$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7c95f51-6104-3013-bb4c-12d4e2e9bf90.roa File: c7c95f51-6104-3013-bb4c-12d4e2e9bf90.roa (raw, json) Hash identifier: 2IeOD4o+PcSNfpXALt5g7mqFLBL9L8uNqMnPIxLAGIA= Subject key identifier: 20:A7:C3:6A:7D:B9:53:C4:FA:2F:88:7D:38:9D:A2:47:7A:CE:DE:2D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA0D249F8C6D13104947E2800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7c95f51-6104-3013-bb4c-12d4e2e9bf90.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 24319 IP address blocks: 23.45.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:49:f8:c6:d1:31:04:94:7e:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=33e7df79-e309-4321-be29-4c29259db6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:19:56:49:a0:f4:6f:a1:b9:eb:b9:58:70:f8: d3:0a:f7:76:6c:1e:65:a0:cf:a0:c9:3d:09:3a:a1: 24:c3:9a:5f:59:b1:63:95:36:56:ab:b8:a9:3e:69: 6c:c4:04:ce:0c:99:22:49:48:94:5c:be:47:06:c9: 88:be:4e:b4:1b:8a:3a:8b:ce:65:7e:4b:3e:62:21: 76:ab:6e:a8:6d:8d:71:12:99:63:2b:81:81:22:0e: b8:d8:fa:22:c4:54:c2:4d:9d:f8:37:66:8f:c5:50: e6:db:65:ea:d3:5c:77:e7:a3:ae:35:05:d7:bb:0c: 29:47:dc:1d:63:4f:af:37:70:17:8a:89:ac:7c:79: 96:b4:dd:33:52:79:d3:89:f1:0e:1a:9b:a6:61:ad: fc:14:56:f3:2d:ba:7d:a2:8f:c2:cf:03:79:ee:a6: af:7a:fd:ad:93:f0:fb:d6:f7:60:8a:f5:8e:34:37: f2:da:e0:1f:ca:b9:06:08:48:bc:da:0a:df:ac:0b: 15:fc:1d:3b:1d:44:91:f7:ea:11:9a:06:ec:61:85: 5d:64:8e:1d:af:00:cd:07:3e:17:79:f1:8a:d9:fe: 07:6f:43:43:d8:d6:c9:64:0c:59:37:73:0d:6a:b3: 52:65:45:88:c9:55:52:f2:ba:dc:5d:00:18:e2:26: 99:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A7:C3:6A:7D:B9:53:C4:FA:2F:88:7D:38:9D:A2:47:7A:CE:DE:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7c95f51-6104-3013-bb4c-12d4e2e9bf90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:1d:17:4b:8a:e8:10:60:fd:30:03:79:86:f0:6b:54:55:c1: bc:d4:3b:19:e5:b7:54:22:f2:40:d1:eb:bf:3c:fd:b1:da:60: 41:5a:08:f1:47:7b:f6:83:15:7b:c5:2a:48:e0:94:bc:14:03: bd:60:08:31:94:7b:50:ff:cd:30:54:2e:87:48:1b:0a:f7:5b: 73:ec:28:52:6a:0d:3c:9c:fb:be:71:ce:34:06:14:89:d7:29: f1:8c:0d:6b:f7:38:d0:e5:04:2c:9e:cf:64:7f:56:a4:32:b9: 2d:ab:ba:35:72:b1:76:d7:57:42:79:6f:d9:af:eb:bf:86:29: 3a:85:f7:f6:19:79:10:c8:35:ec:68:3d:21:32:ea:c2:f5:05: 6c:11:fe:f5:75:da:97:d0:34:00:57:44:ee:db:d0:07:82:64: 4b:cd:e6:42:34:60:d4:b5:fe:11:ab:6d:b9:42:46:66:0d:b6: f9:78:97:5d:2d:a1:34:30:a5:41:2b:41:7e:3e:55:78:3b:54: 49:95:89:96:fc:d7:6f:d8:33:d7:c8:7a:0e:91:e5:71:e2:a4: ad:c2:c1:6b:1f:cc:12:a9:11:0b:43:c7:a7:0f:23:0d:3e:6d: 23:57:b4:a8:cd:56:40:a3:79:13:a9:af:3d:52:a9:f4:21:25: 17:60:b9:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0kn4xtExBJR+KAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MzNlN2RmNzktZTMwOS00MzIxLWJlMjktNGMyOTI1OWRiNmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RlWSaD0b6G567lYcPjTCvd2bB5loM+gyT0J OqEkw5pfWbFjlTZWq7ipPmlsxATODJkiSUiUXL5HBsmIvk60G4o6i85lfks+YiF2 q26obY1xEpljK4GBIg642PoixFTCTZ34N2aPxVDm22Xq01x356OuNQXXuwwpR9wd Y0+vN3AXiomsfHmWtN0zUnnTifEOGpumYa38FFbzLbp9oo/CzwN57qavev2tk/D7 1vdgivWONDfy2uAfyrkGCEi82grfrAsV/B07HUSR9+oRmgbsYYVdZI4drwDNBz4X efGK2f4Hb0ND2NbJZAxZN3MNarNSZUWIyVVS8rrcXQAY4iaZAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCnw2p9uVPE+i+IfTidokd6zt4tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzdjOTVmNTEtNjEwNC0z MDEzLWJiNGMtMTJkNGUyZTliZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy2yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIdF0uK6BBg/TADeYbwa1RVwbzUOxnlt1Qi8kDR6788/bHaYEFaCPFH e/aDFXvFKkjglLwUA71gCDGUe1D/zTBULodIGwr3W3PsKFJqDTyc+75xzjQGFInX KfGMDWv3ONDlBCyez2R/VqQyuS2rujVysXbXV0J5b9mv67+GKTqF9/YZeRDINexo PSEy6sL1BWwR/vV12pfQNABXRO7b0AeCZEvN5kI0YNS1/hGrbblCRmYNtvl4l10t oTQwpUErQX4+VXg7VEmViZb812/YM9fIeg6R5XHipK3CwWsfzBKpEQtDx6cPIw0+ bSNXtKjNVkCjeROprz1SqfQhJRdguRs= -----END CERTIFICATE-----Generated at Tue Nov 4 22:17:23 2025 by rpki-client