$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3ad76fa-500d-38ca-8ec8-21d8d04cb88c.roa File: f3ad76fa-500d-38ca-8ec8-21d8d04cb88c.roa (raw, json) Hash identifier: 69iaUt/lTD0sFN2uK+R5St1ruAN2Dz933vFgszO6LNo= Subject key identifier: 8D:B3:7F:13:70:0C:A3:48:C1:98:28:70:56:E5:35:5A:D7:FD:2D:40 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B477C977A70A49C2651DD8960 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3ad76fa-500d-38ca-8ec8-21d8d04cb88c.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 20940 IP address blocks: 23.200.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:97:7a:70:a4:9c:26:51:dd:89:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=96759559-24c5-4ca6-aa36-45ea3432f9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:52:d4:77:88:be:ab:41:63:80:5f:be:9d:cd: 8d:1a:13:dd:50:e6:e1:2d:d2:5b:95:21:62:4c:b5: 86:8c:d2:20:b5:eb:9a:d5:8a:dc:6e:f3:29:8e:8a: 2e:c5:8f:b6:d5:8c:e0:37:94:a6:ad:ff:42:bd:59: 1f:94:ea:34:e6:ff:5e:db:72:6e:c8:c8:d3:50:9a: 5d:bd:ac:c3:2b:34:31:9f:29:49:2c:64:7f:3b:78: 78:11:c7:ff:87:8f:47:70:5f:0d:db:ff:b4:2b:32: 4e:f2:da:5c:0f:19:46:c9:46:ee:d9:80:21:3e:a0: 73:e7:92:46:20:d3:6c:6c:5b:58:d6:cf:6b:2e:e7: 2c:46:77:d6:ad:14:28:d9:1a:0f:20:1f:7e:14:5b: 25:86:af:62:22:9e:67:c9:b2:6f:19:05:18:3b:3e: c6:aa:3d:35:d2:ee:73:44:2b:67:62:56:60:3c:3b: 04:4e:68:1e:c1:fc:38:0e:a1:04:34:8f:85:96:8a: c6:48:66:72:c4:44:e7:02:7b:40:c0:97:bd:48:d2: 86:05:da:92:40:d0:3f:f8:93:f8:d6:9a:c3:31:94: d7:16:df:61:ef:bb:9e:14:de:89:a1:8c:a9:12:19: d2:e3:26:52:48:08:1f:39:24:22:5c:9f:79:b2:12: 79:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B3:7F:13:70:0C:A3:48:C1:98:28:70:56:E5:35:5A:D7:FD:2D:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3ad76fa-500d-38ca-8ec8-21d8d04cb88c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:d6:4c:d5:9a:30:32:70:97:b6:e6:dd:48:6e:c5:61:5c:2e: 66:3d:bb:e8:bb:19:9a:ec:0a:28:4e:29:f7:0a:53:1f:00:5a: 8b:e5:8f:d9:80:a2:99:ea:8f:f9:94:c4:a7:99:68:75:23:68: 2b:ee:57:ca:8b:0c:d4:9a:56:bd:03:e0:b2:55:3b:b0:3e:78: 80:fd:f1:b6:b4:c0:e9:09:1e:0a:8f:5b:20:9f:87:66:78:c6: ff:19:57:d7:72:ca:36:52:25:cc:4f:72:51:66:9c:c5:64:79: e1:f5:4b:19:f9:21:83:87:06:26:3b:e3:3b:4e:19:92:c7:37: a6:46:a5:5f:37:b5:ae:d8:da:8a:91:3c:f0:7d:ae:2e:ec:89: 7e:39:9a:a9:34:57:37:1f:51:a6:7b:6c:24:f7:88:f5:ea:f9: e8:d8:4e:6e:b5:6d:d6:e6:c2:54:79:ef:f4:33:28:da:e3:e1: 01:39:06:1d:29:73:3c:04:26:79:5f:3a:3d:18:43:27:bc:b5: 40:a3:cb:d1:1d:e9:ef:cd:4f:64:f5:f3:65:75:b9:93:dd:4b: ac:6d:2c:93:63:55:0b:52:b0:ee:3f:39:65:fb:35:29:3d:02: 32:fb:d1:3a:c1:0f:0f:a7:3f:cb:cb:70:18:34:08:48:2d:23: f0:84:19:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfJd6cKScJlHdiWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk OTY3NTk1NTktMjRjNS00Y2E2LWFhMzYtNDVlYTM0MzJmOWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLUd4i+q0FjgF++nc2NGhPdUObhLdJblSFi TLWGjNIgteua1YrcbvMpjoouxY+21YzgN5Smrf9CvVkflOo05v9e23JuyMjTUJpd vazDKzQxnylJLGR/O3h4Ecf/h49HcF8N2/+0KzJO8tpcDxlGyUbu2YAhPqBz55JG INNsbFtY1s9rLucsRnfWrRQo2RoPIB9+FFslhq9iIp5nybJvGQUYOz7Gqj010u5z RCtnYlZgPDsETmgewfw4DqEENI+FlorGSGZyxETnAntAwJe9SNKGBdqSQNA/+JP4 1prDMZTXFt9h77ueFN6JoYypEhnS4yZSSAgfOSQiXJ95shJ5ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2zfxNwDKNIwZgocFblNVrX/S1AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjNhZDc2ZmEtNTAwZC0z OGNhLThlYzgtMjFkOGQwNGNiODhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8gCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzWTNWaMDJwl7bm3UhuxWFcLmY9u+i7GZrsCihOKfcKUx8AWovlj9mA opnqj/mUxKeZaHUjaCvuV8qLDNSaVr0D4LJVO7A+eID98ba0wOkJHgqPWyCfh2Z4 xv8ZV9dyyjZSJcxPclFmnMVkeeH1Sxn5IYOHBiY74ztOGZLHN6ZGpV83ta7Y2oqR PPB9ri7siX45mqk0VzcfUaZ7bCT3iPXq+ejYTm61bdbmwlR57/QzKNrj4QE5Bh0p czwEJnlfOj0YQye8tUCjy9Ed6e/NT2T182V1uZPdS6xtLJNjVQtSsO4/OWX7NSk9 AjL70TrBDw+nP8vLcBg0CEgtI/CEGbs= -----END CERTIFICATE-----Generated at Mon Oct 20 05:07:43 2025 by rpki-client