$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45f7f1d1-183b-37ea-9a61-9316ba3dae30.roa File: 45f7f1d1-183b-37ea-9a61-9316ba3dae30.roa (raw, json) Hash identifier: rxyGdqa1QA9/ElWqMcWjtFRY50Zcn825zyyIScYTX2U= Subject key identifier: 20:13:36:5E:ED:B3:19:DE:21:79:8A:90:E1:B6:89:B9:AE:48:C4:22 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B68FCA45850307F41AD0F9480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45f7f1d1-183b-37ea-9a61-9316ba3dae30.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 16625 IP address blocks: 23.218.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:a4:58:50:30:7f:41:ad:0f:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=e33f6849-b80b-4846-b03a-8ffa85be6e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ca:0c:7a:45:e6:1b:22:11:de:df:ca:eb:d1: 08:61:ac:32:a4:9e:6c:ab:42:75:bd:24:9c:b2:23: b0:3c:0c:a5:e9:cd:31:d9:ec:f6:21:62:f0:21:67: 7c:c1:d2:e7:55:0d:87:1a:68:cc:bc:f0:c5:0f:0b: da:9c:91:b0:a7:a6:be:87:7f:b7:b6:12:4d:f9:2b: 44:bf:65:e3:17:af:24:aa:fc:1c:ea:4d:b5:d3:61: 59:54:17:35:b7:4f:5d:c4:e5:3e:8e:26:05:a4:a6: 97:60:3e:14:e6:32:62:a6:dd:97:01:6a:b6:7b:fd: c7:42:4f:67:25:5d:70:84:6e:b7:5d:30:0a:63:c6: 51:d5:3f:f7:1b:ac:93:9e:57:1d:86:b2:13:ea:57: 0b:54:5f:b7:d4:08:72:bb:e0:c7:36:41:a4:f8:8b: de:dc:5f:25:ef:79:16:0d:e1:eb:7d:02:88:e2:7e: 42:16:ef:67:cb:1f:bb:af:52:fb:e7:17:38:35:be: bb:7c:8f:48:6f:28:44:f6:bd:42:32:a7:6b:2d:1c: f2:86:f2:78:e1:9c:ec:7d:46:55:f9:5d:ef:09:79: 10:0f:a1:87:bb:65:1b:6d:8c:82:dd:66:a0:ec:74: a5:3f:ad:de:96:5d:52:5a:98:92:26:1b:d8:cf:7a: bc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:13:36:5E:ED:B3:19:DE:21:79:8A:90:E1:B6:89:B9:AE:48:C4:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45f7f1d1-183b-37ea-9a61-9316ba3dae30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:07:91:c2:61:a1:a6:d3:e0:63:29:16:24:c6:3a:0b:63:91: 3e:50:df:b0:1c:7f:58:e6:39:35:c3:17:05:37:55:cd:12:3c: 6e:78:31:57:38:da:54:eb:1f:7b:ad:a0:47:90:5a:0c:db:d0: 8c:ce:1a:3f:e7:23:3f:7c:9b:87:5b:18:40:60:cd:c3:48:75: bb:48:0a:d0:a5:94:83:9f:7b:47:1a:f5:7e:39:9c:50:d9:9c: ad:d2:fb:86:59:56:e8:5a:60:62:73:ef:7b:68:f1:09:15:4b: 45:55:80:e4:7b:7b:19:83:97:56:7a:da:95:df:2a:4c:37:01: e4:a1:aa:ce:ec:46:22:8a:48:ff:f0:03:bb:a1:5d:b0:8c:bf: 4c:f4:a5:8c:d9:9d:26:4b:ca:9a:03:96:68:36:a4:33:c8:c0: a4:b0:7c:e4:16:f5:94:a3:e8:56:6e:7c:3d:67:f0:a5:73:64: 7b:72:86:c1:4b:c9:61:c9:94:86:e4:cc:b0:28:c8:1b:ad:01: f4:bc:88:fc:e6:86:29:38:9f:62:2b:11:2a:f8:c5:d8:a2:a4: ee:f8:b9:29:0d:58:1f:10:42:83:ff:3c:e9:70:06:1d:12:37: 52:df:20:5b:01:95:df:3c:60:24:47:7c:61:b8:f0:86:55:5f: 32:13:67:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/KRYUDB/Qa0PlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk ZTMzZjY4NDktYjgwYi00ODQ2LWIwM2EtOGZmYTg1YmU2ZTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8oMekXmGyIR3t/K69EIYawypJ5sq0J1vSSc siOwPAyl6c0x2ez2IWLwIWd8wdLnVQ2HGmjMvPDFDwvanJGwp6a+h3+3thJN+StE v2XjF68kqvwc6k2102FZVBc1t09dxOU+jiYFpKaXYD4U5jJipt2XAWq2e/3HQk9n JV1whG63XTAKY8ZR1T/3G6yTnlcdhrIT6lcLVF+31Ahyu+DHNkGk+Ive3F8l73kW DeHrfQKI4n5CFu9nyx+7r1L75xc4Nb67fI9IbyhE9r1CMqdrLRzyhvJ44ZzsfUZV +V3vCXkQD6GHu2UbbYyC3Wag7HSlP63ell1SWpiSJhvYz3q83QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCATNl7tsxneIXmKkOG2ibmuSMQiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDVmN2YxZDEtMTgzYi0z N2VhLTlhNjEtOTMxNmJhM2RhZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9osMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4HkcJhoabT4GMpFiTGOgtjkT5Q37Acf1jmOTXDFwU3Vc0SPG54MVc4 2lTrH3utoEeQWgzb0IzOGj/nIz98m4dbGEBgzcNIdbtICtCllIOfe0ca9X45nFDZ nK3S+4ZZVuhaYGJz73to8QkVS0VVgOR7exmDl1Z62pXfKkw3AeShqs7sRiKKSP/w A7uhXbCMv0z0pYzZnSZLypoDlmg2pDPIwKSwfOQW9ZSj6FZufD1n8KVzZHtyhsFL yWHJlIbkzLAoyButAfS8iPzmhik4n2IrESr4xdiipO74uSkNWB8QQoP/POlwBh0S N1LfIFsBld88YCRHfGG48IZVXzITZx0= -----END CERTIFICATE-----Generated at Mon Oct 20 05:04:15 2025 by rpki-client