$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/034f412d-97a9-3ce6-8d2b-7a9ccd8cc908.roa File: 034f412d-97a9-3ce6-8d2b-7a9ccd8cc908.roa (raw, json) Hash identifier: gX3CU5kpcZ5SdrA/eG5hGVd7yLUsXNt+H0nZ9Z11rqA= Subject key identifier: F8:68:BD:8B:5F:41:63:86:CB:77:34:D2:4A:27:95:48:08:80:E0:82 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE461312F2A93BABBFBA1C880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/034f412d-97a9-3ce6-8d2b-7a9ccd8cc908.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.12.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:31:2f:2a:93:ba:bb:fb:a1:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=ac80d1ca-2dd0-4c27-b98c-9422e5aba79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:f9:6c:ad:9d:49:26:93:a6:67:8a:c0:8d:02: fc:4a:aa:ea:f5:45:8c:a4:e3:38:67:92:51:54:7e: b5:3b:30:3c:38:cb:c3:cd:2a:f3:d6:3a:7a:cf:af: cd:aa:24:a9:c6:25:8c:b0:dd:33:30:71:dd:34:e4: ca:22:11:38:2b:5b:3b:14:b2:e8:a1:70:66:2d:70: f7:50:62:33:40:87:00:1d:8a:b6:15:56:6c:8f:9a: ab:86:99:c0:f4:e1:d5:a3:d2:ff:85:01:eb:7e:fa: 7e:14:5d:20:61:21:44:6f:38:2c:36:66:eb:04:24: 23:d8:f5:d7:c4:2d:7d:36:06:ff:12:17:31:80:01: 58:8f:de:69:4d:bf:90:46:3d:5a:58:8e:97:f1:ed: 5e:2b:ea:ef:4a:58:a2:10:42:5f:59:84:f2:c0:cb: c5:20:a8:c1:16:8c:3a:b1:14:a6:13:a8:45:c3:c0: 36:a7:7c:4a:1a:eb:ef:86:5d:7b:16:8b:7a:2c:35: 1e:77:d4:21:89:87:2d:9d:d7:cd:54:47:a3:c2:14: 04:d5:34:f5:e4:7b:c7:91:7b:e5:35:12:1a:cb:21: 93:c3:06:0c:37:7c:5a:34:68:23:0d:8f:c9:dd:d4: f2:1f:40:cb:5e:16:09:1c:dc:96:75:37:93:e9:dc: e8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:68:BD:8B:5F:41:63:86:CB:77:34:D2:4A:27:95:48:08:80:E0:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/034f412d-97a9-3ce6-8d2b-7a9ccd8cc908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.12.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:e9:26:44:27:9a:69:8d:0a:c7:e7:fe:91:d7:09:b6:b5:ae: 31:dd:80:84:95:61:cc:db:14:d2:35:bb:b7:26:9d:9b:02:c6: db:cf:69:94:f9:d0:bc:f4:5c:a9:a1:5c:4d:84:21:d5:01:d3: c1:67:d5:71:7d:09:2d:45:51:8f:b6:55:33:dc:1b:ec:27:48: 79:ba:7a:34:4c:89:ec:68:3a:a9:e5:54:65:92:64:51:42:94: 9e:c6:63:b4:9c:79:0f:95:ee:b2:1e:08:fe:99:5b:90:ed:f2: 2e:67:e7:76:f1:7b:a4:7b:69:4d:98:68:58:d0:6c:16:41:22: cd:cd:fb:65:33:92:20:68:95:2f:4a:0b:94:a3:02:23:07:55: bf:96:60:cc:33:84:65:5f:bc:d2:b3:03:3b:8f:47:7a:5e:99: 9a:bf:2a:3a:5e:23:11:12:68:51:18:bf:ee:52:cd:c4:54:4b: d0:88:3c:37:a3:5e:d2:94:63:4e:6d:40:4a:84:48:6a:d6:6b: 6c:11:58:fb:40:7f:bf:10:43:63:36:78:c4:b3:9d:34:ce:4d: ab:61:a2:e3:b3:19:11:7d:ae:e8:24:b1:89:71:66:dc:97:30: 49:1f:ef:b1:88:8f:d3:62:ba:16:00:aa:3e:5b:1e:4c:de:53: 49:2a:33:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYTEvKpO6u/uhyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk YWM4MGQxY2EtMmRkMC00YzI3LWI5OGMtOTQyMmU1YWJhNzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/lsrZ1JJpOmZ4rAjQL8Sqrq9UWMpOM4Z5JR VH61OzA8OMvDzSrz1jp6z6/NqiSpxiWMsN0zMHHdNOTKIhE4K1s7FLLooXBmLXD3 UGIzQIcAHYq2FVZsj5qrhpnA9OHVo9L/hQHrfvp+FF0gYSFEbzgsNmbrBCQj2PXX xC19Ngb/EhcxgAFYj95pTb+QRj1aWI6X8e1eK+rvSliiEEJfWYTywMvFIKjBFow6 sRSmE6hFw8A2p3xKGuvvhl17Fot6LDUed9QhiYctndfNVEejwhQE1TT15HvHkXvl NRIayyGTwwYMN3xaNGgjDY/J3dTyH0DLXhYJHNyWdTeT6dzo8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhovYtfQWOGy3c00konlUgIgOCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDM0ZjQxMmQtOTdhOS0z Y2U2LThkMmItN2E5Y2NkOGNjOTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFwyWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArpJkQnmmmNCsfn/pHXCba1rjHdgISVYczbFNI1u7cmnZsCxtvPaZT5 0Lz0XKmhXE2EIdUB08Fn1XF9CS1FUY+2VTPcG+wnSHm6ejRMiexoOqnlVGWSZFFC lJ7GY7SceQ+V7rIeCP6ZW5Dt8i5n53bxe6R7aU2YaFjQbBZBIs3N+2UzkiBolS9K C5SjAiMHVb+WYMwzhGVfvNKzAzuPR3pemZq/KjpeIxESaFEYv+5SzcRUS9CIPDej XtKUY05tQEqESGrWa2wRWPtAf78QQ2M2eMSznTTOTathouOzGRF9rugksYlxZtyX MEkf77GIj9NiuhYAqj5bHkzeU0kqM/k= -----END CERTIFICATE-----Generated at Sat Aug 23 16:52:12 2025 by rpki-client