$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee1701ea-8b78-3609-858f-3175f3e083f1.roa File: ee1701ea-8b78-3609-858f-3175f3e083f1.roa (raw, json) Hash identifier: Y1MkhNIvDkfUrVVEuDHfMoRqIRe5VlKE98jOV9MSjfQ= Subject key identifier: 23:C2:C9:10:A1:60:78:AC:4F:DF:C6:A6:4D:AC:69:56:49:B8:2E:66 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4616FFB937D682BE283F8400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee1701ea-8b78-3609-858f-3175f3e083f1.roa Signing time: Mon 22 Sep 2025 01:00:33 +0000 ROA not before: Mon 22 Sep 2025 01:00:33 +0000 ROA not after: Sun 21 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.199.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:16:ff:b9:37:d6:82:be:28:3f:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 01:00:33 2025 GMT Not After : Dec 21 02:00:33 2025 GMT Subject: CN=2026ac37-9346-4d64-a2b3-56cf052d8928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:74:00:46:24:b4:58:f5:27:af:c2:fc:47:60: e0:99:46:ce:a6:6f:1a:5c:f2:bc:82:d0:03:28:5f: 73:84:dd:44:2e:88:9f:fa:e5:dc:4f:95:9c:91:5f: b9:45:ac:d7:4a:e3:e0:26:ad:2f:1b:d6:9e:cf:e0: d1:5a:8d:bc:df:4b:1b:72:b4:c7:29:7a:de:81:18: 73:7d:66:c3:01:04:e2:6b:4e:08:17:20:d0:cd:4a: e5:b8:db:7e:80:fa:24:d8:36:bd:8a:24:45:0a:07: 68:d7:95:a9:5b:91:66:77:8b:a5:99:94:18:24:09: 1d:e5:bc:f8:e3:66:23:11:26:ef:8c:ba:cd:eb:56: 85:30:62:57:98:3c:2e:10:02:72:76:81:f1:c4:15: 1d:16:19:16:39:e1:1a:60:fa:c2:78:af:63:c9:fb: de:cb:cd:11:34:01:b6:3d:f4:c3:78:b3:30:59:00: 65:2e:aa:a7:9b:54:41:46:dd:67:3e:4e:75:85:32: d7:f8:ad:df:b3:de:61:94:a9:de:d6:e5:10:34:e2: c4:20:fc:b3:80:2a:7f:23:f9:04:bd:99:e7:a1:3b: 1d:5f:67:4e:83:d5:33:46:90:40:c8:ec:e3:26:9d: 1b:97:88:24:09:80:9a:c5:7b:aa:bf:fc:97:b0:8f: 76:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C2:C9:10:A1:60:78:AC:4F:DF:C6:A6:4D:AC:69:56:49:B8:2E:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee1701ea-8b78-3609-858f-3175f3e083f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:c5:82:83:5c:f2:cf:94:08:db:e7:ce:39:52:6a:75:9f:13: 9a:f6:a7:fb:0f:fc:e3:71:48:7c:e9:a5:12:e1:80:a5:8f:ed: 8d:e7:ca:65:cf:15:c0:76:fd:37:7c:3d:f3:a7:2e:dd:a0:f4: d1:5c:80:5e:3c:cb:4c:be:48:6c:b0:61:2d:c9:fb:2c:81:a9: c5:18:59:a6:49:75:e3:d5:0c:ca:05:15:e7:77:fd:7f:fb:0a: d0:1f:d9:3f:a3:cc:f1:9f:36:c4:bf:3e:6a:71:8c:c3:0d:21: 07:d1:c3:f6:5d:d6:0c:ce:15:f0:b3:ad:be:78:e7:4b:64:2b: f1:93:e6:ec:04:c1:29:fe:bc:46:ed:41:d7:18:1c:d6:85:9c: dc:48:b7:16:17:40:65:f7:45:c7:01:e2:98:40:94:25:02:70: ef:a9:ab:b8:b3:62:9b:32:fc:b7:2f:bd:94:dd:af:ac:46:7c: 25:1a:e0:c5:fa:e0:78:21:c0:58:50:73:fc:f7:36:e5:be:c5: e9:12:7c:ce:64:35:36:50:87:63:81:a3:88:54:8b:30:41:b2: 98:a0:cc:97:c7:be:34:2c:27:4b:cd:47:f4:10:f1:d3:7b:6b: ff:7e:ec:c0:37:8b:de:44:74:85:b4:7c:52:5d:49:e5:92:5c: ca:51:b8:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtGFv+5N9aCvig/hAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk MjAyNmFjMzctOTM0Ni00ZDY0LWEyYjMtNTZjZjA1MmQ4OTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnQARiS0WPUnr8L8R2DgmUbOpm8aXPK8gtAD KF9zhN1ELoif+uXcT5WckV+5RazXSuPgJq0vG9aez+DRWo2830sbcrTHKXregRhz fWbDAQTia04IFyDQzUrluNt+gPok2Da9iiRFCgdo15WpW5Fmd4ulmZQYJAkd5bz4 42YjESbvjLrN61aFMGJXmDwuEAJydoHxxBUdFhkWOeEaYPrCeK9jyfvey80RNAG2 PfTDeLMwWQBlLqqnm1RBRt1nPk51hTLX+K3fs95hlKne1uUQNOLEIPyzgCp/I/kE vZnnoTsdX2dOg9UzRpBAyOzjJp0bl4gkCYCaxXuqv/yXsI92MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPCyRChYHisT9/Gpk2saVZJuC5mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWUxNzAxZWEtOGI3OC0z NjA5LTg1OGYtMzE3NWYzZTA4M2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8c4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTFgoNc8s+UCNvnzjlSanWfE5r2p/sP/ONxSHzppRLhgKWP7Y3nymXP FcB2/Td8PfOnLt2g9NFcgF48y0y+SGywYS3J+yyBqcUYWaZJdePVDMoFFed3/X/7 CtAf2T+jzPGfNsS/PmpxjMMNIQfRw/Zd1gzOFfCzrb5450tkK/GT5uwEwSn+vEbt QdcYHNaFnNxItxYXQGX3RccB4phAlCUCcO+pq7izYpsy/LcvvZTdr6xGfCUa4MX6 4HghwFhQc/z3NuW+xekSfM5kNTZQh2OBo4hUizBBspigzJfHvjQsJ0vNR/QQ8dN7 a/9+7MA3i95EdIW0fFJdSeWSXMpRuK4= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:07 2025 by rpki-client