$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ceeb21d-dda0-3d59-8e9e-146baf0721b2.roa File: 0ceeb21d-dda0-3d59-8e9e-146baf0721b2.roa (raw, json) Hash identifier: FZsrI/aTcwvrrT5xHMgmO+OzU4tbUuveoKe1dO1tAWQ= Subject key identifier: 85:6D:FF:8E:2C:41:D6:E1:F4:7E:41:4C:23:43:6C:16:15:A9:A2:EA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE46140040A01726397CEEF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ceeb21d-dda0-3d59-8e9e-146baf0721b2.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.2.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:40:04:0a:01:72:63:97:ce:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=e38badd2-255a-48e0-bfb5-9af44cdd3f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:86:01:4c:45:ef:88:bb:fe:96:75:9c:8c:7e: 2e:cd:bc:76:d3:0c:65:e4:3d:68:d8:85:0e:4c:c6: 3c:df:78:e2:9c:f2:da:74:36:b8:48:57:0f:a1:79: 10:0c:10:2d:fb:24:77:18:c0:ba:40:14:f9:a3:2d: df:5d:3d:14:71:17:4c:fd:56:9e:9e:47:e8:9c:9e: e7:79:e2:fb:ab:da:90:25:c3:d9:47:c1:91:13:f2: 32:f9:b2:92:ac:74:07:cf:a3:a2:24:13:e8:ac:5f: 89:31:c5:ba:3f:a9:92:9a:69:83:b0:55:9b:0c:d4: bf:1d:63:f1:9d:87:13:d5:44:82:41:72:c3:ef:6d: b5:24:e8:e5:2c:0b:72:f3:94:28:20:7e:0c:4b:24: 2a:0a:39:1e:9b:45:cc:34:22:3c:1f:e1:ab:14:ab: 01:9b:b4:07:b6:b1:4f:23:ab:78:78:5f:04:31:f4: dd:ce:98:1b:a9:e4:ad:67:69:6e:e5:2f:64:ac:88: 7c:52:14:7c:6a:e9:2b:75:e8:ca:a1:06:75:62:e2: 8d:1e:16:fb:07:fe:78:a7:fe:53:9d:41:b3:44:92: fc:72:9b:94:57:79:7c:95:e9:3d:33:e3:7d:85:31: 3c:af:e3:17:c6:82:8b:c0:5a:17:47:72:e4:2a:44: cb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6D:FF:8E:2C:41:D6:E1:F4:7E:41:4C:23:43:6C:16:15:A9:A2:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ceeb21d-dda0-3d59-8e9e-146baf0721b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.2.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:e0:8d:36:0b:3c:e6:8a:f0:6c:f1:b4:c8:f2:28:a4:39:c7: b4:ae:de:86:08:79:be:20:b0:fd:e7:0a:2c:80:17:3a:04:37: b4:ce:58:f5:23:9e:ab:a1:5b:ec:01:7c:84:2f:7b:8d:c4:2b: fb:5f:ef:fd:57:d0:43:91:ee:d6:43:a2:10:90:fb:c6:90:c3: f6:de:21:d3:7e:61:b9:02:0a:3a:14:32:80:3f:38:ad:3c:62: 09:c1:76:ee:7c:0b:10:0e:61:02:12:6d:22:a1:83:4e:2f:4b: f3:9b:1e:cf:90:01:f0:ce:6b:ec:c3:8f:5a:94:3a:e0:6b:33: c1:3e:a0:ac:0b:18:87:1e:0b:f2:ae:33:4c:cb:b6:cb:d3:9f: 0f:ad:df:d2:81:68:e6:fb:25:a5:35:92:99:57:9e:d5:20:ed: 05:2d:c5:9b:ee:9e:55:fa:8f:61:bb:93:01:4c:99:b9:a0:9f: 85:f7:42:7f:35:0d:99:a2:4f:2d:d5:a0:49:b4:ae:1b:18:05: f2:13:c0:96:b2:a4:34:47:28:f8:03:5d:5a:7b:a9:86:f4:61: 78:15:8c:9f:e9:b9:64:79:4c:b9:1f:78:42:dc:df:a4:7f:d8: 5a:43:42:bc:db:b1:1f:01:d0:2f:d1:8d:64:93:3c:20:e1:16: 02:a1:90:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYUAECgFyY5fO74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk ZTM4YmFkZDItMjU1YS00OGUwLWJmYjUtOWFmNDRjZGQzZjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYYBTEXviLv+lnWcjH4uzbx20wxl5D1o2IUO TMY833jinPLadDa4SFcPoXkQDBAt+yR3GMC6QBT5oy3fXT0UcRdM/VaenkfonJ7n eeL7q9qQJcPZR8GRE/Iy+bKSrHQHz6OiJBPorF+JMcW6P6mSmmmDsFWbDNS/HWPx nYcT1USCQXLD7221JOjlLAty85QoIH4MSyQqCjkem0XMNCI8H+GrFKsBm7QHtrFP I6t4eF8EMfTdzpgbqeStZ2lu5S9krIh8UhR8aukrdejKoQZ1YuKNHhb7B/54p/5T nUGzRJL8cpuUV3l8lek9M+N9hTE8r+MXxoKLwFoXR3LkKkTLGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVt/44sQdbh9H5BTCNDbBYVqaLqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGNlZWIyMWQtZGRhMC0z ZDU5LThlOWUtMTQ2YmFmMDcyMWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwI4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHgjTYLPOaK8GzxtMjyKKQ5x7Su3oYIeb4gsP3nCiyAFzoEN7TOWPUj nquhW+wBfIQve43EK/tf7/1X0EOR7tZDohCQ+8aQw/beIdN+YbkCCjoUMoA/OK08 YgnBdu58CxAOYQISbSKhg04vS/ObHs+QAfDOa+zDj1qUOuBrM8E+oKwLGIceC/Ku M0zLtsvTnw+t39KBaOb7JaU1kplXntUg7QUtxZvunlX6j2G7kwFMmbmgn4X3Qn81 DZmiTy3VoEm0rhsYBfITwJaypDRHKPgDXVp7qYb0YXgVjJ/puWR5TLkfeELc36R/ 2FpDQrzbsR8B0C/RjWSTPCDhFgKhkHo= -----END CERTIFICATE-----Generated at Sat Aug 23 22:54:22 2025 by rpki-client