$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2207f3b3-6207-3daf-bbd9-32576b059961.roa File: 2207f3b3-6207-3daf-bbd9-32576b059961.roa (raw, json) Hash identifier: S8cXNbeRhQ5Kkxyw18ldIZzr4R/H0+zbSqxaO0CFZmA= Subject key identifier: 3E:6D:5E:5B:D2:46:53:30:A3:17:89:F7:5E:60:BE:97:0E:D8:7F:86 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AD7D130BB71958E1EBD2733E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2207f3b3-6207-3daf-bbd9-32576b059961.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.79.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:30:bb:71:95:8e:1e:bd:27:33:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=98456c92-3396-4c22-99e0-8ba7ba352df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:17:75:4a:7e:f0:f8:8a:1c:76:91:2c:be:5c: c8:3f:e7:09:6b:ab:c2:dc:44:aa:a5:e7:b3:f2:20: a9:5e:0c:50:50:db:9a:29:6d:be:0b:07:42:06:3b: 41:f1:5f:bb:a8:28:03:57:31:b6:93:89:49:42:48: b5:df:e7:af:ed:a3:67:00:a7:02:63:26:84:8b:0e: 22:27:d7:45:5b:7d:f1:49:e7:3f:0d:c5:b5:72:35: ee:f8:79:29:50:20:fa:a0:87:8e:ad:db:8f:04:95: ba:e8:6d:6a:05:81:95:96:55:30:12:c6:de:ad:76: 3d:1f:39:73:b9:76:fd:27:b4:9e:0a:67:41:ae:5a: 77:61:9a:fa:4b:ed:15:cc:fd:72:81:23:40:cd:33: 3b:85:d8:22:57:73:a0:8b:0b:38:4d:88:a4:c6:4b: 88:78:83:69:31:84:e8:21:a0:fa:a2:57:a8:51:35: 92:33:c8:05:09:99:d9:13:a1:85:7a:59:b5:2e:34: c9:a7:50:24:b8:78:6c:5a:d3:d7:05:fd:f0:64:57: ac:db:7b:58:78:22:90:5e:20:24:80:34:e0:56:aa: db:c5:af:f8:69:1c:21:e8:eb:d5:f8:d2:9e:04:d1: cc:7a:b7:f2:8e:78:a5:c8:46:7b:66:f0:98:99:ba: d5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6D:5E:5B:D2:46:53:30:A3:17:89:F7:5E:60:BE:97:0E:D8:7F:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2207f3b3-6207-3daf-bbd9-32576b059961.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.79.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:0b:ea:f7:0f:26:28:d8:c6:cc:87:a0:f0:92:71:ca:9f:1c: 98:3a:ed:52:14:71:7c:84:a9:07:05:18:bc:df:76:f6:8d:29: f2:32:ae:2f:8f:4d:51:e3:43:de:0e:41:ff:fa:f2:4d:ea:1b: d5:68:27:a5:b6:31:7c:4e:a8:32:ce:eb:b5:42:94:8c:47:26: 50:85:22:ea:58:dd:db:34:20:2d:7a:c3:7e:d4:19:de:c2:97: 19:6e:0d:73:52:0e:e6:24:21:db:52:3e:08:dd:b6:fd:c8:ab: e1:ce:d0:6c:82:5e:34:df:ad:b9:2c:35:e7:75:51:00:f1:2b: 12:6b:8d:7a:a8:d5:3e:20:6e:59:af:92:e5:34:34:34:81:71: fc:bb:d1:d1:98:44:e4:cf:ae:7b:a1:41:04:1c:6b:da:34:5b: 13:e3:b8:13:e3:01:85:ab:a5:4c:30:7d:53:6a:88:2f:93:7f: 0b:53:56:ff:78:fb:b3:fb:bb:d8:c8:0c:01:79:c1:26:b5:1e: 1f:d6:9d:7d:4c:92:ce:86:33:cb:23:5c:e7:12:82:6d:ac:5e: 92:19:9e:06:12:d1:0d:2b:91:6a:30:16:a4:28:5c:f7:c9:76: a5:49:ae:ae:b7:db:f0:0d:c9:a6:cd:62:90:6c:b9:a4:9f:b1: 76:a2:b3:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0TC7cZWOHr0nM+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk OTg0NTZjOTItMzM5Ni00YzIyLTk5ZTAtOGJhN2JhMzUyZGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhd1Sn7w+IocdpEsvlzIP+cJa6vC3ESqpeez 8iCpXgxQUNuaKW2+CwdCBjtB8V+7qCgDVzG2k4lJQki13+ev7aNnAKcCYyaEiw4i J9dFW33xSec/DcW1cjXu+HkpUCD6oIeOrduPBJW66G1qBYGVllUwEsberXY9Hzlz uXb9J7SeCmdBrlp3YZr6S+0VzP1ygSNAzTM7hdgiV3Ogiws4TYikxkuIeINpMYTo IaD6oleoUTWSM8gFCZnZE6GFelm1LjTJp1AkuHhsWtPXBf3wZFes23tYeCKQXiAk gDTgVqrbxa/4aRwh6OvV+NKeBNHMerfyjnilyEZ7ZvCYmbrVEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5tXlvSRlMwoxeJ915gvpcO2H+GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjIwN2YzYjMtNjIwNy0z ZGFmLWJiZDktMzI1NzZiMDU5OTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF0+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0L6vcPJijYxsyHoPCSccqfHJg67VIUcXyEqQcFGLzfdvaNKfIyri+P TVHjQ94OQf/68k3qG9VoJ6W2MXxOqDLO67VClIxHJlCFIupY3ds0IC16w37UGd7C lxluDXNSDuYkIdtSPgjdtv3Iq+HO0GyCXjTfrbksNed1UQDxKxJrjXqo1T4gblmv kuU0NDSBcfy70dGYROTPrnuhQQQca9o0WxPjuBPjAYWrpUwwfVNqiC+TfwtTVv94 +7P7u9jIDAF5wSa1Hh/WnX1Mks6GM8sjXOcSgm2sXpIZngYS0Q0rkWowFqQoXPfJ dqVJrq632/ANyabNYpBsuaSfsXais54= -----END CERTIFICATE-----Generated at Sat Aug 23 18:01:06 2025 by rpki-client