$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/435854e9-84df-339d-b3dc-d2cf4ace8d7b.roa File: 435854e9-84df-339d-b3dc-d2cf4ace8d7b.roa (raw, json) Hash identifier: 4AlgL/85fIGhXYA0v7JtdGJuYcrHP+8F62eNBzTXKi8= Subject key identifier: F8:73:C1:54:F7:B1:26:4E:7C:94:9C:A5:27:F6:6F:29:25:9F:A1:F8 Certificate issuer: /CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b Certificate serial: 010D0C9F4328584AF0F153BBC225349015D97500 Authority key identifier: 6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/435854e9-84df-339d-b3dc-d2cf4ace8d7b.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 398951 IP address blocks: 23.130.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:53:bb:c2:25:34:90:15:d9:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=e55c8449-9e0b-47bb-a0db-89e4b37eff6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:28:61:7f:93:6a:e1:3a:9b:1d:5e:6c:b3:1d: 5f:ce:8f:bd:0b:d7:cd:7e:f6:b7:be:c1:7c:6e:16: 42:47:e7:f0:c4:8b:86:3c:17:f2:d8:3a:41:b6:9b: 0a:66:b0:ff:a6:d1:24:2f:45:71:69:47:8c:0f:ff: 64:4e:96:e2:5d:31:e3:87:3a:96:48:d1:78:d4:b1: 7d:f1:1c:cc:f8:f3:cf:b5:e8:3f:d4:30:16:70:4c: 17:c2:05:b8:b8:14:30:36:be:9f:c8:1e:8d:e6:27: f7:17:83:5d:6c:c1:a8:ce:50:f9:8a:a7:56:0e:d6: 3a:33:ae:d5:aa:b7:a5:27:bd:38:a8:e7:a2:ea:65: d9:b3:70:20:42:bb:0c:7c:b2:f8:ba:6e:e3:1e:37: a9:46:47:61:4e:ba:1f:53:ff:fc:bc:75:fa:f1:da: ba:82:66:2c:1b:fd:da:3e:72:ac:6f:0b:d2:1a:ce: 84:49:82:7f:28:78:78:87:2d:c7:88:67:b9:f4:0b: c1:af:54:66:55:56:3c:20:75:1f:eb:8d:aa:15:5d: 22:21:69:19:8f:31:15:e6:ca:f7:a5:ab:25:e6:1c: 54:ad:ee:ce:89:ae:54:6f:d3:ba:fd:d4:d7:82:9e: b4:ab:92:29:93:42:00:59:c9:7d:1e:aa:a7:8a:23: 70:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:73:C1:54:F7:B1:26:4E:7C:94:9C:A5:27:F6:6F:29:25:9F:A1:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/435854e9-84df-339d-b3dc-d2cf4ace8d7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl X509v3 Authority Key Identifier: keyid:6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer sbgp-ipAddrBlock: critical IPv4: 23.130.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:06:df:fe:11:8a:22:f0:0c:52:ed:83:cb:3b:43:fe:59:f3: d3:ed:6a:6d:03:78:28:df:d9:01:2c:77:3b:c8:c4:8a:8d:74: 71:15:16:92:fb:f6:41:ca:65:4d:db:9d:92:22:b2:4f:4e:1d: 32:98:f3:6b:8d:d0:8b:87:8a:59:54:13:72:f8:1a:6b:b2:d1: db:85:7e:61:7d:c5:65:74:8c:bc:44:40:79:4f:17:e2:c7:58: e6:75:9e:ba:f1:da:dd:d3:8a:ba:c0:af:f9:46:d0:0e:fa:c6: 78:75:22:7f:73:31:0a:a4:58:e5:ff:13:09:77:e6:06:73:eb: 4e:d9:75:e8:49:68:b2:8b:04:97:64:90:0c:a4:7e:89:ff:09: 77:ed:72:ba:3e:ff:36:bf:b6:4a:0c:ab:1f:9f:5a:d5:2a:cb: 2d:74:e8:65:67:20:6b:fb:7b:2c:54:97:2d:3d:36:87:d3:7e: ea:53:3b:2c:df:85:39:c8:44:6a:04:50:2c:7c:d4:b4:91:7b: 60:f1:d8:b9:c1:74:ed:30:23:2f:3b:97:28:9d:66:b3:1d:13: e0:c5:19:15:4b:f3:71:3c:75:0e:7c:b3:e6:8a:d5:6b:41:31: 77:25:a9:4a:45:fd:4e:bf:c1:ce:aa:93:97:6d:e2:d4:bd:0e: 5e:8d:21:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8VO7wiU0kBXZdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmNWNkOGEtZjkwMy00MTc2LTk3YTctNjY3MWU0OWIx YzliMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZTU1Yzg0NDktOWUwYi00N2JiLWEwZGItODllNGIzN2VmZjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiihhf5Nq4TqbHV5ssx1fzo+9C9fNfva3vsF8 bhZCR+fwxIuGPBfy2DpBtpsKZrD/ptEkL0VxaUeMD/9kTpbiXTHjhzqWSNF41LF9 8RzM+PPPteg/1DAWcEwXwgW4uBQwNr6fyB6N5if3F4NdbMGozlD5iqdWDtY6M67V qrelJ704qOei6mXZs3AgQrsMfLL4um7jHjepRkdhTrofU//8vHX68dq6gmYsG/3a PnKsbwvSGs6ESYJ/KHh4hy3HiGe59AvBr1RmVVY8IHUf642qFV0iIWkZjzEV5sr3 pasl5hxUre7Oia5Ub9O6/dTXgp60q5Ipk0IAWcl9HqqniiNwmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhzwVT3sSZOfJScpSf2bykln6H4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84NmY1 Y2Q4YS1mOTAzLTQxNzYtOTdhNy02NjcxZTQ5YjFjOWIvNDM1ODU0ZTktODRkZi0z MzlkLWIzZGMtZDJjZjRhY2U4ZDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODZmNWNkOGEtZjkwMy00MTc2LTk3 YTctNjY3MWU0OWIxYzliLzg2ZjVjZDhhLWY5MDMtNDE3Ni05N2E3LTY2NzFlNDli MWM5Yi5jcmwwHwYDVR0jBBgwFoAUajTL2XXyS8rb791JQFJ7g8nK5UEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84NmY1Y2Q4YS1mOTAzLTQxNzYtOTdhNy02Njcx ZTQ5YjFjOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4I8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcG3/4RiiLwDFLtg8s7Q/5Z89Ptam0DeCjf2QEsdzvIxIqNdHEVFpL7 9kHKZU3bnZIisk9OHTKY82uN0IuHillUE3L4Gmuy0duFfmF9xWV0jLxEQHlPF+LH WOZ1nrrx2t3TirrAr/lG0A76xnh1In9zMQqkWOX/Ewl35gZz607ZdehJaLKLBJdk kAykfon/CXftcro+/za/tkoMqx+fWtUqyy106GVnIGv7eyxUly09NofTfupTOyzf hTnIRGoEUCx81LSRe2Dx2LnBdO0wIy87lyidZrMdE+DFGRVL83E8dQ58s+aK1WtB MXclqUpF/U6/wc6qk5dt4tS9Dl6NIak= -----END CERTIFICATE-----Generated at Sat Aug 23 22:10:28 2025 by rpki-client