$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3444ef75-c7e4-3273-828e-13da92d78462.roa File: 3444ef75-c7e4-3273-828e-13da92d78462.roa (raw, json) Hash identifier: rHMeXwGMPvLdVCsvygWr7ulBAoletB4Tnx9IGxbc4FQ= Subject key identifier: 74:B3:AF:91:A9:7F:8A:E8:AE:D9:D7:A1:34:A4:63:8B:8E:64:8E:B3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1C3717F3BB7F5B58D2BCDC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3444ef75-c7e4-3273-828e-13da92d78462.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.45.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:17:f3:bb:7f:5b:58:d2:bc:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=d937d3e3-a9c0-44ed-a4e4-c316557a3fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5b:ed:2c:e5:3e:9c:86:c2:04:b4:d0:f7:4a: 33:3a:c2:9a:0e:ce:e3:97:1c:8d:5d:6c:06:4c:15: 6d:69:a6:33:1d:e5:f4:5a:a1:f4:d2:ee:f6:70:17: bb:ca:15:b5:19:3c:7e:52:3c:8c:d0:28:92:a2:2c: 88:b0:6f:ee:92:22:b5:e8:b1:33:15:86:70:91:d1: b9:d4:af:7b:b7:22:4b:d6:10:d3:c0:ce:2c:cb:a7: 1a:85:d0:b0:69:c1:2c:21:9f:55:4d:3a:ec:3e:63: a6:a6:7c:cf:89:f3:c2:8e:fb:ce:a8:a9:b6:ce:ff: 96:9c:6f:a6:13:d6:2c:8a:b3:79:6a:ce:77:b2:51: 60:cb:2b:fc:dd:18:ee:b4:81:c1:ab:78:25:5f:9f: e4:66:ab:c5:72:e5:b9:88:d9:29:52:f4:f7:4c:ea: 71:89:c8:a3:b2:0d:21:82:db:a5:4e:59:c9:9e:1d: de:08:28:87:0b:04:2b:cd:02:23:8b:89:ad:74:ea: 90:8b:93:6f:92:2a:54:6d:43:b0:c9:19:ee:d6:28: df:a5:04:3c:01:08:79:d7:06:a1:86:b7:5f:28:4b: 38:1e:c3:07:77:0f:b1:e5:8b:9c:e2:9a:3a:63:ba: 52:bf:4b:58:aa:13:e4:fd:19:4d:ff:67:ce:e9:66: 59:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B3:AF:91:A9:7F:8A:E8:AE:D9:D7:A1:34:A4:63:8B:8E:64:8E:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3444ef75-c7e4-3273-828e-13da92d78462.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:df:e8:26:4c:12:79:1c:19:14:8b:19:67:e6:36:f1:9b:59: fb:98:c6:e4:c6:ff:31:6c:7d:43:01:c0:b4:26:f2:ef:36:8c: 65:b7:4d:ad:82:a5:b6:00:3d:1d:6e:d2:89:38:7c:94:ae:c9: 43:c0:31:2d:e4:e7:7b:ee:2b:71:02:5e:e0:31:1a:e4:31:09: bf:5f:2f:69:5b:33:93:1a:04:9b:b2:6e:e6:d6:4b:50:4d:9a: 5e:88:bd:c2:d8:84:f8:23:23:55:cd:e2:06:a9:6f:9e:37:de: 16:9f:52:1a:45:9e:1d:c2:72:6c:74:52:39:31:8d:05:0a:ba: a3:f0:1d:6e:59:62:9c:08:b9:f7:42:a4:7f:1c:f3:d7:9f:65: dc:d5:59:2b:8b:d1:66:63:99:7c:0e:be:c6:81:01:5e:cd:17: bc:f9:4b:69:b5:17:30:1a:f1:60:16:0f:11:3f:c1:9b:7f:30: d5:09:da:4a:7e:2f:d5:b8:ea:be:09:f7:8d:a4:c1:7b:d1:cf: e6:60:59:fa:bb:01:80:8c:e4:3b:52:b7:ff:28:82:c0:04:6e: c3:d9:5d:c5:1d:1d:55:d9:01:c8:6e:f8:fd:2c:24:fb:63:ed: e5:72:98:f3:e8:0d:26:1e:6f:98:fd:58:59:61:87:b2:ff:27: 56:36:63:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNxfzu39bWNK83AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZDkzN2QzZTMtYTljMC00NGVkLWE0ZTQtYzMxNjU1N2EzZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1vtLOU+nIbCBLTQ90ozOsKaDs7jlxyNXWwG TBVtaaYzHeX0WqH00u72cBe7yhW1GTx+UjyM0CiSoiyIsG/ukiK16LEzFYZwkdG5 1K97tyJL1hDTwM4sy6cahdCwacEsIZ9VTTrsPmOmpnzPifPCjvvOqKm2zv+WnG+m E9YsirN5as53slFgyyv83RjutIHBq3glX5/kZqvFcuW5iNkpUvT3TOpxicijsg0h gtulTlnJnh3eCCiHCwQrzQIji4mtdOqQi5NvkipUbUOwyRnu1ijfpQQ8AQh51wah hrdfKEs4HsMHdw+x5Yuc4po6Y7pSv0tYqhPk/RlN/2fO6WZZswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSzr5Gpf4rortnXoTSkY4uOZI6zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzQ0NGVmNzUtYzdlNC0z MjczLTgyOGUtMTNkYTkyZDc4NDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFy0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFff6CZMEnkcGRSLGWfmNvGbWfuYxuTG/zFsfUMBwLQm8u82jGW3Ta2C pbYAPR1u0ok4fJSuyUPAMS3k53vuK3ECXuAxGuQxCb9fL2lbM5MaBJuybubWS1BN ml6IvcLYhPgjI1XN4gapb5433hafUhpFnh3Ccmx0UjkxjQUKuqPwHW5ZYpwIufdC pH8c89efZdzVWSuL0WZjmXwOvsaBAV7NF7z5S2m1FzAa8WAWDxE/wZt/MNUJ2kp+ L9W46r4J942kwXvRz+ZgWfq7AYCM5DtSt/8ogsAEbsPZXcUdHVXZAchu+P0sJPtj 7eVymPPoDSYeb5j9WFlhh7L/J1Y2Y/w= -----END CERTIFICATE-----Generated at Tue Nov 4 22:44:05 2025 by rpki-client