$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a94529da-a995-32be-a548-66a5e6f4718a.roa File: a94529da-a995-32be-a548-66a5e6f4718a.roa (raw, json) Hash identifier: n9NircT+LXvkCiYT1upj338zcPv+gn6JFw/kZgD8M1M= Subject key identifier: E1:74:4B:45:6D:B4:E0:93:DF:3E:DD:BE:5B:D3:0B:F8:4C:AD:13:B3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1C3719693A16938FB7E701C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a94529da-a995-32be-a548-66a5e6f4718a.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 6762 IP address blocks: 23.45.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:19:69:3a:16:93:8f:b7:e7:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=7ba1c124-340e-4940-baaa-67be55457685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:18:9e:9a:c3:3d:61:c0:60:f9:e8:0f:5c:dd: fc:72:02:c1:56:28:ba:7c:3e:f2:1a:0b:cb:4e:b1: 82:34:8a:0e:82:90:d2:70:00:19:d3:36:7e:f1:03: 71:e3:48:74:98:b5:bb:86:56:61:37:a7:7e:e8:1b: e0:78:1a:db:f7:95:9a:0c:0f:a0:aa:cb:5b:a4:fb: 5c:fa:a4:8d:7d:06:67:a5:7b:5b:df:f0:85:fb:b0: 41:54:8b:7c:22:63:68:04:97:8a:92:e6:80:6c:be: 9b:43:03:de:ff:00:f5:97:b4:39:13:aa:9d:76:e2: 13:6a:c4:63:8e:77:c9:cc:78:e4:d7:89:20:fd:58: 3c:61:d5:11:b4:de:15:d1:22:df:ad:14:71:4c:b3: ca:c0:d3:77:87:d7:ed:67:7c:2a:84:0b:f9:0f:46: a2:83:f9:e3:21:f6:3d:5a:b1:33:79:dd:e9:1f:a3: be:9d:c6:e6:3a:64:b9:3d:3d:35:77:d5:1a:b5:b8: 3e:3d:3a:4a:25:bf:40:0a:ab:f8:7e:89:e8:24:e3: 32:f5:ed:41:e8:e7:75:cf:c9:42:a1:71:de:78:5c: 2a:88:48:c1:ad:ef:53:ef:f7:0d:5b:18:c0:06:87: 0c:f6:9b:d6:26:98:bb:90:d0:61:80:7b:a4:db:13: d6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:74:4B:45:6D:B4:E0:93:DF:3E:DD:BE:5B:D3:0B:F8:4C:AD:13:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a94529da-a995-32be-a548-66a5e6f4718a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:99:7f:7b:7c:90:d7:1a:5a:2c:c0:13:96:b8:e0:da:5d:9f: 23:9c:cb:57:a5:0f:f4:a7:d9:58:2e:32:2a:4a:d4:2e:da:9d: f2:87:46:a2:e8:af:9b:79:d9:71:c7:c6:41:d8:ea:ee:8a:e0: f7:67:52:5c:96:c6:ea:d4:61:5d:63:b6:f6:a4:7b:2b:37:ce: 6a:07:f9:f5:32:6a:c7:ba:19:7b:95:b4:25:34:fe:5c:bf:28: 57:c8:65:93:68:77:5d:4f:d9:c3:7b:4e:f0:2b:6f:d5:21:a0: ac:18:12:af:33:a0:41:0b:1c:e1:43:aa:5d:40:0e:62:27:9f: de:a5:19:7e:d4:1b:be:76:68:e0:80:93:2b:72:44:85:e2:b3: a4:2f:93:ea:28:94:e9:4b:f0:c8:d0:a4:c7:d5:88:a9:80:c9: 37:4d:d6:70:6e:f9:2d:46:6e:21:fd:ec:f6:c6:65:8e:7d:2c: 59:d2:50:71:6b:cd:09:09:9f:7f:ac:c7:e9:47:6c:7a:a0:b0: 3c:5e:d4:48:6c:ce:8c:c0:89:94:f2:3a:0e:8f:9d:8f:1b:82: d5:f5:33:bc:d5:a9:7a:d7:d4:aa:2b:4a:bf:da:44:2a:d9:d7: e9:7d:3b:ee:de:8e:68:4e:41:0a:5c:25:68:7f:28:5f:e7:48: 96:77:77:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNxlpOhaTj7fnAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk N2JhMWMxMjQtMzQwZS00OTQwLWJhYWEtNjdiZTU1NDU3Njg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxiemsM9YcBg+egPXN38cgLBVii6fD7yGgvL TrGCNIoOgpDScAAZ0zZ+8QNx40h0mLW7hlZhN6d+6BvgeBrb95WaDA+gqstbpPtc +qSNfQZnpXtb3/CF+7BBVIt8ImNoBJeKkuaAbL6bQwPe/wD1l7Q5E6qdduITasRj jnfJzHjk14kg/Vg8YdURtN4V0SLfrRRxTLPKwNN3h9ftZ3wqhAv5D0aig/njIfY9 WrEzed3pH6O+ncbmOmS5PT01d9Uatbg+PTpKJb9ACqv4fonoJOMy9e1B6Od1z8lC oXHeeFwqiEjBre9T7/cNWxjABocM9pvWJpi7kNBhgHuk2xPWfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOF0S0VttOCT3z7dvlvTC/hMrROzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTk0NTI5ZGEtYTk5NS0z MmJlLWE1NDgtNjZhNWU2ZjQ3MThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy16MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKZf3t8kNcaWizAE5a44NpdnyOcy1elD/Sn2VguMipK1C7anfKHRqLo r5t52XHHxkHY6u6K4PdnUlyWxurUYV1jtvakeys3zmoH+fUyase6GXuVtCU0/ly/ KFfIZZNod11P2cN7TvArb9UhoKwYEq8zoEELHOFDql1ADmInn96lGX7UG752aOCA kytyRIXis6Qvk+oolOlL8MjQpMfViKmAyTdN1nBu+S1GbiH97PbGZY59LFnSUHFr zQkJn3+sx+lHbHqgsDxe1EhszozAiZTyOg6PnY8bgtX1M7zVqXrX1KorSr/aRCrZ 1+l9O+7ejmhOQQpcJWh/KF/nSJZ3d7o= -----END CERTIFICATE-----Generated at Mon Oct 20 12:36:34 2025 by rpki-client