$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f294b684-a171-3d29-a607-3d1262423ad6.roa File: f294b684-a171-3d29-a607-3d1262423ad6.roa (raw, json) Hash identifier: HZZ+sZ6zmSDsE/Y1CDe8Jh1dfYJOEKXLkYG3eJDlqvM= Subject key identifier: 5A:E2:5B:25:30:B2:73:ED:FB:4D:46:F9:9D:38:9C:65:4D:4E:5E:FD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4BAC5546CEF790874E506B50 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f294b684-a171-3d29-a607-3d1262423ad6.roa Signing time: Wed 24 Sep 2025 01:00:31 +0000 ROA not before: Wed 24 Sep 2025 01:00:31 +0000 ROA not after: Tue 23 Dec 2025 02:00:31 +0000 asID: 20940 IP address blocks: 23.45.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:ac:55:46:ce:f7:90:87:4e:50:6b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 01:00:31 2025 GMT Not After : Dec 23 02:00:31 2025 GMT Subject: CN=1ecc64ee-449c-4052-a891-bb73f6de2347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:14:f6:59:9c:83:7d:f4:2a:5c:95:1e:96:03: 9f:0a:6d:62:79:fd:29:e0:29:e0:8c:76:1b:89:a8: 87:13:ce:ca:92:fc:d1:23:dd:35:64:a1:19:12:89: 9e:4e:68:c1:ec:99:2e:b4:3d:f2:05:38:4e:ef:cc: 30:f3:c6:58:53:c5:0d:d1:d9:a4:2b:53:34:d1:40: a4:bb:18:74:09:7d:b3:2d:28:5f:ee:71:b3:04:08: 73:da:c5:ae:a8:a6:23:00:bc:f6:f7:7d:0b:ef:a8: 26:4f:56:a2:94:98:dc:2a:28:59:53:36:63:76:32: c3:ca:e9:1c:5c:a6:74:c9:db:d5:96:1e:d4:db:42: 95:8c:08:f3:e2:46:b2:0d:7a:b4:33:08:83:8c:91: 56:c9:9a:0b:45:aa:53:25:f3:5d:48:b0:94:5b:e1: f5:f3:53:cb:55:2a:f3:38:43:17:f9:e4:8e:87:17: 41:4f:38:3a:54:6a:a7:db:c8:0a:af:21:1f:05:01: 86:26:cd:e7:33:22:a9:c0:45:68:f9:a9:63:8d:c8: fc:03:88:8f:bf:fe:de:46:55:cd:d2:e7:fa:d6:c3: 07:e3:3b:6a:96:ee:09:c1:0b:d1:cd:2e:4c:33:8b: 39:a6:bb:f5:f6:0f:23:11:31:d1:af:e4:5e:72:3e: 2e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E2:5B:25:30:B2:73:ED:FB:4D:46:F9:9D:38:9C:65:4D:4E:5E:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f294b684-a171-3d29-a607-3d1262423ad6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:7e:65:9d:48:18:85:06:05:96:3f:de:23:bd:ba:42:27:c7: 63:0e:c4:5f:6d:37:ee:83:eb:e2:37:7e:59:1c:53:ed:cc:63: 46:aa:aa:d3:93:b8:fb:52:01:92:76:31:95:a6:62:27:16:60: 08:44:fb:7a:e2:a5:d4:8a:f3:43:51:be:7f:10:90:e5:60:eb: f4:a2:05:e8:67:ac:d1:e5:00:77:4a:80:e5:d0:8f:07:67:0b: d8:b5:43:53:6e:f7:f1:58:14:40:59:cd:a2:c3:11:c1:75:a1: a5:20:d8:f1:e3:a5:69:19:27:00:fe:10:ac:96:eb:f2:60:0a: 1b:30:a2:8d:f0:db:ac:b3:47:f0:0e:84:f0:bd:7b:e6:8f:59: 9f:36:d3:02:50:ef:bc:4a:0e:2b:99:9d:30:06:7b:ea:fb:cb: 45:57:65:86:28:d6:e5:19:69:5a:fb:68:e5:0f:3c:69:06:84: 58:5c:58:9a:d5:dd:31:5b:a6:30:f0:9e:09:ac:9b:ef:85:c8: c8:54:a9:4d:86:77:01:b3:d1:e6:d9:db:7d:47:83:ba:6e:6b: c4:6a:ae:f2:02:1c:ab:06:57:81:1e:82:ce:58:d2:75:c8:66: 3e:b4:2a:4b:2e:7b:3e:17:37:35:49:64:ed:79:1d:aa:3a:47: 46:5f:28:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtLrFVGzveQh05Qa1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk MWVjYzY0ZWUtNDQ5Yy00MDUyLWE4OTEtYmI3M2Y2ZGUyMzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxT2WZyDffQqXJUelgOfCm1ief0p4CngjHYb iaiHE87KkvzRI901ZKEZEomeTmjB7JkutD3yBThO78ww88ZYU8UN0dmkK1M00UCk uxh0CX2zLShf7nGzBAhz2sWuqKYjALz2930L76gmT1ailJjcKihZUzZjdjLDyukc XKZ0ydvVlh7U20KVjAjz4kayDXq0MwiDjJFWyZoLRapTJfNdSLCUW+H181PLVSrz OEMX+eSOhxdBTzg6VGqn28gKryEfBQGGJs3nMyKpwEVo+aljjcj8A4iPv/7eRlXN 0uf61sMH4ztqlu4JwQvRzS5MM4s5prv19g8jETHRr+Recj4uswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFriWyUwsnPt+01G+Z04nGVNTl79MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjI5NGI2ODQtYTE3MS0z ZDI5LWE2MDctM2QxMjYyNDIzYWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy0mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFl+ZZ1IGIUGBZY/3iO9ukInx2MOxF9tN+6D6+I3flkcU+3MY0aqqtOT uPtSAZJ2MZWmYicWYAhE+3ripdSK80NRvn8QkOVg6/SiBehnrNHlAHdKgOXQjwdn C9i1Q1Nu9/FYFEBZzaLDEcF1oaUg2PHjpWkZJwD+EKyW6/JgChswoo3w26yzR/AO hPC9e+aPWZ820wJQ77xKDiuZnTAGe+r7y0VXZYYo1uUZaVr7aOUPPGkGhFhcWJrV 3TFbpjDwngmsm++FyMhUqU2GdwGz0ebZ231Hg7pua8RqrvICHKsGV4Eegs5Y0nXI Zj60Kksuez4XNzVJZO15Hao6R0ZfKK0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:34:46 2025 by rpki-client