$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a125101f-82e0-3ddd-bdaa-7d6c1b2e2ae0.roa File: a125101f-82e0-3ddd-bdaa-7d6c1b2e2ae0.roa (raw, json) Hash identifier: 0BLKffHxDSXJ6I8fuCTh8DLaMAUyORJp1ioHr2wsLTc= Subject key identifier: BE:4F:30:C5:72:82:C2:47:75:61:ED:55:3A:25:AE:74:F1:9B:D6:C4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B620222C1079AAC73EB900400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a125101f-82e0-3ddd-bdaa-7d6c1b2e2ae0.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 20940 IP address blocks: 23.45.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:22:c1:07:9a:ac:73:eb:90:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=e3d4e3d2-4e51-4ffb-9a72-627740e2159d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:bb:cc:2b:88:15:24:72:e7:7f:ef:cb:4f:3d: 79:73:b5:49:e9:fa:06:c5:f3:90:5b:4d:3a:ed:f0: 6c:ef:04:cb:7f:0f:35:cd:90:ec:ab:72:b6:9e:11: 9c:ac:17:a9:16:e2:7a:87:d7:52:c0:ea:6f:15:1d: dd:99:03:cf:f4:73:5c:5e:2e:6e:9b:7e:75:2f:3a: df:5b:72:8b:42:c7:40:65:58:b6:7a:4d:bb:46:00: 12:e0:79:c0:d2:8f:a3:db:01:7b:77:04:07:72:69: 73:76:ce:4c:fc:5f:53:d3:69:25:40:68:04:fc:03: ff:af:2d:c4:61:c4:74:0d:c8:82:f1:25:a0:3f:32: 96:12:af:37:b2:93:32:6c:46:75:b4:be:c2:5f:18: 8e:c1:1a:c1:d5:59:ae:00:ec:eb:9b:e3:b7:2b:4c: 6f:51:c0:11:d2:8d:57:59:d1:4e:55:10:d2:2f:52: 56:54:03:4a:f5:68:aa:6e:c3:06:7b:e6:c7:72:95: 45:02:46:a2:7e:e3:8d:f4:07:9e:6b:51:cf:d1:22: 7b:06:bf:c4:37:4e:c5:4e:32:01:6a:5e:9e:32:7c: 9b:8a:f7:71:af:9a:47:e2:08:61:85:d7:7e:0b:1d: b7:ce:02:6c:85:e4:7c:0a:6e:11:2d:6f:68:e8:a5: 1e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4F:30:C5:72:82:C2:47:75:61:ED:55:3A:25:AE:74:F1:9B:D6:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a125101f-82e0-3ddd-bdaa-7d6c1b2e2ae0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:ad:61:f1:2a:2c:e2:0e:e5:71:e1:74:29:31:e0:b0:85:a2: fa:ba:e4:9e:f3:74:be:b1:fe:1c:ad:d8:a6:25:02:a5:88:03: 94:6e:37:eb:f4:ed:be:2b:40:03:3a:14:64:d0:b9:2a:fb:c6: ae:32:5c:57:b8:2b:9c:4e:ca:04:41:31:d1:9a:af:13:4b:f1: c7:02:32:73:b6:aa:09:0e:b8:e0:d0:34:ba:2b:4d:db:44:80: 0d:9f:ea:51:fa:97:7c:0b:13:77:27:6c:7f:e7:92:08:72:ef: b2:22:89:b8:fb:fa:77:f6:ae:d2:83:47:3a:f8:fe:16:9b:37: 15:52:20:a6:68:a1:dc:9c:57:ac:20:2a:95:c0:6a:ff:95:98: 71:d8:92:52:d2:75:a3:aa:39:f2:61:54:8f:c4:89:57:57:1d: bc:3d:68:71:57:29:86:09:1a:fa:aa:c3:bb:d4:a8:12:1f:eb: d7:dd:17:29:59:13:cf:6a:0c:7a:61:0d:bb:eb:9b:b3:cd:26: 1d:e1:fc:5e:5a:05:2e:90:fa:d4:50:f2:63:78:b1:24:db:1a: 22:04:00:13:11:62:4e:a5:76:44:34:1d:11:10:d8:fe:60:dc: 83:90:e1:48:3a:bd:a2:44:cc:e8:29:4a:32:45:ee:b5:ae:c3: 17:bf:25:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAiLBB5qsc+uQBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZTNkNGUzZDItNGU1MS00ZmZiLTlhNzItNjI3NzQwZTIxNTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rvMK4gVJHLnf+/LTz15c7VJ6foGxfOQW006 7fBs7wTLfw81zZDsq3K2nhGcrBepFuJ6h9dSwOpvFR3dmQPP9HNcXi5um351Lzrf W3KLQsdAZVi2ek27RgAS4HnA0o+j2wF7dwQHcmlzds5M/F9T02klQGgE/AP/ry3E YcR0DciC8SWgPzKWEq83spMybEZ1tL7CXxiOwRrB1VmuAOzrm+O3K0xvUcAR0o1X WdFOVRDSL1JWVANK9WiqbsMGe+bHcpVFAkaifuON9Aeea1HP0SJ7Br/EN07FTjIB al6eMnybivdxr5pH4ghhhdd+Cx23zgJsheR8Cm4RLW9o6KUenQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5PMMVygsJHdWHtVTolrnTxm9bEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTEyNTEwMWYtODJlMC0z ZGRkLWJkYWEtN2Q2YzFiMmUyYWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy3pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2tYfEqLOIO5XHhdCkx4LCFovq65J7zdL6x/hyt2KYlAqWIA5RuN+v0 7b4rQAM6FGTQuSr7xq4yXFe4K5xOygRBMdGarxNL8ccCMnO2qgkOuODQNLorTdtE gA2f6lH6l3wLE3cnbH/nkghy77Iiibj7+nf2rtKDRzr4/habNxVSIKZoodycV6wg KpXAav+VmHHYklLSdaOqOfJhVI/EiVdXHbw9aHFXKYYJGvqqw7vUqBIf69fdFylZ E89qDHphDbvrm7PNJh3h/F5aBS6Q+tRQ8mN4sSTbGiIEABMRYk6ldkQ0HREQ2P5g 3IOQ4Ug6vaJEzOgpSjJF7rWuwxe/JaI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:36:38 2025 by rpki-client