$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f30b5263-0a94-3ba3-93ef-091965aa72b8.roa File: f30b5263-0a94-3ba3-93ef-091965aa72b8.roa (raw, json) Hash identifier: KpyV/bAWnXRkG182/QM1Yjl9NZ7auUYymZuFrtb+AeE= Subject key identifier: B1:10:B2:1B:22:DD:9B:6F:66:0E:CB:0C:CB:72:00:FD:E0:D3:E4:45 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1C37199976131A62538E6340 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f30b5263-0a94-3ba3-93ef-091965aa72b8.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.45.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:19:99:76:13:1a:62:53:8e:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=babdd57d-92f0-4887-8a82-250da1f0d0ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5d:49:d1:c8:ec:20:f0:cc:d9:cf:81:31:45: fa:8c:30:54:47:5a:d2:cd:75:72:5a:52:b4:9c:f8: c0:07:7f:9e:81:cf:bd:f5:4a:ff:a0:6d:51:8e:f4: bc:1a:2a:0f:11:8a:56:7a:52:fa:94:71:72:5c:37: 05:cc:26:53:bd:02:1d:f8:66:9d:c7:0b:34:b9:09: 31:f8:89:e1:fe:7f:1c:2a:9d:84:be:7f:55:fc:82: 10:40:6d:8a:56:86:ee:ae:78:7d:af:8b:1d:4b:57: 98:ad:7d:64:af:13:57:69:f3:31:92:de:8c:d2:20: 4c:76:a2:ad:55:1e:b1:07:2c:54:4c:26:05:9e:54: fb:7b:10:d1:34:bf:5d:c7:88:52:a1:95:ba:2a:07: 23:e4:c3:f2:30:da:47:a6:30:16:53:2a:11:c3:e2: f0:e0:cf:7d:3f:fd:a5:04:6d:4e:c5:90:42:15:54: e0:27:37:4e:19:21:8c:d6:e0:29:2c:7d:7d:c3:80: fb:be:db:21:2a:9f:0a:36:02:b4:1a:d8:27:44:6d: c2:c1:1f:0e:02:3f:6d:e9:be:2e:ba:fb:d2:76:37: f4:12:a3:85:37:1e:26:a9:7d:17:81:08:cd:15:32: 01:fb:33:a3:0b:f3:54:0e:a3:ec:8d:be:47:52:13: 07:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:10:B2:1B:22:DD:9B:6F:66:0E:CB:0C:CB:72:00:FD:E0:D3:E4:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f30b5263-0a94-3ba3-93ef-091965aa72b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:1f:56:9c:be:f1:29:ea:52:ad:57:e3:fc:b8:21:5b:65:79: 14:53:16:02:5d:af:60:68:e9:64:e7:d5:23:31:8f:76:ae:ee: d0:72:f2:79:b6:27:98:f9:bf:bc:52:48:da:38:54:3b:e1:3a: 78:73:b5:29:73:97:a3:fa:69:55:e2:98:0a:be:56:fc:85:c1: 01:2d:4c:56:cc:cd:5b:83:5c:c9:b7:a7:85:cf:67:a4:86:f0: ce:33:37:07:d9:7f:c1:1f:a4:28:67:90:dd:35:fa:ff:a0:5a: 58:0e:7a:bb:11:91:6b:8d:67:a1:81:2b:3b:5d:57:7e:11:75: 88:fa:49:a2:93:0d:da:39:58:95:91:80:6c:6f:cc:ab:70:73: 68:64:42:e1:c9:1c:97:9d:f7:b7:e0:b8:88:c3:2a:92:ce:71: c3:8d:33:1b:a3:d0:f9:c4:7f:2c:ce:8a:c7:0d:bf:d9:03:89: 64:09:9e:f0:af:b3:ff:6a:32:75:3c:b6:73:7a:42:d3:05:c4: a1:90:71:81:04:a6:2f:62:8b:1f:17:f2:bd:dc:31:c9:32:3b: b3:d2:7a:b3:dc:0f:b3:ba:23:a0:71:64:3f:cf:ab:a3:07:98: 4b:bf:f7:f4:d5:34:b7:e7:06:d7:de:6f:a0:e3:a1:e0:3f:fd: ed:d2:13:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNxmZdhMaYlOOY0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YmFiZGQ1N2QtOTJmMC00ODg3LThhODItMjUwZGExZjBkMGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF1J0cjsIPDM2c+BMUX6jDBUR1rSzXVyWlK0 nPjAB3+egc+99Ur/oG1RjvS8GioPEYpWelL6lHFyXDcFzCZTvQId+Gadxws0uQkx +Inh/n8cKp2Evn9V/IIQQG2KVoburnh9r4sdS1eYrX1krxNXafMxkt6M0iBMdqKt VR6xByxUTCYFnlT7exDRNL9dx4hSoZW6Kgcj5MPyMNpHpjAWUyoRw+Lw4M99P/2l BG1OxZBCFVTgJzdOGSGM1uApLH19w4D7vtshKp8KNgK0GtgnRG3CwR8OAj9t6b4u uvvSdjf0EqOFNx4mqX0XgQjNFTIB+zOjC/NUDqPsjb5HUhMH2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEQshsi3ZtvZg7LDMtyAP3g0+RFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjMwYjUyNjMtMGE5NC0z YmEzLTkzZWYtMDkxOTY1YWE3MmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFy2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4fVpy+8SnqUq1X4/y4IVtleRRTFgJdr2Bo6WTn1SMxj3au7tBy8nm2 J5j5v7xSSNo4VDvhOnhztSlzl6P6aVXimAq+VvyFwQEtTFbMzVuDXMm3p4XPZ6SG 8M4zNwfZf8EfpChnkN01+v+gWlgOersRkWuNZ6GBKztdV34RdYj6SaKTDdo5WJWR gGxvzKtwc2hkQuHJHJed97fguIjDKpLOccONMxuj0PnEfyzOiscNv9kDiWQJnvCv s/9qMnU8tnN6QtMFxKGQcYEEpi9iix8X8r3cMckyO7PSerPcD7O6I6BxZD/Pq6MH mEu/9/TVNLfnBtfeb6DjoeA//e3SEz4= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:04 2025 by rpki-client