$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11d9fc95-279c-3b6c-adc9-dff5a0966e33.roa File: 11d9fc95-279c-3b6c-adc9-dff5a0966e33.roa (raw, json) Hash identifier: lcxc2WhVoOiJjxhr37I+jClktoPaU+6j1oC4pnyytis= Subject key identifier: 54:B0:E6:A4:C4:1E:72:7A:0E:66:F3:A3:30:9E:CA:46:2B:D9:24:FD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE4613E159D752530F5783140 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11d9fc95-279c-3b6c-adc9-dff5a0966e33.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.7.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:3e:15:9d:75:25:30:f5:78:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=bc50bba5-69a4-430b-a455-817f1646601f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6e:8f:ee:9e:fa:a5:e6:62:82:b9:b5:a8:88: 6f:95:5a:14:4b:ff:b8:7c:5b:f9:db:31:e6:ff:cd: 8a:2e:95:91:36:54:f6:01:f2:18:1c:7a:25:99:99: 15:3e:5a:71:df:4a:db:82:99:19:c5:98:42:b6:02: 04:7b:61:59:c7:85:b9:ba:b4:00:96:ab:70:ff:85: 1a:39:ec:40:e9:f3:0e:6f:34:a7:db:5a:ab:ed:95: c8:ba:71:6c:ce:71:c7:07:ad:11:38:36:6f:de:a3: e4:df:23:f1:34:04:7e:dd:3e:1c:f1:96:9c:64:4e: fc:5f:20:3c:de:53:c9:76:75:3b:29:dc:03:cb:b2: 74:24:f4:fa:7d:66:76:c1:54:b5:44:3e:27:d3:4b: 9c:f4:18:36:37:63:3a:29:68:a6:24:3e:d4:31:87: 44:b2:20:3b:c5:d1:a2:dd:3d:e7:9b:d4:32:53:dc: 3d:01:0d:24:59:a6:28:51:d6:d8:4e:2b:81:9a:be: 88:df:eb:f2:36:04:8e:6e:04:7e:d7:06:0f:f1:64: c1:d9:3e:f3:67:10:a3:45:01:32:01:e8:d6:ed:f8: 3d:e3:b2:bb:5d:59:aa:95:d3:91:92:59:38:d9:51: dc:57:68:6e:59:29:15:75:97:fb:4b:c4:f9:1b:62: 89:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B0:E6:A4:C4:1E:72:7A:0E:66:F3:A3:30:9E:CA:46:2B:D9:24:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11d9fc95-279c-3b6c-adc9-dff5a0966e33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.7.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:12:37:46:8e:e3:9f:82:17:eb:d5:de:77:3e:7a:5d:6d:19: 23:8e:07:44:1d:90:74:d5:39:3c:5d:d3:c9:43:ee:d6:af:ea: 10:4e:0e:43:c2:d5:97:c8:fa:65:43:46:e4:94:13:9c:c4:63: 8f:aa:bb:55:d2:ab:68:b6:9a:66:c3:84:10:5e:6b:77:30:13: 9e:96:4f:36:2b:72:24:b8:16:03:ff:24:29:3e:5e:ed:50:90: 0b:5c:e1:5a:84:cb:68:9d:86:e8:3f:2e:e0:53:72:3d:81:9d: 69:00:f5:07:c1:10:56:e6:f4:3b:5b:8b:ba:77:72:d9:92:af: aa:0f:ce:5e:2e:64:a6:34:cb:16:8a:9b:f8:4b:9a:b1:a8:e0: 58:15:76:b9:77:96:eb:76:68:ea:e5:81:d9:a1:9e:4c:c3:78: 1a:cb:9a:73:86:ed:da:11:cf:9d:74:cc:b3:2a:50:0c:cf:5e: 62:53:6d:e2:78:14:ec:d9:78:8d:10:6f:41:6f:41:b4:66:af: 10:e5:c2:1e:f9:f0:d8:8b:ed:e2:c6:96:77:d9:4b:e1:0b:56: 84:05:eb:85:3d:9f:16:33:52:9c:fc:84:55:ec:c9:4d:3f:ad: 5a:02:9f:4f:96:39:dd:b5:d0:53:83:49:5d:4b:d8:cd:49:d5: f3:32:3b:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYT4VnXUlMPV4MUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk YmM1MGJiYTUtNjlhNC00MzBiLWE0NTUtODE3ZjE2NDY2MDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgW6P7p76peZigrm1qIhvlVoUS/+4fFv52zHm /82KLpWRNlT2AfIYHHolmZkVPlpx30rbgpkZxZhCtgIEe2FZx4W5urQAlqtw/4Ua OexA6fMObzSn21qr7ZXIunFsznHHB60RODZv3qPk3yPxNAR+3T4c8ZacZE78XyA8 3lPJdnU7KdwDy7J0JPT6fWZ2wVS1RD4n00uc9Bg2N2M6KWimJD7UMYdEsiA7xdGi 3T3nm9QyU9w9AQ0kWaYoUdbYTiuBmr6I3+vyNgSObgR+1wYP8WTB2T7zZxCjRQEy AejW7fg947K7XVmqldORklk42VHcV2huWSkVdZf7S8T5G2KJZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSw5qTEHnJ6DmbzozCeykYr2ST9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTFkOWZjOTUtMjc5Yy0z YjZjLWFkYzktZGZmNWEwOTY2ZTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsSN0aO45+CF+vV3nc+el1tGSOOB0QdkHTVOTxd08lD7tav6hBODkPC 1ZfI+mVDRuSUE5zEY4+qu1XSq2i2mmbDhBBea3cwE56WTzYrciS4FgP/JCk+Xu1Q kAtc4VqEy2idhug/LuBTcj2BnWkA9QfBEFbm9Dtbi7p3ctmSr6oPzl4uZKY0yxaK m/hLmrGo4FgVdrl3lut2aOrlgdmhnkzDeBrLmnOG7doRz510zLMqUAzPXmJTbeJ4 FOzZeI0Qb0FvQbRmrxDlwh758NiL7eLGlnfZS+ELVoQF64U9nxYzUpz8hFXsyU0/ rVoCn0+WOd210FODSV1L2M1J1fMyO9w= -----END CERTIFICATE-----Generated at Sat Aug 23 16:49:43 2025 by rpki-client