$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/322d5352-2836-3ae0-bd3b-037e7b66a29a.roa File: 322d5352-2836-3ae0-bd3b-037e7b66a29a.roa (raw, json) Hash identifier: JoZ6cLxtPKj7dkdgy0TCPsvhZyBnOzCOsAqpXszZ8qk= Subject key identifier: 88:0C:07:3B:C5:CA:16:C0:16:DF:80:EA:15:66:10:35:3B:12:55:7C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE2FBC41710D999E1E4A06600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/322d5352-2836-3ae0-bd3b-037e7b66a29a.roa Signing time: Sun 17 Aug 2025 13:00:41 +0000 ROA not before: Sun 17 Aug 2025 13:00:41 +0000 ROA not after: Sat 15 Nov 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.60.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e2:fb:c4:17:10:d9:99:e1:e4:a0:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 17 13:00:41 2025 GMT Not After : Nov 15 14:00:41 2025 GMT Subject: CN=abf9b565-3e9d-4346-bb72-630bcb4a8815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:71:15:f7:8a:9d:b7:87:ce:9c:c0:21:11:00: 66:af:d7:a6:1a:de:b2:bc:fe:02:c3:fc:b0:d5:03: 55:58:3f:60:fc:56:19:72:6a:41:dc:08:98:f6:88: 04:39:b5:70:be:7c:34:66:32:f8:65:3e:fb:63:6c: 13:c3:79:2a:41:a7:a8:98:c8:24:9b:be:5e:63:52: e6:86:9f:e0:bc:27:1a:b8:8b:a2:92:c8:11:70:6b: 83:8e:fc:cb:49:1e:16:69:40:1c:a9:60:3c:48:2c: ed:1a:24:42:9e:13:90:0a:9b:a4:fa:3b:fa:ec:c8: 08:20:e8:f5:34:eb:00:63:3d:7e:bb:da:ae:cc:00: f0:91:d3:3d:75:71:7b:fd:34:0b:f2:06:d7:6a:a1: 6c:6e:6b:d0:87:b3:9f:05:b3:c4:b3:85:7f:61:af: 33:ee:80:3e:a9:b2:7a:09:09:ab:d3:ff:55:0c:b2: bc:d6:f4:45:d2:ec:b9:db:f1:10:f2:ca:14:6d:9b: 62:5e:fc:87:62:6d:8c:78:8a:93:d5:4e:2b:88:eb: 1a:a5:2c:4e:75:4a:f4:88:65:5b:42:f6:3c:6d:cb: 97:99:a9:6a:b0:77:5c:21:b0:7d:81:e9:6c:41:c5: 26:b5:6b:dd:94:64:9c:45:85:2d:70:2e:da:8c:15: ea:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0C:07:3B:C5:CA:16:C0:16:DF:80:EA:15:66:10:35:3B:12:55:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/322d5352-2836-3ae0-bd3b-037e7b66a29a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.60.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:fc:4a:18:ab:82:fa:57:ed:e1:8f:27:b1:8d:bb:5a:bd:7a: 9b:d3:c9:87:a7:99:22:12:1b:14:58:be:49:0c:95:34:82:8c: d0:cb:16:e1:46:cf:46:c0:44:90:5c:65:ec:20:70:ac:62:b4: 23:d3:0f:eb:59:69:03:0f:4f:4b:8b:72:6e:88:bf:a7:15:1d: cd:ba:5c:ec:4f:3a:d4:07:76:27:b2:d0:64:c8:29:9e:b5:33: d8:25:11:1e:8a:39:c6:d1:c5:9f:e7:68:a9:41:7c:4e:07:de: d0:f8:a2:88:9c:1c:a0:21:2c:b3:c4:48:b3:09:e2:40:f6:01: 9a:3c:bc:5e:b4:25:40:eb:cd:d2:c1:df:f4:aa:34:52:c3:e1: 8c:53:08:26:70:f9:e0:89:d3:b9:d6:d7:d0:ac:80:f8:8c:da: 11:aa:86:25:5d:92:39:02:00:c5:a2:02:42:8c:a7:8e:04:7e: 3b:5e:b2:c6:09:f9:d5:ff:77:57:8a:b7:2e:e9:fb:a6:0a:87: 6e:a2:9a:ea:b0:cb:d5:02:20:33:fe:b8:81:1b:45:45:c4:3f: 56:64:c0:15:ad:b4:e4:c4:67:6a:04:8f:67:38:f7:55:5a:8b: 18:44:e0:ca:02:e9:e9:df:8c:33:ed:a4:c4:c8:5d:8f:a9:21: 52:b3:6e:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEri+8QXENmZ4eSgZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxNzEzMDA0MVoXDTI1MTExNTE0MDA0MVowLzEtMCsGA1UEAxMk YWJmOWI1NjUtM2U5ZC00MzQ2LWJiNzItNjMwYmNiNGE4ODE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXEV94qdt4fOnMAhEQBmr9emGt6yvP4Cw/yw 1QNVWD9g/FYZcmpB3AiY9ogEObVwvnw0ZjL4ZT77Y2wTw3kqQaeomMgkm75eY1Lm hp/gvCcauIuiksgRcGuDjvzLSR4WaUAcqWA8SCztGiRCnhOQCpuk+jv67MgIIOj1 NOsAYz1+u9quzADwkdM9dXF7/TQL8gbXaqFsbmvQh7OfBbPEs4V/Ya8z7oA+qbJ6 CQmr0/9VDLK81vRF0uy52/EQ8soUbZtiXvyHYm2MeIqT1U4riOsapSxOdUr0iGVb QvY8bcuXmalqsHdcIbB9gelsQcUmtWvdlGScRYUtcC7ajBXqFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgMBzvFyhbAFt+A6hVmEDU7ElV8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzIyZDUzNTItMjgzNi0z YWUwLWJkM2ItMDM3ZTdiNjZhMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzy8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX8ShirgvpX7eGPJ7GNu1q9epvTyYenmSISGxRYvkkMlTSCjNDLFuFG z0bARJBcZewgcKxitCPTD+tZaQMPT0uLcm6Iv6cVHc26XOxPOtQHdiey0GTIKZ61 M9glER6KOcbRxZ/naKlBfE4H3tD4ooicHKAhLLPESLMJ4kD2AZo8vF60JUDrzdLB 3/SqNFLD4YxTCCZw+eCJ07nW19CsgPiM2hGqhiVdkjkCAMWiAkKMp44EfjtessYJ +dX/d1eKty7p+6YKh26imuqwy9UCIDP+uIEbRUXEP1ZkwBWttOTEZ2oEj2c491Va ixhE4MoC6enfjDPtpMTIXY+pIVKzbkc= -----END CERTIFICATE-----Generated at Sat Aug 23 12:59:20 2025 by rpki-client