$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0fc0d782-1208-3ef0-b9b4-4af58f379af3.roa File: 0fc0d782-1208-3ef0-b9b4-4af58f379af3.roa (raw, json) Hash identifier: H99pqmolyT9tVIv/HWDnMqH93yvNioJqySg+JLb5pSA= Subject key identifier: 33:5A:AE:20:96:BF:18:4E:16:8C:BD:72:71:F1:00:DF:CC:46:0F:16 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ADECBC850FDDA11FA4EC82BFA Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0fc0d782-1208-3ef0-b9b4-4af58f379af3.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.73.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:c8:50:fd:da:11:fa:4e:c8:2b:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=d1ab714d-56d5-40fb-aa88-0259ab2423f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7d:ff:01:77:55:c7:c1:70:b2:a3:0d:ca:32: 97:31:49:b9:98:60:4a:95:3d:a2:b3:42:ab:9f:a1: 46:92:42:0e:d8:03:af:a4:5f:9d:90:65:a8:1c:af: b9:b7:17:eb:3e:14:c9:b8:25:c1:12:3f:64:11:3d: 0d:fc:5b:3a:0e:81:08:b8:df:51:b9:26:2f:35:5b: 30:f4:a8:84:53:b8:06:79:5a:b3:f3:bf:12:42:6f: 91:ef:c6:59:aa:48:aa:ab:bc:34:e4:96:44:59:b8: ac:7d:f4:cf:8e:e3:e3:0b:55:d5:ff:36:9c:c8:94: bb:c8:b1:1d:89:b5:34:2a:ab:62:14:1e:13:a2:17: 0a:aa:67:56:99:5e:7b:d4:45:27:e5:2c:54:ae:f9: a7:44:f4:79:dc:78:fa:3e:28:0b:94:98:7e:7a:6f: 19:49:14:a4:3a:ed:9c:c3:c6:78:5d:ff:86:ae:d8: 70:91:53:54:59:f8:61:58:2c:8a:c4:b0:19:e3:e2: 62:03:e9:c1:d2:ea:e9:0c:90:59:e1:d8:98:64:63: cb:01:ea:9d:60:ac:49:31:1f:ed:55:f3:54:06:e8: 78:a4:80:2a:ea:13:8f:1d:a8:db:7d:1c:96:f3:bb: c5:8e:12:e7:0d:b9:b6:2e:e6:3c:94:3a:6e:dc:94: a6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5A:AE:20:96:BF:18:4E:16:8C:BD:72:71:F1:00:DF:CC:46:0F:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0fc0d782-1208-3ef0-b9b4-4af58f379af3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.73.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:88:a1:68:96:e0:60:b4:eb:c9:7e:76:a7:9a:41:ae:0c:e9: 6b:3a:2b:e0:48:4f:12:61:9d:7f:f2:53:50:43:f1:1c:0b:fc: 80:a8:62:12:a8:40:e4:45:23:e5:9e:e3:61:d8:20:ff:33:e6: 33:5f:3d:8c:58:c5:fc:2d:ae:fd:47:56:9e:5b:d1:f7:44:dd: 91:17:82:cb:8e:1c:cd:fd:b0:13:6f:64:07:ab:8e:72:ad:ab: 7d:1b:c8:4b:64:4c:65:2b:b9:0c:fe:f7:8e:62:d8:07:67:d7: 78:91:8d:78:19:18:04:7e:a8:a2:d1:4f:bf:cc:47:25:c6:f4: e9:ff:ab:c8:12:6a:6e:8e:09:ed:dd:85:99:35:42:6f:61:25: af:03:42:1f:00:a5:e1:c8:5a:d5:4f:5a:84:c5:f7:a9:e4:e3: f1:8e:47:3e:a0:f9:98:4a:d2:41:40:51:da:c7:88:1e:76:f1: be:b2:d1:ba:3c:d6:31:d1:09:e2:3e:be:2b:6a:84:01:d2:ca: a1:6e:da:09:15:37:c9:a1:bb:6f:56:d0:d4:12:cb:79:da:8a: 41:79:e2:ef:15:96:17:85:f4:ce:18:ab:3d:37:b2:68:a6:eb: 8c:b1:a3:9b:ed:99:9a:fb:5b:e1:23:24:d4:10:80:34:a8:23: 30:ef:90:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey8hQ/doR+k7IK/owDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk ZDFhYjcxNGQtNTZkNS00MGZiLWFhODgtMDI1OWFiMjQyM2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz33/AXdVx8FwsqMNyjKXMUm5mGBKlT2is0Kr n6FGkkIO2AOvpF+dkGWoHK+5txfrPhTJuCXBEj9kET0N/Fs6DoEIuN9RuSYvNVsw 9KiEU7gGeVqz878SQm+R78ZZqkiqq7w05JZEWbisffTPjuPjC1XV/zacyJS7yLEd ibU0KqtiFB4TohcKqmdWmV571EUn5SxUrvmnRPR53Hj6PigLlJh+em8ZSRSkOu2c w8Z4Xf+GrthwkVNUWfhhWCyKxLAZ4+JiA+nB0urpDJBZ4diYZGPLAeqdYKxJMR/t VfNUBuh4pIAq6hOPHajbfRyW87vFjhLnDbm2LuY8lDpu3JSmzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNariCWvxhOFoy9cnHxAN/MRg8WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGZjMGQ3ODItMTIwOC0z ZWYwLWI5YjQtNGFmNThmMzc5YWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF0mIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyIoWiW4GC068l+dqeaQa4M6Ws6K+BITxJhnX/yU1BD8RwL/ICoYhKo QORFI+We42HYIP8z5jNfPYxYxfwtrv1HVp5b0fdE3ZEXgsuOHM39sBNvZAerjnKt q30byEtkTGUruQz+945i2Adn13iRjXgZGAR+qKLRT7/MRyXG9On/q8gSam6OCe3d hZk1Qm9hJa8DQh8ApeHIWtVPWoTF96nk4/GORz6g+ZhK0kFAUdrHiB528b6y0bo8 1jHRCeI+vitqhAHSyqFu2gkVN8mhu29W0NQSy3naikF54u8VlheF9M4Yqz03smim 64yxo5vtmZr7W+EjJNQQgDSoIzDvkI4= -----END CERTIFICATE-----Generated at Sat Aug 23 15:01:56 2025 by rpki-client