$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/273977bd-025d-3a7e-8997-f99ebb9a85b8.roa File: 273977bd-025d-3a7e-8997-f99ebb9a85b8.roa (raw, json) Hash identifier: JPFB2YFOiYsebvFAqXy7nwBsELorO0Uds417L9jBVj4= Subject key identifier: 65:B2:24:F8:82:82:0D:D3:B9:D9:C3:95:3F:CB:FD:1F:FA:BE:BE:F8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE46140BABE1D4987064A2080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/273977bd-025d-3a7e-8997-f99ebb9a85b8.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.3.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:40:ba:be:1d:49:87:06:4a:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=662f3601-8eac-4859-bd2d-a109d23985ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:06:86:c3:cb:a0:35:7a:47:59:c5:dd:ff:44: 9a:04:7f:22:f6:9f:01:c3:78:01:c3:ae:63:cc:bb: 59:83:b2:20:aa:1f:aa:55:fa:df:50:be:b3:62:23: 60:00:99:83:8a:74:3f:b7:21:80:d8:69:f3:ee:ec: fb:f8:9f:60:5b:f9:c8:02:2f:ad:a5:19:06:b7:f3: 3c:5e:79:f0:60:24:c7:78:d6:9b:2e:05:cf:d4:91: 37:ae:61:11:f3:1b:fd:75:0e:c4:66:2b:6b:be:25: 60:73:2b:3e:cf:a0:45:d3:b6:90:57:16:38:63:ae: 58:95:ba:0e:bf:f7:0e:de:f0:40:ff:53:ae:a1:92: 9b:36:fd:09:ef:66:8c:95:cf:18:51:72:53:31:b9: 4b:78:7d:b8:89:6b:7c:a0:37:0d:93:64:0c:8a:bd: 9a:9c:ed:86:fc:0e:d8:94:11:ff:36:a8:95:95:67: a5:31:8a:8f:f3:3d:f0:e0:74:81:48:b7:67:18:b0: 4f:85:65:18:8a:ca:c8:65:5a:94:16:97:db:20:6c: 30:63:9d:72:44:08:68:a2:63:68:ff:4a:58:08:ca: ee:83:e4:bb:85:91:cd:a3:0e:ee:95:c2:63:55:e8: 61:4e:a1:05:c3:30:07:6e:4d:0a:7b:c7:ca:f6:c2: ed:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B2:24:F8:82:82:0D:D3:B9:D9:C3:95:3F:CB:FD:1F:FA:BE:BE:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/273977bd-025d-3a7e-8997-f99ebb9a85b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:ea:58:ac:55:40:44:ab:db:8c:34:b2:92:50:fa:e2:94:e1: 92:e4:dd:92:45:31:ee:30:1c:37:76:95:2e:10:a9:3d:94:e1: 9b:cd:e7:4e:74:8e:62:77:be:b6:a0:95:9d:e1:1f:64:b4:21: 46:66:b9:5c:4e:d6:0a:ad:a7:e6:80:ff:f6:90:eb:28:35:ea: 39:08:ae:11:a3:75:bc:46:fd:25:84:6b:25:17:20:4f:03:c9: 9d:00:e6:1e:6d:00:9c:b6:f4:82:17:56:6e:38:79:4b:75:a7: 22:c2:94:00:a1:ca:a7:2e:61:eb:92:fe:35:15:a9:31:67:fb: 86:31:be:32:2d:bf:6f:13:0b:66:2e:83:d0:2a:98:61:24:5a: 62:58:20:f8:0e:5e:7f:f5:f9:e9:f8:60:8f:f9:a3:c8:73:29: 75:a8:c8:47:8a:c1:f3:37:ae:ad:91:80:87:31:31:4c:3e:44: 61:93:1f:07:8a:18:ad:69:bd:73:0e:57:2a:d7:6d:5a:c1:f0: bd:79:1f:92:8a:e4:3e:bc:de:e4:5a:ab:06:08:5f:37:0a:7e: b4:e9:4c:54:27:4a:23:1c:de:45:a8:90:4d:a8:72:8f:f0:83: 52:dc:4d:1c:21:3e:c8:bf:42:bc:37:5e:3e:93:89:99:01:80: 93:35:50:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYUC6vh1JhwZKIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk NjYyZjM2MDEtOGVhYy00ODU5LWJkMmQtYTEwOWQyMzk4NWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgaGw8ugNXpHWcXd/0SaBH8i9p8Bw3gBw65j zLtZg7Igqh+qVfrfUL6zYiNgAJmDinQ/tyGA2Gnz7uz7+J9gW/nIAi+tpRkGt/M8 XnnwYCTHeNabLgXP1JE3rmER8xv9dQ7EZitrviVgcys+z6BF07aQVxY4Y65YlboO v/cO3vBA/1OuoZKbNv0J72aMlc8YUXJTMblLeH24iWt8oDcNk2QMir2anO2G/A7Y lBH/NqiVlWelMYqP8z3w4HSBSLdnGLBPhWUYisrIZVqUFpfbIGwwY51yRAhoomNo /0pYCMrug+S7hZHNow7ulcJjVehhTqEFwzAHbk0Ke8fK9sLtSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWyJPiCgg3TudnDlT/L/R/6vr74MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjczOTc3YmQtMDI1ZC0z YTdlLTg5OTctZjk5ZWJiOWE4NWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwNYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzqWKxVQESr24w0spJQ+uKU4ZLk3ZJFMe4wHDd2lS4QqT2U4ZvN5050 jmJ3vraglZ3hH2S0IUZmuVxO1gqtp+aA//aQ6yg16jkIrhGjdbxG/SWEayUXIE8D yZ0A5h5tAJy29IIXVm44eUt1pyLClAChyqcuYeuS/jUVqTFn+4YxvjItv28TC2Yu g9AqmGEkWmJYIPgOXn/1+en4YI/5o8hzKXWoyEeKwfM3rq2RgIcxMUw+RGGTHweK GK1pvXMOVyrXbVrB8L15H5KK5D683uRaqwYIXzcKfrTpTFQnSiMc3kWokE2oco/w g1LcTRwhPsi/Qrw3Xj6TiZkBgJM1UIs= -----END CERTIFICATE-----Generated at Sat Aug 23 13:04:30 2025 by rpki-client