -----END CERTIFICATE-----Generated at Mon Oct 20 18:07:06 2025 by rpki-client