$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/281a05eb-cce6-37b7-95b9-23bbed985558.roa File: 281a05eb-cce6-37b7-95b9-23bbed985558.roa (raw, json) Hash identifier: RUXh693m6uYmggMkSBXfqLC+gFAUp+NTZvLWwYDWBIo= Subject key identifier: 8F:34:9F:9B:F2:A4:1A:B9:54:13:18:00:BC:D1:E3:40:D3:DF:96:E4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ADECBCB54FDFB0077FEC65680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/281a05eb-cce6-37b7-95b9-23bbed985558.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.41.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:cb:54:fd:fb:00:77:fe:c6:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=8593fb1b-a58b-49a0-8ea0-a5abe5bdf956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:70:7e:82:1e:43:b1:3f:11:5b:92:cf:35:cb: 3c:cb:93:1e:71:b3:bd:15:54:fe:de:63:89:e6:fb: 92:1e:37:95:a5:6e:7f:f1:d3:3b:90:a2:71:f1:1e: a7:83:a6:ba:ac:e9:83:98:62:43:3b:3f:4c:4c:93: 31:2d:f8:9a:da:23:68:6e:69:09:c6:f4:a4:a6:94: 5e:5b:e2:39:2b:f7:16:5d:1d:06:e9:b0:ba:cb:13: 8f:6b:da:2e:28:2a:26:bc:ca:1c:e5:44:f8:98:6a: a4:c3:dd:71:79:b3:f2:59:c3:65:7c:73:89:2a:42: 4c:05:6d:94:c5:93:5d:b6:65:5b:84:7b:9d:fa:ec: 72:46:58:fa:71:d6:5f:16:17:81:6f:dd:a1:66:17: a8:50:95:08:53:8e:4e:a7:06:16:5b:71:17:07:56: 71:8c:fb:f9:65:a9:b9:a0:19:9d:fd:3e:84:9f:20: b9:ca:e7:3d:4a:d5:ce:89:c5:a4:e3:30:5d:a1:d0: 9d:41:49:23:da:08:af:b0:18:c2:4b:b0:93:e0:2f: cf:fe:ad:81:0a:55:57:da:6b:13:f8:5c:5e:a6:71: 5a:15:cd:39:2d:09:97:56:a8:bf:38:68:e9:ef:52: f9:84:e6:5e:98:31:a7:ba:27:5b:0d:f1:e0:89:07: 03:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:34:9F:9B:F2:A4:1A:B9:54:13:18:00:BC:D1:E3:40:D3:DF:96:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/281a05eb-cce6-37b7-95b9-23bbed985558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:8a:61:a4:dd:79:6e:6f:e0:d4:07:b4:bc:af:15:10:27:4c: 5f:00:cd:54:c8:33:33:c2:78:3d:b8:98:f0:4f:81:18:69:64: f3:27:cc:44:71:47:8d:3f:ce:d5:f6:23:9a:80:83:1c:6f:80: bd:ba:b2:e9:bb:7d:8b:87:65:57:3f:49:1d:84:a9:05:ea:34: 75:d4:d2:3c:ab:01:9e:08:ad:5b:8e:60:28:3a:a7:26:aa:36: 6d:ef:c7:9a:fc:79:59:1f:28:44:4e:cb:16:58:27:d6:7a:bc: da:87:e3:6d:2b:fb:5d:b1:7e:91:67:43:7c:fb:b2:f5:7b:64: fd:ec:e6:bc:26:70:a8:36:79:41:f4:6c:ae:c2:6e:15:f4:12: f1:16:e6:e6:9d:44:46:7b:54:cb:31:3e:d7:c9:d9:28:20:c6: 35:a9:5c:2e:71:7e:54:5d:e6:1a:0f:c5:dd:00:42:ba:1d:fc: 80:79:a1:30:ab:c1:a0:99:28:a4:83:10:58:a3:d5:97:cf:52: e5:66:dd:cb:c7:f7:0a:0b:8c:70:1c:0c:ab:d7:0f:e9:e3:6f: d7:35:4d:58:f1:69:40:dc:46:fb:01:b8:9c:41:61:86:df:2c: af:ca:1c:3b:48:63:1d:d3:b5:cd:5e:69:82:fe:39:bf:2a:7b: 43:5b:4f:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey8tU/fsAd/7GVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk ODU5M2ZiMWItYTU4Yi00OWEwLThlYTAtYTVhYmU1YmRmOTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXB+gh5DsT8RW5LPNcs8y5MecbO9FVT+3mOJ 5vuSHjeVpW5/8dM7kKJx8R6ng6a6rOmDmGJDOz9MTJMxLfia2iNobmkJxvSkppRe W+I5K/cWXR0G6bC6yxOPa9ouKComvMoc5UT4mGqkw91xebPyWcNlfHOJKkJMBW2U xZNdtmVbhHud+uxyRlj6cdZfFheBb92hZheoUJUIU45OpwYWW3EXB1ZxjPv5Zam5 oBmd/T6EnyC5yuc9StXOicWk4zBdodCdQUkj2givsBjCS7CT4C/P/q2BClVX2msT +FxepnFaFc05LQmXVqi/OGjp71L5hOZemDGnuidbDfHgiQcDsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI80n5vypBq5VBMYALzR40DT35bkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjgxYTA1ZWItY2NlNi0z N2I3LTk1YjktMjNiYmVkOTg1NTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyksMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyKYaTdeW5v4NQHtLyvFRAnTF8AzVTIMzPCeD24mPBPgRhpZPMnzERx R40/ztX2I5qAgxxvgL26sum7fYuHZVc/SR2EqQXqNHXU0jyrAZ4IrVuOYCg6pyaq Nm3vx5r8eVkfKEROyxZYJ9Z6vNqH420r+12xfpFnQ3z7svV7ZP3s5rwmcKg2eUH0 bK7CbhX0EvEW5uadREZ7VMsxPtfJ2SggxjWpXC5xflRd5hoPxd0AQrod/IB5oTCr waCZKKSDEFij1ZfPUuVm3cvH9woLjHAcDKvXD+njb9c1TVjxaUDcRvsBuJxBYYbf LK/KHDtIYx3Ttc1eaYL+Ob8qe0NbTyo= -----END CERTIFICATE-----Generated at Sat Aug 23 19:50:47 2025 by rpki-client