$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3e49ee2-f836-3b92-b241-2cf5e22c10fa.roa File: c3e49ee2-f836-3b92-b241-2cf5e22c10fa.roa (raw, json) Hash identifier: 1xWKIK+w+zht5h/uISp2ZvOV7QRspR8ObQShADew8xo= Subject key identifier: CE:A0:6E:BE:92:A9:C2:84:CC:2B:1D:8F:C0:FE:E7:03:36:04:56:64 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1D9C3060F63BA0B60B4C81D0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3e49ee2-f836-3b92-b241-2cf5e22c10fa.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 9498 IP address blocks: 23.46.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:30:60:f6:3b:a0:b6:0b:4c:81:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=606e4e7c-3e8e-4ec5-aa42-1a72f7a0a667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:43:23:79:da:27:93:1b:ea:2e:4e:d6:70:d7: ad:4d:fb:d9:16:f0:27:01:86:76:98:2c:43:dc:7a: 29:ea:fe:eb:ef:7a:76:41:a5:51:2b:10:10:02:06: be:58:df:c5:25:ae:bf:a2:d9:d8:5a:1a:f6:1b:f2: 12:50:2d:e8:54:19:89:1e:13:3a:03:0e:1c:40:df: 89:48:08:d7:dc:5c:01:b3:e4:1e:7d:51:a5:ab:de: 71:40:22:e3:e5:3e:b0:75:d9:e0:9a:f2:c2:ef:9d: 80:b6:ad:80:d7:31:19:5b:1f:fc:15:e7:a8:ec:9c: 78:98:f0:d8:81:1a:8b:44:0d:e7:91:75:cc:78:5a: 19:fa:2d:47:4d:30:35:1c:67:0b:2d:ea:a3:89:87: c9:8d:d0:26:fb:bf:81:ed:02:0b:7a:25:96:74:d8: 45:e4:3b:e9:ff:d8:f2:e6:c9:27:77:42:3e:36:56: cb:4c:cc:54:0d:af:49:61:10:6a:33:9f:36:b3:ae: 7b:7a:7c:3b:99:e7:f4:97:30:8e:88:63:13:eb:ff: d7:af:29:f4:f9:2d:02:71:eb:7b:14:bd:b5:c3:6e: e8:a8:d5:0c:0e:73:bf:d1:39:fe:85:16:22:ad:3b: 43:17:92:42:07:c5:b4:3f:ed:b7:a5:0d:3b:dd:67: d9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A0:6E:BE:92:A9:C2:84:CC:2B:1D:8F:C0:FE:E7:03:36:04:56:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3e49ee2-f836-3b92-b241-2cf5e22c10fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.46.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d2:2e:9f:31:9b:71:23:68:9a:5a:91:9e:17:15:9f:7d:1f: 3a:b7:6d:ec:57:4f:2b:4c:2a:04:5c:a2:16:14:48:70:8c:40: 28:43:92:bb:8f:15:31:66:68:f0:27:18:fc:43:0f:60:54:41: 08:83:8e:61:c9:30:ea:52:0d:02:9c:3b:97:6d:51:48:59:64: fe:10:3c:90:cf:59:f0:df:44:cd:01:d8:8b:8f:b0:f4:55:9e: 08:b7:21:68:87:19:85:be:80:22:23:f0:8a:0c:dd:3c:95:68: 25:db:de:c6:7e:75:ab:aa:ff:48:86:9b:5f:ff:6b:11:da:f8: bd:62:5e:85:89:f3:7e:99:81:54:25:03:b8:b1:d0:52:f4:dd: 14:20:35:95:a2:84:db:4d:3c:c3:da:9d:14:61:36:23:16:d2: 1d:dd:c4:82:99:ca:5d:86:34:01:22:e1:6d:b9:a6:23:0a:13: 22:cb:81:46:4d:99:ed:8a:e2:42:2f:e2:99:bd:81:b9:c4:53: 3c:55:37:ee:4f:62:60:64:88:c3:a7:d9:e2:fb:a0:bf:33:b4: 6e:d0:f8:7b:05:11:38:64:ab:0a:5c:db:56:2d:c7:03:47:3a: f2:3a:33:03:f4:a6:e0:68:81:c6:e6:7c:32:22:3a:d2:67:53: db:98:4c:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnDBg9jugtgtMgdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk NjA2ZTRlN2MtM2U4ZS00ZWM1LWFhNDItMWE3MmY3YTBhNjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUMjedonkxvqLk7WcNetTfvZFvAnAYZ2mCxD 3Hop6v7r73p2QaVRKxAQAga+WN/FJa6/otnYWhr2G/ISUC3oVBmJHhM6Aw4cQN+J SAjX3FwBs+QefVGlq95xQCLj5T6wddngmvLC752Atq2A1zEZWx/8Feeo7Jx4mPDY gRqLRA3nkXXMeFoZ+i1HTTA1HGcLLeqjiYfJjdAm+7+B7QILeiWWdNhF5Dvp/9jy 5sknd0I+NlbLTMxUDa9JYRBqM582s657enw7mef0lzCOiGMT6//Xryn0+S0Ccet7 FL21w27oqNUMDnO/0Tn+hRYirTtDF5JCB8W0P+23pQ073WfZwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6gbr6SqcKEzCsdj8D+5wM2BFZkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzNlNDllZTItZjgzNi0z YjkyLWIyNDEtMmNmNWUyMmMxMGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy7PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArSLp8xm3EjaJpakZ4XFZ99Hzq3bexXTytMKgRcohYUSHCMQChDkruP FTFmaPAnGPxDD2BUQQiDjmHJMOpSDQKcO5dtUUhZZP4QPJDPWfDfRM0B2IuPsPRV ngi3IWiHGYW+gCIj8IoM3TyVaCXb3sZ+dauq/0iGm1//axHa+L1iXoWJ836ZgVQl A7ix0FL03RQgNZWihNtNPMPanRRhNiMW0h3dxIKZyl2GNAEi4W25piMKEyLLgUZN me2K4kIv4pm9gbnEUzxVN+5PYmBkiMOn2eL7oL8ztG7Q+HsFEThkqwpc21YtxwNH OvI6MwP0puBogcbmfDIiOtJnU9uYTGk= -----END CERTIFICATE-----Generated at Mon Oct 20 20:44:13 2025 by rpki-client