$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec547b50-b18e-3cac-ba0f-fb19061ec6a6.roa File: ec547b50-b18e-3cac-ba0f-fb19061ec6a6.roa (raw, json) Hash identifier: IQI63NN3baWUOLeTvX755g/wPjNviwDkB8c4zHv73S0= Subject key identifier: A0:4B:51:08:79:43:62:7C:66:2F:28:68:AA:D6:AE:E4:A6:1F:F6:2E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0B76CD4DD047D6405725AB40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec547b50-b18e-3cac-ba0f-fb19061ec6a6.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.45.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:cd:4d:d0:47:d6:40:57:25:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=818ef2b3-a41c-4e5a-9d08-c65a2806efbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bd:39:f0:e1:e3:6b:56:f9:91:d0:0f:aa:0a: 87:21:3e:a3:41:58:e9:22:cd:e2:cc:09:cf:d0:c8: af:5a:21:6d:39:df:0d:77:d5:cb:5e:a1:88:cf:d5: 81:f7:38:c3:ba:8a:77:0d:50:40:26:6d:24:bc:1e: 6f:ec:89:a3:3e:59:aa:04:1c:ec:c6:ca:33:34:18: 00:eb:e2:06:58:cd:82:4d:c3:c7:b7:a2:20:b3:d4: 5e:26:3a:26:9a:0c:96:ad:65:f2:93:75:25:8e:17: 89:8c:db:b9:11:66:72:69:3a:91:f7:eb:4c:58:ee: f6:60:17:47:3f:bb:af:48:61:6a:bd:36:e6:b6:0a: 3d:21:a6:ad:7a:86:9d:b2:20:5c:09:97:fc:97:d9: 2d:bb:c9:30:93:a7:0f:72:62:b7:20:14:eb:ef:ef: bc:d4:68:c5:1a:9c:af:3e:f2:e9:21:b0:91:f3:2e: 7a:0e:f6:db:61:f0:01:51:bb:ae:4a:9f:09:f7:1a: 3c:31:84:1e:d4:31:88:43:79:a5:6e:e9:3f:a3:ad: 0f:cd:e5:40:03:17:24:13:03:8c:47:e7:21:e5:a5: 0e:56:0f:33:c8:ba:c7:b2:8b:65:1f:0b:3b:a9:64: cd:7c:c2:53:4a:47:d5:3b:64:c7:4c:3f:63:1e:de: 7a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4B:51:08:79:43:62:7C:66:2F:28:68:AA:D6:AE:E4:A6:1F:F6:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec547b50-b18e-3cac-ba0f-fb19061ec6a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:0a:76:d1:57:d3:c3:f8:13:2b:c8:3c:4b:c9:fd:f2:0d:a8: de:5f:6c:6f:6a:cc:da:fd:3b:a9:65:20:45:7e:91:bb:41:05: 18:c7:3c:27:d7:58:19:8b:10:9e:45:01:e4:f7:01:fe:6a:45: 88:c2:4e:3e:87:00:39:ff:ec:08:01:56:32:bc:73:a4:1c:17: f0:7e:7a:6e:53:13:8b:be:1b:91:23:e1:27:f8:61:59:2f:4a: 00:fc:3e:ba:67:39:f4:a1:37:d8:f7:b5:eb:1f:d1:e4:23:38: 3f:5e:5f:54:75:a4:c7:e2:a1:f6:b3:df:80:9c:69:fb:28:70: 1a:8f:c3:cc:56:34:43:7f:40:15:94:17:11:45:70:27:c3:4e: 4e:b4:43:10:62:33:fa:7a:7b:44:4b:9e:0f:6a:28:af:d1:c2: da:9a:72:b4:92:73:95:1d:6e:0a:d2:15:da:dc:3a:ab:b8:5a: a6:bc:7e:f7:01:49:16:98:fe:f2:c9:bc:83:36:13:19:4b:b3: 7b:f4:9a:a8:ed:5c:ff:25:58:98:43:90:ab:9d:92:3a:af:b5: ec:cb:27:1d:be:8f:61:f0:50:f7:4c:ae:7b:35:cc:c1:4c:e0: 7f:41:f0:b5:5e:86:b5:4e:98:b3:2f:9c:b5:ec:5b:94:2c:8a: a4:59:1e:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLds1N0EfWQFclq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ODE4ZWYyYjMtYTQxYy00ZTVhLTlkMDgtYzY1YTI4MDZlZmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb058OHja1b5kdAPqgqHIT6jQVjpIs3izAnP 0MivWiFtOd8Nd9XLXqGIz9WB9zjDuop3DVBAJm0kvB5v7ImjPlmqBBzsxsozNBgA 6+IGWM2CTcPHt6Igs9ReJjommgyWrWXyk3UljheJjNu5EWZyaTqR9+tMWO72YBdH P7uvSGFqvTbmtgo9IaateoadsiBcCZf8l9ktu8kwk6cPcmK3IBTr7++81GjFGpyv PvLpIbCR8y56DvbbYfABUbuuSp8J9xo8MYQe1DGIQ3mlbuk/o60PzeVAAxckEwOM R+ch5aUOVg8zyLrHsotlHws7qWTNfMJTSkfVO2THTD9jHt561QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBLUQh5Q2J8Zi8oaKrWruSmH/YuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWM1NDdiNTAtYjE4ZS0z Y2FjLWJhMGYtZmIxOTA2MWVjNmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy3PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAKdtFX08P4EyvIPEvJ/fINqN5fbG9qzNr9O6llIEV+kbtBBRjHPCfX WBmLEJ5FAeT3Af5qRYjCTj6HADn/7AgBVjK8c6QcF/B+em5TE4u+G5Ej4Sf4YVkv SgD8PrpnOfShN9j3tesf0eQjOD9eX1R1pMfiofaz34CcafsocBqPw8xWNEN/QBWU FxFFcCfDTk60QxBiM/p6e0RLng9qKK/RwtqacrSSc5UdbgrSFdrcOqu4Wqa8fvcB SRaY/vLJvIM2ExlLs3v0mqjtXP8lWJhDkKudkjqvtezLJx2+j2HwUPdMrns1zMFM 4H9B8LVehrVOmLMvnLXsW5QsiqRZHsI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:32:15 2025 by rpki-client