$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45b2d641-2b0d-339d-a6c8-3bfdd22e4695.roa File: 45b2d641-2b0d-339d-a6c8-3bfdd22e4695.roa (raw, json) Hash identifier: ABi2l+uBoDVOeNgbr/uC/m+ibc5a0vZgLunAumvd+Oo= Subject key identifier: 4D:16:F4:EE:E2:8B:5B:8B:F6:A1:8F:6D:1C:21:D3:DC:AE:CB:91:EE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AFC1C16A06A0741809F4B41B0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45b2d641-2b0d-339d-a6c8-3bfdd22e4695.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.47.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:16:a0:6a:07:41:80:9f:4b:41:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=e042acaf-0cca-44f4-8f83-ca64c38b5d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b7:69:b2:85:a7:97:90:68:fe:32:c8:db:c5: dd:a5:4b:77:15:cf:6d:c4:0a:f1:87:55:fc:4b:58: 6c:47:da:3f:e0:de:89:2e:ac:84:d8:45:b7:ee:a8: 6b:4f:db:c9:b0:a7:e7:fc:8c:59:24:ac:89:47:b0: 65:bc:a8:bf:49:c9:59:39:33:f9:93:80:2d:e8:87: e4:6f:e4:8f:85:56:36:34:ca:5a:6e:6e:c0:a7:27: 97:79:21:22:58:97:ed:41:ea:01:0a:97:b7:0c:e7: fe:aa:0c:32:10:c1:b3:4d:de:84:8e:e7:6f:82:d7: 2f:0c:a9:56:b7:74:04:84:f8:ef:06:0e:ae:dd:9f: 21:f2:84:3e:6a:18:47:da:a9:53:e2:92:45:6a:32: fc:93:4b:5b:b1:b1:c0:62:4d:b4:c5:ce:ec:b7:76: fb:eb:65:8b:c8:a4:c3:b8:6d:0f:68:71:1b:70:32: e5:d4:28:50:b8:f2:be:1f:e7:57:44:57:65:62:fc: c4:00:a7:a7:7a:33:3e:ba:84:a3:54:c5:df:9a:1b: 32:36:0d:ac:54:88:e6:dc:5b:4d:2a:df:c5:c3:6d: ba:52:bf:79:b9:d8:87:84:55:f2:4b:5d:de:27:03: 74:1d:8e:5d:25:b4:87:1e:2a:52:57:d3:0d:78:3b: 62:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:16:F4:EE:E2:8B:5B:8B:F6:A1:8F:6D:1C:21:D3:DC:AE:CB:91:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45b2d641-2b0d-339d-a6c8-3bfdd22e4695.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.47.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:b3:2b:44:a2:a7:8c:55:b9:77:d5:34:ab:88:c7:76:2a:15: 2e:1d:13:6b:33:37:5d:8c:96:91:f5:bf:a5:f3:b8:6f:78:1d: 9f:ab:b2:63:32:2a:95:6b:33:b7:4a:d3:0e:fd:68:c8:93:56: ef:51:f7:16:56:49:80:ed:60:ca:2e:15:c5:6d:88:c1:e1:84: 59:f1:c3:7f:82:30:05:b1:e2:7b:60:bc:5f:61:aa:12:79:1a: b7:62:79:da:bb:d6:3e:65:9d:87:7c:6c:8f:68:16:a8:f1:34: 60:9a:8c:e1:ff:9b:d5:9b:52:ff:e0:19:29:a7:75:55:64:4f: 90:28:9d:4b:9b:0f:bd:e3:71:d3:88:f8:4f:88:69:ad:66:67: dc:2e:c9:15:07:37:41:ea:64:80:fa:d4:69:72:ae:a3:8a:8b: 4d:18:a6:f2:c0:3a:a4:cd:f7:3b:b7:9e:2b:32:85:4c:dd:51: 10:35:97:d4:ef:58:23:9a:02:e6:61:7a:7a:52:92:d3:d5:ae: 1c:cd:93:ec:18:52:3d:ce:54:3f:aa:3e:fa:d7:6f:12:8f:cd: 96:ec:f4:fd:4a:73:44:e5:6b:5f:04:35:ca:b9:96:6c:27:df: 3b:62:4d:6b:b7:ec:79:5d:d8:8f:7f:3f:0f:9d:f8:52:13:46: ad:df:43:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HBagagdBgJ9LQbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZTA0MmFjYWYtMGNjYS00NGY0LThmODMtY2E2NGMzOGI1ZDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7dpsoWnl5Bo/jLI28XdpUt3Fc9txArxh1X8 S1hsR9o/4N6JLqyE2EW37qhrT9vJsKfn/IxZJKyJR7BlvKi/SclZOTP5k4At6Ifk b+SPhVY2NMpabm7ApyeXeSEiWJftQeoBCpe3DOf+qgwyEMGzTd6EjudvgtcvDKlW t3QEhPjvBg6u3Z8h8oQ+ahhH2qlT4pJFajL8k0tbsbHAYk20xc7st3b762WLyKTD uG0PaHEbcDLl1ChQuPK+H+dXRFdlYvzEAKenejM+uoSjVMXfmhsyNg2sVIjm3FtN Kt/Fw226Ur95udiHhFXyS13eJwN0HY5dJbSHHipSV9MNeDtiTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0W9O7ii1uL9qGPbRwh09yuy5HuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDViMmQ2NDEtMmIwZC0z MzlkLWE2YzgtM2JmZGQyMmU0Njk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFy/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGzK0Sip4xVuXfVNKuIx3YqFS4dE2szN12MlpH1v6XzuG94HZ+rsmMy KpVrM7dK0w79aMiTVu9R9xZWSYDtYMouFcVtiMHhhFnxw3+CMAWx4ntgvF9hqhJ5 Grdiedq71j5lnYd8bI9oFqjxNGCajOH/m9WbUv/gGSmndVVkT5AonUubD73jcdOI +E+Iaa1mZ9wuyRUHN0HqZID61GlyrqOKi00YpvLAOqTN9zu3nisyhUzdURA1l9Tv WCOaAuZhenpSktPVrhzNk+wYUj3OVD+qPvrXbxKPzZbs9P1Kc0Tla18ENcq5lmwn 3ztiTWu37Hld2I9/Pw+d+FITRq3fQ0I= -----END CERTIFICATE-----Generated at Sat Sep 6 09:59:41 2025 by rpki-client