$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/036b6536-a7ce-34ee-95b8-b78edd5e3c8a.roa File: 036b6536-a7ce-34ee-95b8-b78edd5e3c8a.roa (raw, json) Hash identifier: Xb47HK+26Qigsu3si9WvKxqKBH01xX0DwN8xyFVGUTA= Subject key identifier: CD:A1:4A:C2:53:4F:DF:DF:FD:9B:02:08:82:3D:B3:A7:43:EB:81:C3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1C36E42E6790B24353EBC170 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/036b6536-a7ce-34ee-95b8-b78edd5e3c8a.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.45.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:e4:2e:67:90:b2:43:53:eb:c1:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=c16774a0-b334-4524-938d-3f0870850f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:65:fa:1d:91:02:8e:ce:76:da:29:0d:6a:4a: 19:7e:55:d8:6c:c9:59:5a:e3:84:54:f4:ed:0a:b2: 73:aa:55:a3:23:c4:50:0c:f9:1e:4d:02:7f:31:93: 7c:e3:ea:43:ff:c3:f1:6f:5f:fb:bb:e7:1b:89:16: 31:bd:bd:09:5d:75:bf:66:e0:16:74:32:f2:0b:48: 24:26:b1:09:c7:75:7f:d3:58:6e:62:f9:e4:e5:23: 23:22:9c:13:43:4d:61:93:1b:a9:6b:bf:c8:01:80: 61:46:f9:93:52:23:8c:f7:fb:65:ec:e5:f2:ea:1e: 9a:5f:a9:57:de:b2:3e:a1:ee:1f:4d:76:0e:de:e1: 5a:8f:4c:12:40:ba:65:14:12:e2:da:93:e2:48:69: 6f:cc:fa:03:0b:8d:5b:99:b0:8c:9b:51:2c:ee:63: cd:3a:95:71:3f:36:43:fb:38:a6:0e:b8:c9:58:f5: 22:7c:88:23:90:e4:e7:fe:b2:48:7a:71:6a:e1:7a: c1:e2:3e:c3:68:f2:ef:50:f3:0a:43:0a:1d:13:8c: 3f:0c:4f:bd:9e:23:13:1f:3e:4f:ab:09:88:a5:66: 6b:1a:f8:4f:e2:28:9b:42:4d:39:49:a8:88:c7:f0: c0:5f:dd:2d:65:b4:ca:e3:d7:13:18:3e:49:4f:8d: 62:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A1:4A:C2:53:4F:DF:DF:FD:9B:02:08:82:3D:B3:A7:43:EB:81:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/036b6536-a7ce-34ee-95b8-b78edd5e3c8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:e6:b6:c6:b0:02:96:76:f9:f6:34:29:8b:f5:e3:bb:4b:99: a4:11:d9:19:df:ff:bb:b2:14:3a:55:e9:b8:5a:bc:e7:f7:3d: 5c:61:ba:68:dc:62:68:0f:e7:2c:20:1b:53:05:62:b2:4b:ec: c3:4c:5d:b8:23:b9:5f:81:31:e5:3a:61:45:59:f4:95:40:e4: 77:4a:b9:ed:50:d2:d6:27:78:f7:e0:b2:29:1f:2e:e1:e0:79: 41:ba:4f:10:91:f4:d0:f7:a7:62:4b:38:a1:59:cc:d1:3a:87: 6c:22:a0:ec:8a:67:f8:04:b5:cc:b8:c8:e5:8e:2a:54:16:51: b5:c8:d5:83:1a:10:27:f5:54:44:89:33:ad:c9:69:dc:40:d1: 77:4a:01:6b:e2:e6:2b:12:6b:68:06:c3:af:b1:53:48:91:2b: 46:8e:91:43:f0:91:6f:04:5a:0c:a3:e2:0a:fe:90:c0:29:1d: f2:1a:b1:4b:1a:52:83:86:88:13:55:8d:72:fb:24:9f:43:b0: e3:36:1b:f6:ef:2b:cb:54:f3:69:82:e7:a0:89:17:1c:e9:c3: f2:e4:22:cc:05:fa:5f:5f:d5:03:0a:dc:8b:2b:99:bd:e7:3e: 86:a6:83:5c:f3:29:0c:97:5f:f9:39:08:31:50:bf:10:e7:e5: 24:d9:3e:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNuQuZ5CyQ1PrwXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YzE2Nzc0YTAtYjMzNC00NTI0LTkzOGQtM2YwODcwODUwZjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2X6HZECjs522ikNakoZflXYbMlZWuOEVPTt CrJzqlWjI8RQDPkeTQJ/MZN84+pD/8Pxb1/7u+cbiRYxvb0JXXW/ZuAWdDLyC0gk JrEJx3V/01huYvnk5SMjIpwTQ01hkxupa7/IAYBhRvmTUiOM9/tl7OXy6h6aX6lX 3rI+oe4fTXYO3uFaj0wSQLplFBLi2pPiSGlvzPoDC41bmbCMm1Es7mPNOpVxPzZD +zimDrjJWPUifIgjkOTn/rJIenFq4XrB4j7DaPLvUPMKQwodE4w/DE+9niMTHz5P qwmIpWZrGvhP4iibQk05SaiIx/DAX90tZbTK49cTGD5JT41iwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2hSsJTT9/f/ZsCCII9s6dD64HDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDM2YjY1MzYtYTdjZS0z NGVlLTk1YjgtYjc4ZWRkNWUzYzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy1/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLmtsawApZ2+fY0KYv147tLmaQR2Rnf/7uyFDpV6bhavOf3PVxhumjc YmgP5ywgG1MFYrJL7MNMXbgjuV+BMeU6YUVZ9JVA5HdKue1Q0tYnePfgsikfLuHg eUG6TxCR9ND3p2JLOKFZzNE6h2wioOyKZ/gEtcy4yOWOKlQWUbXI1YMaECf1VESJ M63JadxA0XdKAWvi5isSa2gGw6+xU0iRK0aOkUPwkW8EWgyj4gr+kMApHfIasUsa UoOGiBNVjXL7JJ9DsOM2G/bvK8tU82mC56CJFxzpw/LkIswF+l9f1QMK3Isrmb3n Poamg1zzKQyXX/k5CDFQvxDn5STZPi8= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:08 2025 by rpki-client