$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d562d440-d0bd-3f22-89d0-3b22aff4f769.roa File: d562d440-d0bd-3f22-89d0-3b22aff4f769.roa (raw, json) Hash identifier: s21PGxyiCoGRdr58jnxXy/7AP2U34RoMswVUP79Tva0= Subject key identifier: 0A:38:CC:1F:C1:2C:2A:BF:F4:C4:85:35:24:D7:B9:80:DC:51:65:C3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E202B5852412F6856EFF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d562d440-d0bd-3f22-89d0-3b22aff4f769.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.202.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:02:b5:85:24:12:f6:85:6e:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=bc778efe-73fc-45c7-b812-5dc5d74d76aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ac:fe:58:ba:33:8b:b6:e5:97:d3:19:74:86: 84:18:6d:98:48:4c:ef:f6:b8:a0:4d:be:d1:89:60: 5a:26:5e:9f:bb:a8:66:ea:6f:14:0e:1c:68:7d:bc: 87:85:6d:73:96:49:ba:f2:8f:58:a7:52:12:6f:e5: ca:1d:e9:a4:c7:8f:d0:8b:24:8d:d1:c7:80:6e:59: 22:5d:d9:0d:8b:da:a0:08:33:1a:09:47:e2:b9:1a: bc:4f:84:10:a0:57:c3:81:d5:f2:52:5f:5b:f5:ba: 95:f9:46:1b:13:2b:e5:d8:13:49:ed:21:f9:e3:9a: 63:b5:70:55:d9:24:bc:7a:28:e9:93:fb:f5:ed:a9: d2:db:3a:bf:bc:c1:77:5e:3d:04:07:9a:e5:00:7b: af:56:3b:4d:a6:4e:cd:d9:60:52:a4:49:88:a4:76: 50:57:f5:aa:15:13:8b:b1:7b:2c:11:6a:db:75:de: 4d:06:b0:31:cb:c3:b2:ac:bd:b1:44:b0:f1:a5:7f: 38:c0:d9:86:65:ee:5b:57:c3:8c:ff:80:ea:ad:4b: b8:2c:48:47:ec:1a:a3:5a:50:55:86:80:d1:e9:13: ab:de:c5:fc:e3:a7:eb:a1:2e:0a:09:b0:9c:11:75: 0a:f3:aa:12:78:ff:3c:3f:56:16:8a:d2:a0:05:f4: 95:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:38:CC:1F:C1:2C:2A:BF:F4:C4:85:35:24:D7:B9:80:DC:51:65:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d562d440-d0bd-3f22-89d0-3b22aff4f769.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:aa:7c:a5:9f:5b:e0:67:01:0d:ea:de:f3:18:66:5e:14:43: 2c:b4:a3:f8:61:79:5d:3d:cc:21:e1:5a:d7:e1:4a:78:98:b9: 51:ec:d9:f6:82:a7:69:d0:c3:82:20:5b:d7:e7:23:55:22:b2: cd:06:98:63:b1:50:68:26:11:df:b7:a2:42:cb:84:e2:6e:0e: 5c:ed:cb:2f:35:d8:08:43:9a:58:1a:8b:43:4c:88:b0:67:12: 35:d2:84:2e:6b:8c:4e:21:dd:11:51:2b:eb:de:7b:c7:3c:9b: 84:cd:60:48:91:9c:e9:6f:3a:e0:4b:34:35:10:f5:94:0a:2e: 3a:dc:ee:87:62:19:72:2e:63:a3:40:49:6c:f9:45:71:83:70: 7f:29:6f:a9:7a:e3:e4:f1:6b:06:fd:7a:79:9c:b7:45:20:9c: 75:2b:43:1e:cc:5d:1c:e4:b6:f0:4d:49:15:30:83:27:a9:df: 0a:54:06:18:7e:0c:53:5f:3f:27:9f:01:d6:0c:86:df:32:0a: 58:47:af:84:5e:41:1d:b7:e7:b8:71:9f:9b:de:f3:c2:af:11: 66:ec:d6:e8:b7:1d:aa:e1:f9:fc:e5:86:85:ef:0e:f8:ca:b5: 8b:d3:57:39:96:9c:08:68:bd:9a:7e:16:2f:40:c4:e9:3a:49: b7:20:29:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4gK1hSQS9oVu/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YmM3NzhlZmUtNzNmYy00NWM3LWI4MTItNWRjNWQ3NGQ3NmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaz+WLozi7bll9MZdIaEGG2YSEzv9rigTb7R iWBaJl6fu6hm6m8UDhxofbyHhW1zlkm68o9Yp1ISb+XKHemkx4/QiySN0ceAblki XdkNi9qgCDMaCUfiuRq8T4QQoFfDgdXyUl9b9bqV+UYbEyvl2BNJ7SH545pjtXBV 2SS8eijpk/v17anS2zq/vMF3Xj0EB5rlAHuvVjtNpk7N2WBSpEmIpHZQV/WqFROL sXssEWrbdd5NBrAxy8OyrL2xRLDxpX84wNmGZe5bV8OM/4DqrUu4LEhH7BqjWlBV hoDR6ROr3sX846froS4KCbCcEXUK86oSeP88P1YWitKgBfSVNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAo4zB/BLCq/9MSFNSTXuYDcUWXDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDU2MmQ0NDAtZDBiZC0z ZjIyLTg5ZDAtM2IyMmFmZjRmNzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8p0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6qfKWfW+BnAQ3q3vMYZl4UQyy0o/hheV09zCHhWtfhSniYuVHs2faC p2nQw4IgW9fnI1Uiss0GmGOxUGgmEd+3okLLhOJuDlztyy812AhDmlgai0NMiLBn EjXShC5rjE4h3RFRK+vee8c8m4TNYEiRnOlvOuBLNDUQ9ZQKLjrc7odiGXIuY6NA SWz5RXGDcH8pb6l64+Txawb9enmct0UgnHUrQx7MXRzktvBNSRUwgyep3wpUBhh+ DFNfPyefAdYMht8yClhHr4ReQR2357hxn5ve88KvEWbs1ui3Harh+fzlhoXvDvjK tYvTVzmWnAhovZp+Fi9AxOk6SbcgKck= -----END CERTIFICATE-----Generated at Mon Oct 20 02:21:58 2025 by rpki-client