$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/23f9a47e-4a54-3594-b2ad-43440c42e86e.roa File: 23f9a47e-4a54-3594-b2ad-43440c42e86e.roa (raw, json) Hash identifier: nSxMrYlWjZNCT6h9IxFWkDvOyA/i57hOU/9oat1E7tY= Subject key identifier: E6:43:79:44:3F:68:60:90:1F:72:18:C8:D4:67:5F:64:DF:D6:EE:3A Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F4328584AC016280C85D5E5EFAF8663C0 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/23f9a47e-4a54-3594-b2ad-43440c42e86e.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 396982 IP address blocks: 206.201.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:28:0c:85:d5:e5:ef:af:86:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=b8539dc5-b919-4b21-bf8d-4e20943ed398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ea:be:59:e6:59:47:ed:e1:bf:64:a5:31:38: bc:b2:e5:a0:15:32:7f:d0:0b:6d:c1:42:76:f7:df: f7:5a:4c:46:79:59:2e:72:69:63:77:5e:9b:28:f0: 68:06:4f:e5:b6:1d:c1:b9:65:25:8f:55:a2:fc:2b: b3:d3:68:81:0d:64:ed:cd:0b:c2:60:c2:e1:36:88: 79:13:49:c1:f2:3b:78:b1:3d:28:a3:60:13:ef:d0: ec:af:85:52:ed:22:64:92:49:d7:52:be:23:2f:86: ec:bd:ed:b1:4b:7a:9f:6c:78:86:08:6f:40:dc:32: cf:03:32:39:d0:eb:d2:41:4a:3a:23:f5:94:6b:f4: 8f:51:5c:d4:fe:f1:5f:b0:58:95:ed:a8:54:65:d9: 7a:92:b9:cc:9a:d5:f2:1d:54:22:3f:d2:48:e5:56: 73:73:a2:a9:e6:64:ce:f9:4f:9d:08:14:ad:01:ec: 7b:03:81:b9:6e:b5:34:f5:b6:ff:14:48:06:7b:bd: e1:31:f9:95:38:23:77:27:9c:11:24:ed:44:e4:8c: 5d:0a:a8:95:85:6c:ab:b0:f0:df:67:53:70:b0:e9: f9:f7:3a:25:62:37:76:ac:f1:3a:fe:e8:db:4b:f8: d0:b3:f5:1b:6c:07:0b:7a:ff:f5:0f:b1:8a:52:d4: 47:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:43:79:44:3F:68:60:90:1F:72:18:C8:D4:67:5F:64:DF:D6:EE:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/23f9a47e-4a54-3594-b2ad-43440c42e86e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 206.201.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:de:ea:05:d4:a4:0e:86:73:2f:33:52:43:3b:13:52:fa:b7: ef:71:88:96:6f:b6:70:05:8c:ba:24:c0:17:22:f7:d0:2a:45: 49:06:56:c2:e3:30:9d:b1:49:3b:66:ab:9f:31:fc:b9:ca:fe: 96:e1:9e:b9:44:d3:9a:6d:e6:0f:21:2c:cc:34:0a:15:9b:9b: 5c:c6:5a:2a:53:1b:c4:63:7d:8a:a2:b5:ed:ee:85:70:33:bd: 1d:52:13:8c:23:61:6e:5b:e3:da:b4:54:65:54:13:86:3f:cd: 0e:9e:d3:52:33:f3:9f:df:a4:8a:ca:a6:1a:f1:1b:6d:95:9c: 92:96:59:b1:a6:ce:9c:b2:59:c0:83:0b:ae:cc:11:7e:3f:6a: 4b:25:77:60:4a:73:a3:d2:9c:9c:be:e1:6d:65:79:e0:bc:56: 23:a6:ef:2e:3e:ab:e5:ad:75:11:b5:77:42:6a:b5:39:6c:71: 4d:4b:5c:eb:8f:a0:bb:fb:ec:34:dc:6e:cb:46:74:fa:64:3c: 27:33:7e:44:00:98:10:92:51:c1:fd:f0:30:b9:aa:04:d2:53: 9d:86:9c:06:76:f8:d7:df:61:4b:dc:32:3e:3e:e8:89:1f:55: 05:c5:bf:a0:57:70:d0:67:54:83:8a:84:76:aa:df:a0:cd:fe: 89:c4:1d:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFigMhdXl76+GY8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk Yjg1MzlkYzUtYjkxOS00YjIxLWJmOGQtNGUyMDk0M2VkMzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeq+WeZZR+3hv2SlMTi8suWgFTJ/0AttwUJ2 99/3WkxGeVkucmljd16bKPBoBk/lth3BuWUlj1Wi/Cuz02iBDWTtzQvCYMLhNoh5 E0nB8jt4sT0oo2AT79Dsr4VS7SJkkknXUr4jL4bsve2xS3qfbHiGCG9A3DLPAzI5 0OvSQUo6I/WUa/SPUVzU/vFfsFiV7ahUZdl6krnMmtXyHVQiP9JI5VZzc6Kp5mTO +U+dCBStAex7A4G5brU09bb/FEgGe73hMfmVOCN3J5wRJO1E5IxdCqiVhWyrsPDf Z1NwsOn59zolYjd2rPE6/ujbS/jQs/UbbAcLev/1D7GKUtRHLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZDeUQ/aGCQH3IYyNRnX2Tf1u46MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvMjNmOWE0N2UtNGE1NC0z NTk0LWIyYWQtNDM0NDBjNDJlODZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzsk8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbe6gXUpA6Gcy8zUkM7E1L6t+9xiJZvtnAFjLokwBci99AqRUkGVsLj MJ2xSTtmq58x/LnK/pbhnrlE05pt5g8hLMw0ChWbm1zGWipTG8RjfYqite3uhXAz vR1SE4wjYW5b49q0VGVUE4Y/zQ6e01Iz85/fpIrKphrxG22VnJKWWbGmzpyyWcCD C67MEX4/aksld2BKc6PSnJy+4W1leeC8ViOm7y4+q+WtdRG1d0JqtTlscU1LXOuP oLv77DTcbstGdPpkPCczfkQAmBCSUcH98DC5qgTSU52GnAZ2+NffYUvcMj4+6Ikf VQXFv6BXcNBnVIOKhHaq36DN/onEHeM= -----END CERTIFICATE-----Generated at Mon Aug 25 06:16:44 2025 by rpki-client