$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3f192a5-48ad-3d7d-84be-f03de3287e9e.roa File: c3f192a5-48ad-3d7d-84be-f03de3287e9e.roa (raw, json) Hash identifier: WOo/XLMQYKdyzBztT/TB2KCIzIwQ9Qp0cnkjkzVJHmc= Subject key identifier: 72:72:F6:08:A7:2B:18:11:49:17:0E:2A:1F:68:27:04:EE:32:C1:10 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1C36E536FA79FDA937C48E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3f192a5-48ad-3d7d-84be-f03de3287e9e.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.45.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:e5:36:fa:79:fd:a9:37:c4:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=5bc24f97-f6ad-4a61-bc0d-8e9c59752d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:59:a6:bf:2e:5f:7e:63:da:1f:d1:1e:81:e3: b3:4d:e8:88:c2:75:32:0a:0e:cc:66:d5:f2:78:fd: 3e:a8:30:c0:0b:fe:9e:47:e6:b9:38:b0:9b:c2:25: 97:89:ab:a7:3f:bc:14:a8:c9:d8:5e:b4:69:f0:7a: 2b:e7:9f:78:21:d3:65:cf:40:2a:72:81:9e:81:0c: ef:47:d9:7d:54:d5:68:f8:da:75:38:20:ed:af:93: 23:c5:b2:98:7a:42:25:14:b2:5f:4a:bb:89:8c:08: 50:80:4c:d0:2a:51:73:bf:79:61:e0:69:8c:16:91: 5a:c8:ba:67:db:62:8c:f2:ff:ee:3b:82:e1:26:b5: 8c:48:62:d6:94:5e:ed:ce:23:72:fd:30:79:19:cc: 44:fb:6b:59:2e:56:e4:b0:60:63:2b:a7:cb:03:ce: 66:b9:54:99:1e:5d:87:2d:c4:2f:12:1f:11:b4:d8: 40:7b:02:68:e9:99:0a:60:a3:54:d8:23:97:bf:51: 32:88:16:67:ab:46:53:c8:d4:0f:f1:be:dc:94:22: d7:4a:b1:60:13:d1:09:4c:da:0e:ff:cc:95:07:ef: be:b1:21:10:2d:4d:1d:26:18:e3:74:94:2e:4c:4b: e0:ae:4a:b7:46:79:2e:50:9a:48:28:bd:51:19:5e: 6b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:72:F6:08:A7:2B:18:11:49:17:0E:2A:1F:68:27:04:EE:32:C1:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3f192a5-48ad-3d7d-84be-f03de3287e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:a3:9f:b0:22:68:69:94:7e:37:30:8f:43:5a:70:94:86:f1: fb:2c:1c:8c:25:25:93:5a:af:96:a8:e0:e0:04:7a:d7:56:cd: d4:e9:32:89:f5:23:e8:ea:49:bb:d5:b7:c0:7c:eb:33:e4:8e: 0e:2d:7b:91:f2:7e:9e:f8:e3:50:ce:42:70:0d:26:3f:a5:ff: f4:05:aa:0f:e3:c9:13:fd:3e:53:41:6c:bf:80:d0:93:fc:99: 2d:38:b3:eb:50:97:17:43:0c:d3:2f:47:20:4f:c6:cf:c9:9d: 9f:92:b8:68:4e:48:40:c8:85:34:d0:f7:c5:5c:dd:f8:74:eb: 4c:4f:34:f4:b5:d4:70:f8:9c:41:4d:2a:a5:fb:01:9d:2b:3e: 0b:64:d0:eb:ef:7e:45:20:37:f2:54:4b:f7:41:60:65:ff:db: 4a:13:5a:8e:c1:c0:f2:32:0f:fd:fe:ca:57:63:98:be:72:2b: 9f:2c:c3:25:82:ef:2f:e8:13:79:1c:30:5b:62:eb:a4:52:c5: 51:52:54:8c:93:d6:e0:21:99:a5:df:d1:92:ab:d2:01:0b:29: 0b:85:ce:41:04:e8:7b:04:d9:61:b1:1e:f6:a3:e9:86:44:da: 80:56:2e:9e:5c:75:e7:2d:9a:1c:13:d8:e9:9f:00:08:b6:e8: 36:26:e8:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNuU2+nn9qTfEjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NWJjMjRmOTctZjZhZC00YTYxLWJjMGQtOGU5YzU5NzUyZDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lmmvy5ffmPaH9EegeOzTeiIwnUyCg7MZtXy eP0+qDDAC/6eR+a5OLCbwiWXiaunP7wUqMnYXrRp8Hor5594IdNlz0AqcoGegQzv R9l9VNVo+Np1OCDtr5MjxbKYekIlFLJfSruJjAhQgEzQKlFzv3lh4GmMFpFayLpn 22KM8v/uO4LhJrWMSGLWlF7tziNy/TB5GcxE+2tZLlbksGBjK6fLA85muVSZHl2H LcQvEh8RtNhAewJo6ZkKYKNU2COXv1EyiBZnq0ZTyNQP8b7clCLXSrFgE9EJTNoO /8yVB+++sSEQLU0dJhjjdJQuTEvgrkq3RnkuUJpIKL1RGV5r9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJy9ginKxgRSRcOKh9oJwTuMsEQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzNmMTkyYTUtNDhhZC0z ZDdkLTg0YmUtZjAzZGUzMjg3ZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFy3sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADejn7AiaGmUfjcwj0NacJSG8fssHIwlJZNar5ao4OAEetdWzdTpMon1 I+jqSbvVt8B86zPkjg4te5Hyfp7441DOQnANJj+l//QFqg/jyRP9PlNBbL+A0JP8 mS04s+tQlxdDDNMvRyBPxs/JnZ+SuGhOSEDIhTTQ98Vc3fh060xPNPS11HD4nEFN KqX7AZ0rPgtk0OvvfkUgN/JUS/dBYGX/20oTWo7BwPIyD/3+yldjmL5yK58swyWC 7y/oE3kcMFti66RSxVFSVIyT1uAhmaXf0ZKr0gELKQuFzkEE6HsE2WGxHvaj6YZE 2oBWLp5cdectmhwT2OmfAAi26DYm6Es= -----END CERTIFICATE-----Generated at Mon Oct 20 02:18:49 2025 by rpki-client