$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e3d2ca8-7fc3-33be-b4f8-b065128f9019.roa File: 1e3d2ca8-7fc3-33be-b4f8-b065128f9019.roa (raw, json) Hash identifier: D1ZGQJUVSXSLac8i2/6YrupT93iWxNS0+VLu1eeeRf0= Subject key identifier: EE:B6:DA:DE:5B:27:CA:13:4D:A3:3F:1E:5F:5D:F9:44:BF:A6:D3:A4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1C3715DC1F586C6E20F59DC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e3d2ca8-7fc3-33be-b4f8-b065128f9019.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.44.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:15:dc:1f:58:6c:6e:20:f5:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=2bc72e18-5b6d-463a-8373-f538ab101850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:42:12:79:76:29:1b:51:fa:8d:8b:f2:a7:e8: d4:de:e9:a7:0d:c1:32:1e:ed:3e:b7:2f:a3:c3:c1: 7e:bf:96:9c:5d:e5:4c:9c:77:35:08:bc:43:bf:ff: 24:56:97:ad:ac:ab:f5:a3:12:bc:61:68:75:5c:27: 75:2c:6f:bf:c6:a3:bc:f0:5a:83:1c:c8:35:7e:6b: e9:e8:82:c1:40:11:4b:cf:24:b5:64:07:de:db:88: 30:6f:20:8b:17:70:cb:7a:9b:b8:dd:46:26:76:76: 45:7c:55:6b:3b:22:92:9b:bc:2f:4a:34:37:45:ff: b9:c6:bd:e2:8f:92:1d:cb:40:e2:e2:b6:22:c6:72: 96:33:ee:30:42:ab:8a:ca:e6:dc:65:17:82:86:62: ae:8e:40:09:ba:db:e9:25:78:e6:9e:57:46:1d:0d: 16:f0:47:d8:90:bf:13:4c:4e:5c:5d:12:ae:3d:c0: 68:66:8a:b7:4f:ef:e0:1c:d3:60:f0:66:65:49:4d: 63:d7:53:69:44:b4:03:19:83:59:c0:1f:0a:ed:d1: c4:86:8e:05:37:0a:f5:c4:37:78:81:9e:7d:e0:2e: 0e:e6:2c:37:b1:7f:05:d7:f3:ef:75:ba:50:69:00: bc:1f:7b:c0:11:9a:b6:6c:65:40:c2:38:39:4b:1a: d4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B6:DA:DE:5B:27:CA:13:4D:A3:3F:1E:5F:5D:F9:44:BF:A6:D3:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e3d2ca8-7fc3-33be-b4f8-b065128f9019.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:51:fd:37:b0:6c:b8:8a:6a:5d:53:94:fb:ac:69:6c:3d:c3: c4:bc:8f:af:54:37:2a:2e:eb:72:dc:54:18:3a:72:87:82:f2: 18:21:f7:17:38:8f:c5:07:a2:c4:17:bb:12:79:c8:6c:68:f7: 4b:b1:2d:95:83:ec:1e:07:33:82:be:34:95:f8:8c:55:6d:de: 6e:fd:db:8c:64:c1:23:24:8d:ab:44:3a:0c:bb:0c:de:6b:05: 96:59:05:db:3f:72:47:51:fb:8f:8f:c4:16:49:24:ff:b5:ed: 89:44:a5:1d:cc:bb:bd:81:07:ed:31:5b:62:fa:93:8e:29:b3: 16:3c:5e:71:e4:2d:63:b3:d9:6f:bc:52:37:58:9d:fc:f7:e6: 1d:82:bd:c3:dc:55:98:6a:f8:88:da:6c:7f:60:d2:6d:86:71: 0f:0e:1c:fa:4a:4f:f3:bb:fe:b9:62:d7:75:ae:3c:52:4d:f5: 44:46:3f:95:2d:d3:a1:dd:0c:fc:21:47:a7:dc:17:ea:94:f0: 81:2c:94:b4:a0:91:71:2e:44:9d:bd:d6:35:dc:4f:06:66:3e: fa:e4:06:e3:81:ba:2b:05:22:e9:e2:3b:78:6e:2f:49:ad:53: dc:70:73:b0:94:3d:1e:71:01:7a:ae:3b:52:b4:98:95:b9:f9: 6e:74:3d:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNxXcH1hsbiD1ncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MmJjNzJlMTgtNWI2ZC00NjNhLTgzNzMtZjUzOGFiMTAxODUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkISeXYpG1H6jYvyp+jU3umnDcEyHu0+ty+j w8F+v5acXeVMnHc1CLxDv/8kVpetrKv1oxK8YWh1XCd1LG+/xqO88FqDHMg1fmvp 6ILBQBFLzyS1ZAfe24gwbyCLF3DLepu43UYmdnZFfFVrOyKSm7wvSjQ3Rf+5xr3i j5Idy0Di4rYixnKWM+4wQquKyubcZReChmKujkAJutvpJXjmnldGHQ0W8EfYkL8T TE5cXRKuPcBoZoq3T+/gHNNg8GZlSU1j11NpRLQDGYNZwB8K7dHEho4FNwr1xDd4 gZ594C4O5iw3sX8F1/PvdbpQaQC8H3vAEZq2bGVAwjg5SxrUiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO622t5bJ8oTTaM/Hl9d+US/ptOkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWUzZDJjYTgtN2ZjMy0z M2JlLWI0ZjgtYjA2NTEyOGY5MDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyyGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhR/TewbLiKal1TlPusaWw9w8S8j69UNyou63LcVBg6coeC8hgh9xc4 j8UHosQXuxJ5yGxo90uxLZWD7B4HM4K+NJX4jFVt3m7924xkwSMkjatEOgy7DN5r BZZZBds/ckdR+4+PxBZJJP+17YlEpR3Mu72BB+0xW2L6k44psxY8XnHkLWOz2W+8 UjdYnfz35h2CvcPcVZhq+IjabH9g0m2GcQ8OHPpKT/O7/rli13WuPFJN9URGP5Ut 06HdDPwhR6fcF+qU8IEslLSgkXEuRJ291jXcTwZmPvrkBuOBuisFIuniO3huL0mt U9xwc7CUPR5xAXquO1K0mJW5+W50PfI= -----END CERTIFICATE-----Generated at Mon Oct 20 00:28:24 2025 by rpki-client