$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1edc903b-6e38-3971-a7f3-c6df5cd53729.roa File: 1edc903b-6e38-3971-a7f3-c6df5cd53729.roa (raw, json) Hash identifier: 95UG3ESloyeQqacukrwMwu8jO+3Rgf7pe9olrZPsba4= Subject key identifier: 34:36:32:FF:09:80:A9:94:E4:22:CF:12:68:93:F3:C4:10:64:B9:8E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AD0D65977D8EF8FA9F6A15C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1edc903b-6e38-3971-a7f3-c6df5cd53729.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 16625 IP address blocks: 23.66.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:59:77:d8:ef:8f:a9:f6:a1:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=a74923e0-5ade-4f2f-89e4-24ce69394355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e2:da:48:d5:79:d1:bf:f0:75:05:44:79:50: 10:18:63:b3:7b:9a:c5:2c:15:4c:e0:fa:6a:08:8a: ba:64:ef:6f:a0:d8:5b:cf:64:a9:94:60:9e:ea:5a: cf:80:93:8f:2d:ed:e6:48:9a:47:32:22:aa:6f:41: 09:90:49:fc:2c:82:81:f4:70:48:df:5c:27:24:ac: d7:9d:0f:dc:b8:e4:ca:49:60:96:a6:14:5a:78:e1: 0d:65:7b:48:b8:ce:0c:09:8d:87:db:76:d4:c5:d6: 87:e0:ec:dc:7f:ab:97:03:c8:14:bf:0a:f0:b9:eb: 0b:3b:30:e2:cc:6c:23:0c:23:91:ad:d4:c0:30:40: 29:36:b9:f6:2d:30:0f:8a:cf:d9:8d:dd:f7:a5:4f: c8:0c:4b:d3:3a:d0:ec:af:cd:61:d4:66:8f:6e:5d: 5a:a0:ae:de:e5:ba:c3:f9:2a:d1:a7:5c:84:f2:64: 0f:bb:e9:52:3b:88:78:3a:17:20:e7:38:b9:9b:1a: 40:aa:bc:7a:11:52:eb:f0:5c:c4:d5:49:cd:38:95: 84:21:17:9f:d0:6c:f5:bf:42:af:fe:79:21:a6:71: 71:ec:af:aa:16:13:e2:27:68:c9:76:b2:25:b5:61: c6:47:70:7b:fb:b0:19:59:f6:7e:64:6b:9e:d5:a1: 16:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:36:32:FF:09:80:A9:94:E4:22:CF:12:68:93:F3:C4:10:64:B9:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1edc903b-6e38-3971-a7f3-c6df5cd53729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.66.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:5f:07:ef:e7:ec:d9:9d:7d:3a:9e:10:98:97:78:21:9a:d7: e0:4c:65:a9:b1:13:31:e1:5f:cc:85:fa:9d:dd:25:c1:58:a8: 41:77:12:32:d6:48:18:e9:60:61:0d:fc:95:c1:69:dd:23:0a: 18:83:45:46:fc:84:a2:85:c7:27:63:51:4c:1f:8d:95:f8:cc: b3:ce:2a:1d:49:8a:00:37:0c:a0:6c:e5:47:b4:32:d0:40:6c: 91:2b:d3:7f:e1:99:6b:be:fc:76:2e:17:6f:ef:36:bf:f6:05: 4f:fe:a7:e5:67:ee:58:ab:b5:2b:fe:80:a1:d0:c9:76:19:09: 44:02:c1:a8:77:e0:35:35:58:b8:88:ae:44:d9:a1:80:8a:2a: 4f:87:37:7c:bf:77:60:e0:46:06:80:d4:92:65:04:cc:7b:33: 94:ba:4a:10:e0:a8:2f:de:90:4e:7c:a4:42:66:d3:08:76:87: 4c:47:d2:ca:cd:6c:eb:a5:76:4a:75:8d:bf:eb:4b:92:1b:0b: 62:5f:cd:67:f1:4f:a9:c1:29:ed:77:a0:95:ad:19:09:79:8b: 36:18:1d:19:60:d2:ac:84:f4:f5:24:5a:9a:20:21:5d:04:00: 50:e3:b5:95:01:f3:ac:f5:90:d8:10:42:09:5e:90:62:fb:2b: 96:97:3a:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1ll32O+PqfahXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk YTc0OTIzZTAtNWFkZS00ZjJmLTg5ZTQtMjRjZTY5Mzk0MzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOLaSNV50b/wdQVEeVAQGGOze5rFLBVM4Ppq CIq6ZO9voNhbz2SplGCe6lrPgJOPLe3mSJpHMiKqb0EJkEn8LIKB9HBI31wnJKzX nQ/cuOTKSWCWphRaeOENZXtIuM4MCY2H23bUxdaH4Ozcf6uXA8gUvwrwuesLOzDi zGwjDCORrdTAMEApNrn2LTAPis/Zjd33pU/IDEvTOtDsr81h1GaPbl1aoK7e5brD +SrRp1yE8mQPu+lSO4h4Ohcg5zi5mxpAqrx6EVLr8FzE1UnNOJWEIRef0Gz1v0Kv /nkhpnFx7K+qFhPiJ2jJdrIltWHGR3B7+7AZWfZ+ZGue1aEWqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQ2Mv8JgKmU5CLPEmiT88QQZLmOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWVkYzkwM2ItNmUzOC0z OTcxLWE3ZjMtYzZkZjVjZDUzNzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF0IsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZfB+/n7NmdfTqeEJiXeCGa1+BMZamxEzHhX8yF+p3dJcFYqEF3EjLW SBjpYGEN/JXBad0jChiDRUb8hKKFxydjUUwfjZX4zLPOKh1JigA3DKBs5Ue0MtBA bJEr03/hmWu+/HYuF2/vNr/2BU/+p+Vn7lirtSv+gKHQyXYZCUQCwah34DU1WLiI rkTZoYCKKk+HN3y/d2DgRgaA1JJlBMx7M5S6ShDgqC/ekE58pEJm0wh2h0xH0srN bOuldkp1jb/rS5IbC2JfzWfxT6nBKe13oJWtGQl5izYYHRlg0qyE9PUkWpogIV0E AFDjtZUB86z1kNgQQglekGL7K5aXOoQ= -----END CERTIFICATE-----Generated at Sat Aug 23 13:01:41 2025 by rpki-client