$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f38264ce-a154-349c-8e9f-726dbdb9265b.roa File: f38264ce-a154-349c-8e9f-726dbdb9265b.roa (raw, json) Hash identifier: oZVaz/p2/8RVVAg8lnQTL6Fi6IRuDIYmchuFrTKb0fE= Subject key identifier: B2:05:BC:BD:3C:CE:E1:28:44:96:BD:7E:A8:2F:C0:BD:70:BC:3B:A0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B434C76B675F9F3B23F26CD80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f38264ce-a154-349c-8e9f-726dbdb9265b.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16625 IP address blocks: 23.197.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:76:b6:75:f9:f3:b2:3f:26:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=2c07c59c-7389-49be-8ac3-332832824a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ea:bc:7f:64:54:16:40:a5:d8:97:70:0d:f8: 69:9b:a9:15:d1:73:64:cb:e1:6b:60:fc:41:c6:2a: b8:da:96:3b:1e:15:70:6b:6b:2e:ee:8d:01:59:b0: 38:ea:13:06:eb:6e:e5:83:27:05:54:f4:cf:c1:ff: 97:8c:d0:46:b0:fb:ad:ce:fc:b7:8a:36:aa:8e:a9: 94:62:75:2d:3e:58:0e:00:f4:b6:57:67:b2:8b:e8: 6e:46:36:a6:7d:2b:fc:59:0e:18:5b:e9:2a:dd:f5: 0e:45:96:d5:ad:05:5b:ea:7e:0f:91:0a:e0:61:af: e0:2b:7f:f1:f1:57:83:21:93:7e:77:76:b3:7b:b0: 9f:ad:2e:13:4d:eb:2f:76:49:68:ac:49:6e:67:33: 79:57:b3:3a:8f:19:be:fd:24:64:74:c5:86:1b:81: 0d:04:69:6a:57:fb:9d:19:e0:43:a8:a2:43:66:d6: 9b:70:1e:50:aa:c3:9d:91:a7:41:4a:79:55:e9:50: c5:6d:93:e9:96:af:8e:ed:9a:44:b8:ed:c4:0c:0e: ee:d1:72:bd:4e:20:ae:aa:c5:a9:dc:6a:c0:61:5f: 2f:89:04:48:19:2f:91:3c:13:98:3d:ef:e9:e0:8b: 0f:a8:14:21:7e:fd:f0:c1:4c:98:8f:43:15:01:22: ce:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:05:BC:BD:3C:CE:E1:28:44:96:BD:7E:A8:2F:C0:BD:70:BC:3B:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f38264ce-a154-349c-8e9f-726dbdb9265b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:1c:1a:8d:2c:13:15:09:2b:aa:5d:d2:84:5f:07:74:e0:d8: 64:c7:b9:85:5f:c0:f2:76:76:fb:ef:a5:f2:13:70:46:73:78: 4d:75:62:c3:58:01:30:38:51:63:75:10:8e:26:85:af:ff:ac: fc:10:9f:fc:77:68:e0:4f:c0:3b:84:1d:30:d5:a4:5d:72:e1: 31:2e:65:51:82:de:0d:e8:cb:65:d4:b1:67:67:ad:e2:da:a5: 3e:94:63:aa:08:fe:7b:7d:5d:ba:93:bd:e7:9d:ea:79:48:ef: 1b:41:cf:0f:91:60:6b:53:cc:97:66:22:c6:41:97:54:59:eb: 50:da:a0:4e:a9:ee:8f:aa:26:ea:f7:84:54:63:ce:8a:c9:15: 0b:30:f7:66:bc:b0:81:16:66:ce:b1:0a:15:3b:62:1c:df:62: 7e:70:0a:02:2f:9e:ab:1c:1a:ef:15:31:a2:93:3f:1c:21:50: ea:14:5a:ab:d9:db:7c:c8:bf:c7:97:46:86:62:8e:6b:53:62: 95:92:bf:e7:81:ae:24:bd:14:de:cd:9b:30:9a:fb:9c:c2:1b: 11:09:7c:90:b0:aa:54:44:b4:c0:da:1a:f4:a8:3f:14:70:10: 5a:28:03:8d:e0:5a:d9:3f:13:b2:81:72:ca:d2:b3:47:d0:c0: 9a:95:74:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTHa2dfnzsj8mzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MmMwN2M1OWMtNzM4OS00OWJlLThhYzMtMzMyODMyODI0YTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOq8f2RUFkCl2JdwDfhpm6kV0XNky+FrYPxB xiq42pY7HhVwa2su7o0BWbA46hMG627lgycFVPTPwf+XjNBGsPutzvy3ijaqjqmU YnUtPlgOAPS2V2eyi+huRjamfSv8WQ4YW+kq3fUORZbVrQVb6n4PkQrgYa/gK3/x 8VeDIZN+d3aze7CfrS4TTesvdklorEluZzN5V7M6jxm+/SRkdMWGG4ENBGlqV/ud GeBDqKJDZtabcB5QqsOdkadBSnlV6VDFbZPplq+O7ZpEuO3EDA7u0XK9TiCuqsWp 3GrAYV8viQRIGS+RPBOYPe/p4IsPqBQhfv3wwUyYj0MVASLOpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIFvL08zuEoRJa9fqgvwL1wvDugMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjM4MjY0Y2UtYTE1NC0z NDljLThlOWYtNzI2ZGJkYjkyNjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8X8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAocGo0sExUJK6pd0oRfB3Tg2GTHuYVfwPJ2dvvvpfITcEZzeE11YsNY ATA4UWN1EI4mha//rPwQn/x3aOBPwDuEHTDVpF1y4TEuZVGC3g3oy2XUsWdnreLa pT6UY6oI/nt9XbqTveed6nlI7xtBzw+RYGtTzJdmIsZBl1RZ61DaoE6p7o+qJur3 hFRjzorJFQsw92a8sIEWZs6xChU7YhzfYn5wCgIvnqscGu8VMaKTPxwhUOoUWqvZ 23zIv8eXRoZijmtTYpWSv+eBriS9FN7NmzCa+5zCGxEJfJCwqlREtMDaGvSoPxRw EFooA43gWtk/E7KBcsrSs0fQwJqVdJY= -----END CERTIFICATE-----Generated at Mon Oct 20 12:56:39 2025 by rpki-client