$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49e012bb-d68d-3199-8ec6-2f4a6f4b8cfc.roa File: 49e012bb-d68d-3199-8ec6-2f4a6f4b8cfc.roa (raw, json) Hash identifier: bAydovKp9XEVY4Q5kkDWBNFxz1GeeSZRcT+OFFUS+YQ= Subject key identifier: E9:DF:34:5E:23:7F:37:92:30:87:E1:C7:10:22:45:DC:41:6A:79:03 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1C36E313FA7E99D6641798E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49e012bb-d68d-3199-8ec6-2f4a6f4b8cfc.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.45.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:e3:13:fa:7e:99:d6:64:17:98:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=57f69a9b-34af-44f8-aeb5-a24d35bedc29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0d:60:fa:6c:ff:c9:cd:62:41:07:d8:95:c8: c5:89:9b:24:de:e2:9b:9f:99:a7:69:97:f8:23:a4: 50:b9:30:c5:ab:c4:a1:75:09:29:1c:e0:69:ce:06: a0:41:ab:e5:69:8d:7f:54:b7:3d:e9:24:52:ad:c5: 51:c5:2c:8d:5a:eb:86:74:e1:2c:3a:d0:3e:bd:f3: 8b:56:f4:f8:5d:5f:4d:dd:67:72:74:3d:85:c3:56: 99:92:8e:80:ac:71:b8:f2:d1:ea:48:53:84:ef:e0: d5:36:4b:f4:e6:db:f7:d5:bf:32:20:f7:9e:d3:ee: 56:54:b8:ab:e4:a4:1b:7b:f4:1c:ed:6d:f7:fa:ae: f6:f1:ec:79:63:e5:9c:2f:58:b0:a2:05:72:3c:98: f7:bd:0c:ae:3d:e3:43:56:b2:d1:f1:7b:89:e2:1d: b5:47:d7:6f:87:08:3a:07:c3:a5:73:75:2b:c7:15: a2:92:77:98:d3:11:62:99:25:dc:2e:54:b0:c7:58: 45:6c:94:02:5b:b7:6d:b5:86:0a:78:49:47:dd:75: 86:5a:56:7d:e8:5c:e2:6d:33:fd:52:e3:dc:5c:4c: ad:fc:af:1a:95:52:51:42:83:f3:40:6f:66:8b:76: e3:e2:54:29:dc:e6:ff:22:51:2d:b5:ee:7f:bd:b9: 76:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DF:34:5E:23:7F:37:92:30:87:E1:C7:10:22:45:DC:41:6A:79:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49e012bb-d68d-3199-8ec6-2f4a6f4b8cfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:7f:b4:ae:4e:dd:d0:d8:2e:00:fa:d6:05:3d:c8:3f:57:da: d9:e0:7e:54:8d:d8:8b:88:83:2b:c0:4e:6b:a7:98:19:73:8f: 04:31:34:f2:52:45:86:d8:e8:3e:26:fb:00:98:f2:65:24:1d: 02:12:3a:30:62:58:28:b2:95:fe:e7:0f:30:59:1f:d0:ed:f7: 4a:aa:70:06:fa:e9:92:3b:7c:83:df:4d:e8:7d:9b:39:a3:e8: 3e:fa:ea:1b:d0:26:97:02:31:3c:1b:09:93:a0:a0:4e:55:9f: 68:cf:e2:20:e9:15:ea:87:b7:0c:40:48:1b:ab:1f:32:9d:95: 8a:32:70:e9:f3:8e:69:0a:a4:c2:6f:47:3e:1d:e8:28:6a:9b: f8:99:01:f8:c6:f4:7e:0e:39:3f:fd:c4:1b:dd:d3:f3:01:ef: e0:79:27:a0:90:18:e7:cf:2d:13:ee:61:91:23:04:76:b8:b5: 2a:e5:c3:0b:c2:99:aa:3e:13:54:88:ba:43:d5:00:f0:95:dc: 28:b2:40:44:94:b4:67:bd:7a:8b:7f:e9:4c:3a:56:93:76:e4: 88:21:2d:d3:ab:66:e6:76:58:b9:76:34:28:99:af:9d:77:a2: 8d:8c:8b:ea:b8:68:e1:0f:ea:3a:0c:05:76:44:27:ff:f3:02: 23:0e:c8:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNuMT+n6Z1mQXmOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NTdmNjlhOWItMzRhZi00NGY4LWFlYjUtYTI0ZDM1YmVkYzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg1g+mz/yc1iQQfYlcjFiZsk3uKbn5mnaZf4 I6RQuTDFq8ShdQkpHOBpzgagQavlaY1/VLc96SRSrcVRxSyNWuuGdOEsOtA+vfOL VvT4XV9N3WdydD2Fw1aZko6ArHG48tHqSFOE7+DVNkv05tv31b8yIPee0+5WVLir 5KQbe/Qc7W33+q728ex5Y+WcL1iwogVyPJj3vQyuPeNDVrLR8XuJ4h21R9dvhwg6 B8Olc3UrxxWikneY0xFimSXcLlSwx1hFbJQCW7dttYYKeElH3XWGWlZ96FzibTP9 UuPcXEyt/K8alVJRQoPzQG9mi3bj4lQp3Ob/IlEtte5/vbl2iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnfNF4jfzeSMIfhxxAiRdxBankDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDllMDEyYmItZDY4ZC0z MTk5LThlYzYtMmY0YTZmNGI4Y2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy0MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAB/tK5O3dDYLgD61gU9yD9X2tngflSN2IuIgyvATmunmBlzjwQxNPJS RYbY6D4m+wCY8mUkHQISOjBiWCiylf7nDzBZH9Dt90qqcAb66ZI7fIPfTeh9mzmj 6D766hvQJpcCMTwbCZOgoE5Vn2jP4iDpFeqHtwxASBurHzKdlYoycOnzjmkKpMJv Rz4d6Chqm/iZAfjG9H4OOT/9xBvd0/MB7+B5J6CQGOfPLRPuYZEjBHa4tSrlwwvC mao+E1SIukPVAPCV3CiyQESUtGe9eot/6Uw6VpN25IghLdOrZuZ2WLl2NCiZr513 oo2Mi+q4aOEP6joMBXZEJ//zAiMOyMo= -----END CERTIFICATE-----Generated at Mon Oct 20 00:28:07 2025 by rpki-client