$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/225456c8-71d8-3bc9-adb9-e3b8630276bc.roa File: 225456c8-71d8-3bc9-adb9-e3b8630276bc.roa (raw, json) Hash identifier: MxiRH1xrscWVxz0gmX0W9WAAY15AUCV3KUVofPytuWE= Subject key identifier: 85:E6:0E:09:40:3C:1B:7F:D7:98:D1:62:0D:DA:F0:1B:B7:EF:1E:D2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ADC00FF510ABD087928D0B0A8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/225456c8-71d8-3bc9-adb9-e3b8630276bc.roa Signing time: Fri 15 Aug 2025 01:00:32 +0000 ROA not before: Fri 15 Aug 2025 01:00:32 +0000 ROA not after: Thu 13 Nov 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.3.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dc:00:ff:51:0a:bd:08:79:28:d0:b0:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 15 01:00:32 2025 GMT Not After : Nov 13 02:00:32 2025 GMT Subject: CN=0cb6d791-7966-41e4-a04b-060746bac52f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0b:54:32:19:23:5f:b2:2e:4f:8b:82:50:87: 23:30:a7:55:f9:f6:00:6b:2a:0c:6d:d7:bf:64:de: 8f:6e:99:bb:8f:b6:32:67:96:7d:3e:fa:46:8a:81: 78:b4:f4:df:4b:a8:c0:86:91:54:02:d5:a9:34:9b: 45:d6:b6:35:6e:41:28:7d:7e:ae:f1:b4:b5:fa:63: 5e:1d:25:08:4d:37:2d:cc:e0:5b:19:6e:89:82:0f: 00:18:8d:1f:f4:26:cb:e7:aa:b4:8f:69:c6:1e:02: e7:d9:c6:b5:c3:49:84:95:9b:c2:26:df:87:5c:e4: 13:bc:f3:e2:3e:e8:f1:5b:1e:26:a0:0f:66:7f:38: 54:ee:9f:8f:7d:5c:bd:15:4f:03:02:dc:83:6d:f5: 4b:fa:da:16:de:7a:52:6d:fe:49:64:9f:5f:24:ec: 67:fb:f9:14:32:86:b5:f2:54:b4:60:5d:28:8d:17: b1:56:9e:0a:ce:0e:b0:70:de:21:44:c1:a6:0d:12: 9d:66:86:95:64:49:d9:cc:a0:73:60:58:a4:cd:8d: 00:cf:b8:ae:69:5d:97:48:09:57:d2:67:5e:7b:b6: b6:3b:57:57:c9:04:0f:a9:31:96:78:17:76:d8:82: 4c:8f:2e:e9:11:ac:c4:ea:34:ff:d3:35:9a:cd:5c: d8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E6:0E:09:40:3C:1B:7F:D7:98:D1:62:0D:DA:F0:1B:B7:EF:1E:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/225456c8-71d8-3bc9-adb9-e3b8630276bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:31:ba:47:cf:a7:f3:12:9c:dc:b1:b4:07:2c:ff:f6:40:69: 97:03:97:74:99:ee:fb:6d:4f:f3:da:c6:59:63:55:70:10:a8: b0:07:41:df:be:8d:ab:aa:7c:1d:48:27:9c:d6:2b:1f:be:9a: 48:72:bc:54:2d:27:13:a5:18:b2:3b:67:7a:27:4a:cd:14:86: 36:4d:47:76:57:39:ed:df:ce:11:6a:fe:a9:6c:e3:36:3d:2a: a4:cf:a4:f7:b9:39:d7:ae:70:e5:05:2e:df:5c:30:d2:f1:2c: d0:c6:ba:9a:3d:71:01:ba:16:bf:55:de:e9:81:79:37:da:62: e4:5d:13:66:af:6d:af:49:ba:09:bd:2c:33:26:fb:19:cb:47: 9a:bd:51:5f:c5:7d:39:47:59:72:7c:96:6d:17:89:52:40:bc: 0f:dc:a1:3a:16:85:20:3e:ff:40:51:8f:e0:92:16:e8:27:97: 63:75:9f:a1:a2:d4:ae:1c:e5:f3:f3:91:26:39:95:ab:b5:ae: 7c:9e:06:db:5d:4c:97:ff:92:f2:dc:40:02:7a:14:13:a7:d4: 5a:97:b1:41:99:a6:76:6a:20:ed:54:f4:d5:fd:48:34:78:6b: 53:61:75:fe:e5:10:84:15:6d:b5:1d:b3:e6:93:34:a3:d5:e5: d6:59:48:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErcAP9RCr0IeSjQsKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxNTAxMDAzMloXDTI1MTExMzAyMDAzMlowLzEtMCsGA1UEAxMk MGNiNmQ3OTEtNzk2Ni00MWU0LWEwNGItMDYwNzQ2YmFjNTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAtUMhkjX7IuT4uCUIcjMKdV+fYAayoMbde/ ZN6Pbpm7j7YyZ5Z9PvpGioF4tPTfS6jAhpFUAtWpNJtF1rY1bkEofX6u8bS1+mNe HSUITTctzOBbGW6Jgg8AGI0f9CbL56q0j2nGHgLn2ca1w0mElZvCJt+HXOQTvPPi PujxWx4moA9mfzhU7p+PfVy9FU8DAtyDbfVL+toW3npSbf5JZJ9fJOxn+/kUMoa1 8lS0YF0ojRexVp4Kzg6wcN4hRMGmDRKdZoaVZEnZzKBzYFikzY0Az7iuaV2XSAlX 0mdee7a2O1dXyQQPqTGWeBd22IJMjy7pEazE6jT/0zWazVzY+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXmDglAPBt/15jRYg3a8Bu37x7SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjI1NDU2YzgtNzFkOC0z YmM5LWFkYjktZTNiODYzMDI3NmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwNiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcxukfPp/MSnNyxtAcs//ZAaZcDl3SZ7vttT/PaxlljVXAQqLAHQd++ jauqfB1IJ5zWKx++mkhyvFQtJxOlGLI7Z3onSs0UhjZNR3ZXOe3fzhFq/qls4zY9 KqTPpPe5OdeucOUFLt9cMNLxLNDGupo9cQG6Fr9V3umBeTfaYuRdE2avba9Jugm9 LDMm+xnLR5q9UV/FfTlHWXJ8lm0XiVJAvA/coToWhSA+/0BRj+CSFugnl2N1n6Gi 1K4c5fPzkSY5lau1rnyeBttdTJf/kvLcQAJ6FBOn1FqXsUGZpnZqIO1U9NX9SDR4 a1Nhdf7lEIQVbbUds+aTNKPV5dZZSIw= -----END CERTIFICATE-----Generated at Sat Aug 23 13:00:11 2025 by rpki-client