$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88da1645-c73d-3094-88f3-b59befb6e9b2.roa File: 88da1645-c73d-3094-88f3-b59befb6e9b2.roa (raw, json) Hash identifier: eekwNy2gZ2rup/ekkTt8hZ+pgnT5kEVZqZSWF01iIAU= Subject key identifier: A2:29:79:34:A3:00:82:84:7B:1B:8E:B9:FA:C8:79:9C:97:D5:52:17 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1C371839A59FFB432F864F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88da1645-c73d-3094-88f3-b59befb6e9b2.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.45.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:18:39:a5:9f:fb:43:2f:86:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=d94f9b29-fc84-4111-a91e-a7acd90b4c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:51:65:05:95:b4:98:88:b6:8f:63:a8:49:36: ca:4a:23:88:d5:a2:14:a8:74:c7:a7:ac:fb:2d:1a: 48:45:41:ee:1f:b3:33:7f:46:ab:6e:ec:ba:12:c5: 16:02:c3:67:74:e6:5a:db:b5:4b:2a:61:6d:be:23: 1f:e8:eb:20:ac:fd:76:da:2c:ca:83:59:6a:d6:8f: 22:e3:c3:e0:3b:5b:0f:f7:a0:80:15:8d:b4:e8:ef: a3:4e:e5:11:12:90:0b:5a:01:05:2c:de:89:70:9d: 2e:cc:49:ba:e0:b6:12:d7:2a:0a:25:f4:cb:c2:2b: 86:65:e1:53:70:c4:8a:dd:fd:17:4f:82:f9:28:e3: 04:14:08:65:cb:66:d3:be:04:25:03:9e:b6:c1:59: e0:ba:97:a3:83:d0:22:8e:1b:f6:d4:50:79:91:47: e2:06:e4:12:f3:52:71:ec:d4:b9:bd:05:9e:93:17: 39:b8:ea:0e:b4:39:cb:99:1a:02:74:32:86:8e:06: 0c:01:4c:cd:9f:83:e0:5e:a0:b9:91:6a:6d:0e:82: 98:9f:7a:f8:cb:9b:10:1a:ec:ee:14:29:a5:68:00: 5a:a5:9c:02:13:f3:b2:2f:f3:0f:12:7e:ea:5d:98: 8b:12:26:5b:bf:c7:a4:05:b0:5e:f8:ff:6f:84:11: 69:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:29:79:34:A3:00:82:84:7B:1B:8E:B9:FA:C8:79:9C:97:D5:52:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88da1645-c73d-3094-88f3-b59befb6e9b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:3a:47:33:e3:52:89:31:9c:3b:79:50:15:e9:1d:48:78:cd: a6:fd:31:33:a2:33:c4:3b:78:d5:12:d0:56:5d:d6:30:27:d8: c9:9b:33:d2:72:f6:23:73:82:39:f2:a4:2a:1a:41:30:f5:2d: 0c:50:0c:e6:20:7f:8e:35:bf:ae:8d:b0:1e:0d:54:a2:42:fb: 63:7a:30:83:fd:fd:8d:86:54:3f:0e:f6:1f:6f:4a:70:7a:47: 6f:8a:d1:fd:ee:50:2d:0a:d2:90:6b:36:e6:63:e5:b1:bf:89: 97:37:fa:38:0d:3e:09:19:64:ae:54:d4:0a:70:01:7c:c8:c2: b6:08:02:a7:52:cd:d4:26:a0:a5:33:d3:ef:05:36:7a:0f:0f: 88:5b:6c:ef:31:1e:78:6e:69:f3:e9:ac:9f:bb:26:53:0f:21: 52:d5:34:8c:45:80:3e:27:c7:8c:ec:15:2f:a9:5a:1b:20:87: a2:6d:75:2b:02:38:d5:40:8c:46:42:e3:05:92:77:b8:a1:ef: 38:a9:7a:64:fb:06:a7:20:1d:f7:11:cc:a8:d0:10:c3:c8:09: 22:00:2e:71:ba:6c:61:b5:9d:c5:cf:92:1f:82:d4:45:6a:7a: 9e:a3:f7:09:a1:85:bf:13:45:84:54:a4:2e:b0:45:7e:bc:2f: 24:d8:e2:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNxg5pZ/7Qy+GTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZDk0ZjliMjktZmM4NC00MTExLWE5MWUtYTdhY2Q5MGI0YzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlFlBZW0mIi2j2OoSTbKSiOI1aIUqHTHp6z7 LRpIRUHuH7Mzf0arbuy6EsUWAsNndOZa27VLKmFtviMf6OsgrP122izKg1lq1o8i 48PgO1sP96CAFY206O+jTuUREpALWgEFLN6JcJ0uzEm64LYS1yoKJfTLwiuGZeFT cMSK3f0XT4L5KOMEFAhly2bTvgQlA562wVngupejg9Aijhv21FB5kUfiBuQS81Jx 7NS5vQWekxc5uOoOtDnLmRoCdDKGjgYMAUzNn4PgXqC5kWptDoKYn3r4y5sQGuzu FCmlaABapZwCE/OyL/MPEn7qXZiLEiZbv8ekBbBe+P9vhBFpjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIpeTSjAIKEexuOufrIeZyX1VIXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODhkYTE2NDUtYzczZC0z MDk0LTg4ZjMtYjU5YmVmYjZlOWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFy04MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIo6RzPjUokxnDt5UBXpHUh4zab9MTOiM8Q7eNUS0FZd1jAn2MmbM9Jy 9iNzgjnypCoaQTD1LQxQDOYgf441v66NsB4NVKJC+2N6MIP9/Y2GVD8O9h9vSnB6 R2+K0f3uUC0K0pBrNuZj5bG/iZc3+jgNPgkZZK5U1ApwAXzIwrYIAqdSzdQmoKUz 0+8FNnoPD4hbbO8xHnhuafPprJ+7JlMPIVLVNIxFgD4nx4zsFS+pWhsgh6JtdSsC ONVAjEZC4wWSd7ih7zipemT7BqcgHfcRzKjQEMPICSIALnG6bGG1ncXPkh+C1EVq ep6j9wmhhb8TRYRUpC6wRX68LyTY4g0= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:50 2025 by rpki-client