$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d042230c-e529-3d2b-ad39-873cdc161ad9.roa File: d042230c-e529-3d2b-ad39-873cdc161ad9.roa (raw, json) Hash identifier: BLdioKoRAf0Lf7t9+OLuJX+6JZKxO/HFJMk0RcyBOCM= Subject key identifier: 85:AD:85:B5:A4:1A:CA:1B:5A:10:87:7D:01:EC:40:C9:47:BB:ED:2B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E20BC38C74D7CB0CD12380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d042230c-e529-3d2b-ad39-873cdc161ad9.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.202.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:0b:c3:8c:74:d7:cb:0c:d1:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=e8c61a92-b960-4393-aaca-30c668607755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6c:2d:2f:57:5f:b3:84:08:d7:3b:80:72:23: f3:51:db:23:0d:34:4e:9a:35:7b:58:8a:3b:33:2d: 52:19:d6:25:d1:fd:21:a2:5d:32:48:44:48:e5:34: fc:b1:61:ea:28:f6:86:40:a0:ab:9b:3f:c6:04:12: 4b:67:ac:80:e9:5f:4c:a7:cb:25:32:e9:82:c1:ef: 05:5c:38:60:92:39:99:a4:88:e3:7b:f4:08:de:a4: 5b:ad:62:6b:b7:b8:e6:54:7c:12:77:d2:59:80:8c: cf:93:de:40:41:41:0c:53:99:cd:e4:85:30:f1:e2: 00:ac:45:10:c5:a3:01:76:01:82:93:37:4b:58:0f: 7b:40:a7:b7:ad:cd:e4:8f:3b:49:90:58:16:1c:e5: f0:a5:72:28:27:ce:43:7e:1e:e7:bf:b2:dd:1d:b2: 41:50:69:63:4c:03:c3:d1:6b:3a:11:03:62:d2:5b: b4:92:c3:b5:d5:2e:80:0d:fe:48:f4:9e:0d:79:53: 5b:94:ec:01:61:69:ef:49:f3:99:36:59:8b:b8:99: 57:36:bd:e1:d0:6e:eb:93:2a:07:b1:ad:b9:8c:ce: b1:a0:bf:36:3d:32:65:f1:50:f0:b5:cc:ac:5d:fa: c5:aa:be:c2:ce:6d:de:07:5a:00:00:de:4f:95:c0: 6e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AD:85:B5:A4:1A:CA:1B:5A:10:87:7D:01:EC:40:C9:47:BB:ED:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d042230c-e529-3d2b-ad39-873cdc161ad9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:ae:d4:d3:cb:7b:28:63:b9:d5:b3:8c:55:cc:35:d3:cd:6d: 1c:e3:3b:05:8b:ca:1d:05:cd:f6:97:24:d8:fe:65:e9:04:29: a9:db:ef:20:49:8f:e2:e4:ee:f5:15:c6:d8:8d:ff:b8:5a:19: b6:64:da:32:7b:16:12:16:31:bb:ac:3c:c6:1a:9c:49:14:ee: 0d:7e:65:93:3b:c1:8c:2b:9f:51:78:12:6e:82:d5:6d:cb:64: 08:b6:2b:15:69:73:a1:d6:e3:93:1f:b1:a0:8d:84:c2:0e:d7: a2:89:c7:2d:6b:09:46:14:fd:dd:6b:bd:5f:a2:d5:e4:d4:1f: 04:0d:1d:e3:01:33:1e:b9:4c:11:b3:5f:aa:6a:33:65:99:4d: bb:2a:29:a9:b6:31:aa:30:68:e1:fd:e0:c9:5d:35:e8:c7:21: 8e:fe:58:e1:2d:5d:df:8f:4e:0c:99:06:5f:f8:04:98:52:f6: b1:4d:02:df:b0:e7:37:62:9f:39:90:63:5e:8e:a5:bd:71:cf: d3:43:ba:2c:ea:2a:43:f0:5e:fc:7b:61:d7:65:60:fb:41:33: 4e:f1:ae:7a:f0:7a:da:cc:a8:1a:dc:da:15:b6:03:a3:65:fa: c3:71:48:d2:a4:d5:33:b9:b3:5b:a4:94:33:f5:06:92:19:4d: 9a:aa:60:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4gvDjHTXywzRI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZThjNjFhOTItYjk2MC00MzkzLWFhY2EtMzBjNjY4NjA3NzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGwtL1dfs4QI1zuAciPzUdsjDTROmjV7WIo7 My1SGdYl0f0hol0ySERI5TT8sWHqKPaGQKCrmz/GBBJLZ6yA6V9Mp8slMumCwe8F XDhgkjmZpIjje/QI3qRbrWJrt7jmVHwSd9JZgIzPk95AQUEMU5nN5IUw8eIArEUQ xaMBdgGCkzdLWA97QKe3rc3kjztJkFgWHOXwpXIoJ85Dfh7nv7LdHbJBUGljTAPD 0Ws6EQNi0lu0ksO11S6ADf5I9J4NeVNblOwBYWnvSfOZNlmLuJlXNr3h0G7rkyoH sa25jM6xoL82PTJl8VDwtcysXfrFqr7Czm3eB1oAAN5PlcBubwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWthbWkGsobWhCHfQHsQMlHu+0rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDA0MjIzMGMtZTUyOS0z ZDJiLWFkMzktODczY2RjMTYxYWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8ouMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuu1NPLeyhjudWzjFXMNdPNbRzjOwWLyh0FzfaXJNj+ZekEKanb7yBJ j+Lk7vUVxtiN/7haGbZk2jJ7FhIWMbusPMYanEkU7g1+ZZM7wYwrn1F4Em6C1W3L ZAi2KxVpc6HW45MfsaCNhMIO16KJxy1rCUYU/d1rvV+i1eTUHwQNHeMBMx65TBGz X6pqM2WZTbsqKam2MaowaOH94MldNejHIY7+WOEtXd+PTgyZBl/4BJhS9rFNAt+w 5zdinzmQY16Opb1xz9NDuizqKkPwXvx7YddlYPtBM07xrnrwetrMqBrc2hW2A6Nl +sNxSNKk1TO5s1uklDP1BpIZTZqqYHI= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:20 2025 by rpki-client