$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce7fe275-ce58-37db-991e-b5b62a0c6795.roa File: ce7fe275-ce58-37db-991e-b5b62a0c6795.roa (raw, json) Hash identifier: X5Cqe5+RsU9a9PtoRJ2YXhmIdc6T2Xeli9ssW3Qq60w= Subject key identifier: E4:85:20:7F:C5:ED:D1:DA:AA:8E:8F:94:E5:72:B8:E3:7E:A1:BF:EC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B434C8C5F0B80CA9306AFB630 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce7fe275-ce58-37db-991e-b5b62a0c6795.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.197.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:8c:5f:0b:80:ca:93:06:af:b6:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=288af7ea-e788-4d58-b2cc-ad8e133f11c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c3:89:fb:ac:d2:17:bf:22:39:55:a0:09:3e: 63:f3:1b:ba:48:7b:12:e0:f1:cb:c9:b0:9d:6d:8d: 94:c8:31:3c:4e:3b:39:75:85:fb:c4:8f:a1:ff:73: 30:e9:b5:54:ea:1c:44:c4:6a:8b:e4:cf:c0:90:d1: f3:da:6d:1b:92:f1:2f:c8:ef:ef:68:d5:c6:2d:a5: d7:e8:bb:c1:5a:3b:55:46:72:1e:72:61:70:c7:97: 64:51:98:8f:6a:ae:c9:3d:02:0d:1d:69:68:b8:4e: d5:e7:25:ac:04:b6:ef:c2:f8:1a:c9:25:a3:39:fc: 2b:02:5c:1d:d3:89:3b:83:30:19:48:28:f5:60:4b: 51:87:46:3e:92:a4:55:d8:6f:31:f2:2b:d8:fb:8d: e2:ab:6f:db:ee:01:a3:b1:3b:fa:f5:5f:3d:b6:3a: 04:8d:98:d7:ce:99:35:1f:dd:70:cc:15:e5:6f:a4: 63:cc:c2:9d:2a:0a:e3:32:44:69:2f:af:f0:d7:9d: a1:ec:03:e0:96:ab:98:68:44:1f:b9:16:0c:46:3d: 32:0a:68:cc:c1:46:72:7c:f3:82:f6:a6:97:23:8c: 07:73:e5:9f:ba:fe:4a:05:6f:c4:9d:29:f2:6f:bf: 6a:11:66:66:d0:19:83:fd:2d:22:c5:85:7d:c3:d0: 5b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:85:20:7F:C5:ED:D1:DA:AA:8E:8F:94:E5:72:B8:E3:7E:A1:BF:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce7fe275-ce58-37db-991e-b5b62a0c6795.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:6d:08:4e:9e:f2:d7:1e:60:28:64:58:2e:f0:c8:a2:80:92: 41:9f:eb:54:22:54:31:cf:7d:69:98:66:7e:d8:f5:03:17:88: f2:3b:8a:55:5a:69:58:87:1e:a4:7a:48:5d:36:27:5f:7a:0f: e1:b6:03:6b:27:16:8f:55:d8:69:91:86:a8:ff:9d:16:25:2b: 1d:df:45:af:e6:9a:c2:ff:29:6e:42:92:bb:09:48:c5:d7:41: 1c:fd:50:67:aa:4e:4a:cc:c3:bb:d0:4a:d2:b7:9b:75:e9:fe: 3d:17:3f:00:f4:18:12:bf:7a:cf:c3:da:f6:b3:ea:d7:31:a8: 1d:6b:a9:0a:76:a2:1f:9c:06:44:47:ef:0f:e5:c2:09:24:66: 5b:e6:fb:b3:55:55:a9:50:e4:46:ba:a9:18:06:67:89:24:39: 6c:1a:7f:1e:d6:e4:07:3b:f2:4e:58:9d:7a:a9:f4:95:bf:a6: 86:5a:23:69:b0:99:d1:d3:c8:6f:25:81:cd:18:fd:52:a5:b8: 8f:be:da:af:27:94:b3:f4:62:74:f8:3f:3e:8a:6d:10:56:9e: 57:5b:72:ef:8b:eb:0a:89:6b:ff:b7:f0:c7:ea:c6:73:e4:b6: 2f:f2:82:2c:ca:8a:8c:15:9e:4a:b9:05:8f:f3:87:06:85:bf: 9e:82:fc:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTIxfC4DKkwavtjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk Mjg4YWY3ZWEtZTc4OC00ZDU4LWIyY2MtYWQ4ZTEzM2YxMWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8OJ+6zSF78iOVWgCT5j8xu6SHsS4PHLybCd bY2UyDE8Tjs5dYX7xI+h/3Mw6bVU6hxExGqL5M/AkNHz2m0bkvEvyO/vaNXGLaXX 6LvBWjtVRnIecmFwx5dkUZiPaq7JPQINHWlouE7V5yWsBLbvwvgaySWjOfwrAlwd 04k7gzAZSCj1YEtRh0Y+kqRV2G8x8ivY+43iq2/b7gGjsTv69V89tjoEjZjXzpk1 H91wzBXlb6RjzMKdKgrjMkRpL6/w152h7APglquYaEQfuRYMRj0yCmjMwUZyfPOC 9qaXI4wHc+Wfuv5KBW/EnSnyb79qEWZm0BmD/S0ixYV9w9BbswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSFIH/F7dHaqo6PlOVyuON+ob/sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2U3ZmUyNzUtY2U1OC0z N2RiLTk5MWUtYjViNjJhMGM2Nzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8VWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNtCE6e8tceYChkWC7wyKKAkkGf61QiVDHPfWmYZn7Y9QMXiPI7ilVa aViHHqR6SF02J196D+G2A2snFo9V2GmRhqj/nRYlKx3fRa/mmsL/KW5CkrsJSMXX QRz9UGeqTkrMw7vQStK3m3Xp/j0XPwD0GBK/es/D2vaz6tcxqB1rqQp2oh+cBkRH 7w/lwgkkZlvm+7NVValQ5Ea6qRgGZ4kkOWwafx7W5Ac78k5YnXqp9JW/poZaI2mw mdHTyG8lgc0Y/VKluI++2q8nlLP0YnT4Pz6KbRBWnldbcu+L6wqJa/+38MfqxnPk ti/ygizKiowVnkq5BY/zhwaFv56C/N8= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:39 2025 by rpki-client