$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9543fd5a-69e5-3f00-9639-ae597257308b.roa File: 9543fd5a-69e5-3f00-9639-ae597257308b.roa (raw, json) Hash identifier: k1oUlRXk03D909TKBjjG5Z71uYFB8VdlmicM00Wi+nU= Subject key identifier: D4:C4:34:B4:B3:CF:CC:63:D0:F4:0C:D5:24:C0:8C:AD:0A:40:64:75 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B99D7FB97A21B3D380C584A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9543fd5a-69e5-3f00-9639-ae597257308b.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 16625 IP address blocks: 23.37.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:fb:97:a2:1b:3d:38:0c:58:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=9084cb08-8ab1-4b7b-ae86-2f70dddc1e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:eb:70:fc:58:97:12:31:87:44:92:37:1f:d8: c6:92:94:e5:24:c9:4f:56:3d:9b:e0:8e:ff:d7:b2: 5c:ef:15:16:8c:31:74:0f:bb:2e:20:5b:ad:9d:dd: 10:2d:a2:56:c6:00:1f:e0:02:2b:63:1b:e4:1d:d6: c1:ee:70:80:f7:e5:fc:72:7c:d3:ca:d5:4f:ef:f4: d1:c4:66:78:f6:b3:cc:c8:a5:47:ba:15:00:0e:fc: d6:4d:37:1e:da:b7:94:83:0c:4e:8c:15:06:e3:26: db:eb:52:d7:83:6a:33:d8:c5:55:3e:c8:c0:41:7c: 07:c5:5a:1e:db:ec:5e:2d:e6:28:b3:34:0d:a0:c4: 55:fc:58:79:d7:48:ad:7c:90:df:97:dc:a2:db:12: 89:fc:54:16:2c:a0:a5:ee:b5:71:02:e9:11:13:dc: 9c:96:be:81:45:57:be:69:2e:e7:ee:cc:5b:ba:31: 2c:e0:06:b9:61:f8:fd:6e:73:77:f0:48:6d:f0:cd: 86:8c:da:f6:f1:93:6c:74:08:91:81:b7:a9:34:cb: 14:28:34:f8:3e:94:a7:cd:4a:e6:2d:20:a6:d5:5f: 7c:f8:8b:35:ba:4f:3d:36:f1:3f:41:34:1f:81:45: 8e:c6:78:e4:77:a9:cb:35:ab:3b:66:94:93:e3:96: 8c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C4:34:B4:B3:CF:CC:63:D0:F4:0C:D5:24:C0:8C:AD:0A:40:64:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9543fd5a-69e5-3f00-9639-ae597257308b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.37.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:d3:90:e9:91:95:da:e0:61:4c:29:a1:75:c6:da:50:63:3e: f4:41:1f:6f:7e:b2:4a:9d:e9:1a:34:a3:53:c9:92:2c:63:2f: eb:11:1f:9e:9a:0f:74:46:ed:74:92:ee:7e:85:69:6c:0c:5d: c9:fa:79:a7:0b:98:64:54:be:a8:6c:20:b4:37:6b:75:84:8c: 56:6c:a7:a5:8d:c4:8e:5a:14:92:b3:50:cd:b0:77:70:69:26: b0:be:d6:2d:5d:7b:a1:98:c7:40:8c:d1:35:ba:90:c0:9f:5d: 99:d7:cf:11:28:a9:ec:ac:3d:b0:d6:fc:bf:7d:29:3c:84:47: d6:d1:43:c2:43:81:44:e6:9b:a3:f9:02:d0:c9:7e:ad:78:1f: e4:ee:d8:7d:6b:32:d4:d7:0d:bb:58:c7:5d:0f:9d:1c:9e:15: 46:89:92:3b:cc:bd:20:01:03:db:d3:3a:05:9f:08:9f:bd:67: 8c:a8:b2:55:c1:ca:9b:20:79:30:ba:48:a6:30:e0:f2:bd:4c: 5d:c1:19:29:e4:4c:fb:55:1b:d3:00:72:89:0e:80:20:30:f6: c2:11:0e:3a:b5:29:93:54:02:9c:e6:b8:22:12:cf:b3:ec:ba: b8:71:6c:30:bf:7a:20:3f:ac:8d:ad:e6:56:b8:2b:3e:53:8b: 33:07:6a:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ1/uXohs9OAxYSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk OTA4NGNiMDgtOGFiMS00YjdiLWFlODYtMmY3MGRkZGMxZTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+tw/FiXEjGHRJI3H9jGkpTlJMlPVj2b4I7/ 17Jc7xUWjDF0D7suIFutnd0QLaJWxgAf4AIrYxvkHdbB7nCA9+X8cnzTytVP7/TR xGZ49rPMyKVHuhUADvzWTTce2reUgwxOjBUG4ybb61LXg2oz2MVVPsjAQXwHxVoe 2+xeLeYoszQNoMRV/Fh510itfJDfl9yi2xKJ/FQWLKCl7rVxAukRE9yclr6BRVe+ aS7n7sxbujEs4Aa5Yfj9bnN38Eht8M2GjNr28ZNsdAiRgbepNMsUKDT4PpSnzUrm LSCm1V98+Is1uk89NvE/QTQfgUWOxnjkd6nLNas7ZpST45aMQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTENLSzz8xj0PQM1STAjK0KQGR1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTU0M2ZkNWEtNjllNS0z ZjAwLTk2MzktYWU1OTcyNTczMDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXTkOmRldrgYUwpoXXG2lBjPvRBH29+skqd6Ro0o1PJkixjL+sRH56a D3RG7XSS7n6FaWwMXcn6eacLmGRUvqhsILQ3a3WEjFZsp6WNxI5aFJKzUM2wd3Bp JrC+1i1de6GYx0CM0TW6kMCfXZnXzxEoqeysPbDW/L99KTyER9bRQ8JDgUTmm6P5 AtDJfq14H+Tu2H1rMtTXDbtYx10PnRyeFUaJkjvMvSABA9vTOgWfCJ+9Z4yoslXB ypsgeTC6SKYw4PK9TF3BGSnkTPtVG9MAcokOgCAw9sIRDjq1KZNUApzmuCISz7Ps urhxbDC/eiA/rI2t5la4Kz5TizMHasc= -----END CERTIFICATE-----Generated at Wed Oct 22 05:20:51 2025 by rpki-client