$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a30d051-b52c-3862-9df4-98b0555828e4.roa File: 1a30d051-b52c-3862-9df4-98b0555828e4.roa (raw, json) Hash identifier: WV8FTBj2pkntVd5IyXRXRxr3AoIFeZJwYWhvDcQLHss= Subject key identifier: 59:AC:59:89:24:50:C1:68:E2:47:C4:95:46:F1:51:3E:EA:F8:C6:E8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE4612F2857563AA5882F4AE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a30d051-b52c-3862-9df4-98b0555828e4.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.4.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:2f:28:57:56:3a:a5:88:2f:4a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=710fb0cd-af72-448e-9d59-f2d9c8f47dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:43:12:7f:73:b3:46:9b:11:c2:20:92:6d:08: 0b:67:0a:ec:58:a1:af:3c:20:14:8d:31:42:04:dd: fd:a0:25:53:93:8b:2c:07:fe:cd:2d:27:c4:24:10: 1f:fe:5c:52:f6:ac:3e:5d:54:38:52:6d:a7:f1:6f: 41:97:92:75:2d:dd:8b:c1:1e:69:3e:93:b7:13:ed: 53:36:1d:3a:35:f8:be:11:57:5b:90:07:71:ce:46: af:e3:b1:16:4d:7e:b9:bd:b4:99:b8:03:c4:97:dd: fc:c1:b9:b7:55:c7:e3:19:9b:eb:6b:06:71:00:a2: e8:e5:69:77:70:bf:14:e9:f6:e9:55:c8:39:df:8a: 71:5e:4d:69:04:b8:82:6b:12:3c:7d:84:9f:bd:0c: 66:18:db:f1:0f:76:3e:07:1a:2d:bc:e8:c0:c0:56: 96:36:82:a2:aa:9f:f8:c2:2d:be:f2:90:42:05:1b: 27:cf:4b:76:c1:e1:82:d9:f8:4c:ec:d1:bb:46:57: 01:21:61:85:08:a3:9e:3c:01:5c:43:99:f8:4c:35: b0:89:6c:45:5b:0b:9c:d7:cf:95:ee:ff:c0:e5:82: 13:10:f1:b5:29:13:76:1c:03:4f:ba:7b:01:64:32: 84:fc:99:aa:1f:da:2a:92:fe:51:cd:69:c8:c5:ca: c7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AC:59:89:24:50:C1:68:E2:47:C4:95:46:F1:51:3E:EA:F8:C6:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a30d051-b52c-3862-9df4-98b0555828e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.4.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:f0:f7:ef:6e:c0:e2:d6:d6:56:ed:64:d7:58:90:b7:7d:b4: 3f:a7:01:e4:9c:19:68:bf:7f:f2:c7:15:0e:d6:d1:99:46:c0: 8b:38:27:56:ba:53:17:cf:98:80:40:e5:24:a7:8d:f9:d6:d3: 9c:ad:36:da:7d:ac:b5:2f:31:f0:f2:25:56:a2:9f:eb:8d:b9: 8d:b9:da:ca:fe:7b:03:63:2b:88:13:18:f2:88:df:4d:02:f4: 12:e4:87:2a:b2:b6:da:29:3d:fe:de:41:e6:81:49:00:98:da: ee:b5:1c:7c:26:52:6c:a9:85:df:85:cb:f5:1b:ee:b0:ec:00: 41:dd:d4:46:6b:81:67:aa:1f:ef:4f:8c:83:72:9f:20:48:1f: 89:2a:ce:76:ed:9e:a3:3e:83:42:1e:cf:fa:b6:d6:61:01:ab: ec:73:dc:15:de:94:da:7e:3a:22:5c:3d:dc:18:e3:04:b8:29: 68:5e:53:b0:33:fe:c0:b1:c7:88:5d:f6:45:72:4b:21:da:64: 37:3a:2e:21:6a:e3:66:8c:94:b0:7d:3a:da:17:79:8e:d2:96: c4:54:d4:80:cf:c9:9a:17:39:57:3d:59:0d:6a:f8:05:c1:05: 89:3c:a9:b0:94:12:9b:1e:ff:8c:e1:ce:9a:b2:fa:b6:b5:fc: d9:69:72:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYS8oV1Y6pYgvSuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk NzEwZmIwY2QtYWY3Mi00NDhlLTlkNTktZjJkOWM4ZjQ3ZGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUMSf3OzRpsRwiCSbQgLZwrsWKGvPCAUjTFC BN39oCVTk4ssB/7NLSfEJBAf/lxS9qw+XVQ4Um2n8W9Bl5J1Ld2LwR5pPpO3E+1T Nh06Nfi+EVdbkAdxzkav47EWTX65vbSZuAPEl938wbm3VcfjGZvrawZxAKLo5Wl3 cL8U6fbpVcg534pxXk1pBLiCaxI8fYSfvQxmGNvxD3Y+BxotvOjAwFaWNoKiqp/4 wi2+8pBCBRsnz0t2weGC2fhM7NG7RlcBIWGFCKOePAFcQ5n4TDWwiWxFWwuc18+V 7v/A5YITEPG1KRN2HANPunsBZDKE/JmqH9oqkv5RzWnIxcrHUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmsWYkkUMFo4kfElUbxUT7q+MboMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWEzMGQwNTEtYjUyYy0z ODYyLTlkZjQtOThiMDU1NTgyOGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfw9+9uwOLW1lbtZNdYkLd9tD+nAeScGWi/f/LHFQ7W0ZlGwIs4J1a6 UxfPmIBA5SSnjfnW05ytNtp9rLUvMfDyJVain+uNuY252sr+ewNjK4gTGPKI300C 9BLkhyqyttopPf7eQeaBSQCY2u61HHwmUmyphd+Fy/Ub7rDsAEHd1EZrgWeqH+9P jINynyBIH4kqznbtnqM+g0Iez/q21mEBq+xz3BXelNp+OiJcPdwY4wS4KWheU7Az /sCxx4hd9kVySyHaZDc6LiFq42aMlLB9OtoXeY7SlsRU1IDPyZoXOVc9WQ1q+AXB BYk8qbCUEpse/4zhzpqy+ra1/Nlpcj0= -----END CERTIFICATE-----Generated at Sat Aug 23 13:05:06 2025 by rpki-client