$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37f9eb35-9e76-3fe3-a052-46144a0781f9.roa File: 37f9eb35-9e76-3fe3-a052-46144a0781f9.roa (raw, json) Hash identifier: tDZJJX8rhodr/kD6JChrAPXznNyntJHv4kQnYW5iaJo= Subject key identifier: FC:EB:9C:A0:79:00:2F:20:6B:56:17:BE:48:D5:3B:DD:BF:40:CE:79 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AD7D1307955AD62848540F700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37f9eb35-9e76-3fe3-a052-46144a0781f9.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 35994 IP address blocks: 23.73.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:30:79:55:ad:62:84:85:40:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=0987a96f-6efa-410f-8449-a5e0b56fdf6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a8:df:38:a6:61:bc:f3:c9:9d:2b:c6:04:13: 10:b6:a4:3e:65:69:bd:22:40:fd:b4:76:93:c3:cf: 3c:46:48:4c:6d:45:e0:8e:f1:1d:fa:36:16:59:3e: 96:64:ac:4b:60:86:77:a1:23:66:76:f6:c5:60:a7: 39:7a:63:d2:74:bd:64:a9:73:b9:dc:cf:7c:b4:23: 98:7b:71:85:f3:0f:52:80:aa:f2:63:9f:b1:65:a8: 58:0e:4d:cc:52:7f:3a:70:6c:0c:64:cd:39:92:7b: 7f:31:b2:ac:09:67:30:ff:b9:45:1f:74:a1:c6:27: 74:81:10:e4:8e:b4:e1:7b:9f:40:9d:da:7f:c9:77: 72:1a:02:94:10:e6:c1:43:eb:37:bb:60:58:e9:ec: 3e:55:68:8e:99:aa:45:93:d3:41:71:91:a9:13:56: b0:a3:0b:ca:12:20:d3:d0:d9:45:d0:39:b3:2d:d4: 00:7c:a2:13:f9:48:f2:0d:17:0c:03:0e:21:58:77: b9:5c:f4:2b:c1:e2:23:33:d9:62:7b:b2:3b:80:f1: aa:df:ad:4f:43:5a:c2:71:43:69:a0:81:f8:f4:ea: 8a:f3:c6:96:13:48:4c:3b:f4:63:ba:07:f0:24:38: d0:de:a7:93:40:24:9b:ec:54:c8:7f:67:a2:b7:21: a8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:EB:9C:A0:79:00:2F:20:6B:56:17:BE:48:D5:3B:DD:BF:40:CE:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37f9eb35-9e76-3fe3-a052-46144a0781f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.73.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:92:9e:09:c2:96:60:95:a6:4b:3b:e1:94:c6:c1:13:87:c7: a6:be:98:66:4e:20:37:29:17:87:4c:60:dd:ed:25:b5:2c:67: 16:a5:68:b7:bb:a2:5e:ea:9e:54:46:a1:24:4b:38:f2:59:8d: 6b:a1:5a:c2:60:51:db:f5:10:41:59:6d:04:8d:fd:ef:f9:4b: a0:47:97:7d:a3:50:54:36:e1:bb:0f:06:dc:66:02:e1:7c:bc: c0:ca:11:d5:66:1b:0f:19:f7:03:6e:05:fd:34:b0:13:2c:d0: b4:e6:58:01:b2:e1:55:3f:0b:d6:6a:08:83:7b:5e:77:fd:24: cd:2a:4b:a1:9a:fc:ea:e2:94:a9:36:e4:b8:d6:2f:2a:89:14: d9:65:4a:f5:a8:ae:3f:22:d0:3b:a9:d9:93:97:83:69:20:15: 38:cd:33:ed:a0:00:fb:4b:aa:db:9e:ba:c3:2b:39:71:3f:f9: 92:b3:2a:94:d8:d4:c7:49:b6:01:61:a0:41:ea:24:bd:ad:aa: 7b:f0:c2:d4:36:b2:f8:a4:be:b2:ae:88:f9:25:0e:eb:62:68: bb:e5:bd:a4:95:8c:01:a4:a2:01:d6:33:67:f5:2a:76:85:4d: 23:94:1c:0e:14:8e:64:de:b8:af:a3:a9:bd:c8:f0:07:c2:54: e2:2f:41:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0TB5Va1ihIVA9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk MDk4N2E5NmYtNmVmYS00MTBmLTg0NDktYTVlMGI1NmZkZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqjfOKZhvPPJnSvGBBMQtqQ+ZWm9IkD9tHaT w888RkhMbUXgjvEd+jYWWT6WZKxLYIZ3oSNmdvbFYKc5emPSdL1kqXO53M98tCOY e3GF8w9SgKryY5+xZahYDk3MUn86cGwMZM05knt/MbKsCWcw/7lFH3Shxid0gRDk jrThe59Andp/yXdyGgKUEObBQ+s3u2BY6ew+VWiOmapFk9NBcZGpE1awowvKEiDT 0NlF0DmzLdQAfKIT+UjyDRcMAw4hWHe5XPQrweIjM9lie7I7gPGq361PQ1rCcUNp oIH49OqK88aWE0hMO/RjugfwJDjQ3qeTQCSb7FTIf2eityGoqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzrnKB5AC8ga1YXvkjVO92/QM55MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzdmOWViMzUtOWU3Ni0z ZmUzLWEwNTItNDYxNDRhMDc4MWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0naMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmSngnClmCVpks74ZTGwROHx6a+mGZOIDcpF4dMYN3tJbUsZxalaLe7 ol7qnlRGoSRLOPJZjWuhWsJgUdv1EEFZbQSN/e/5S6BHl32jUFQ24bsPBtxmAuF8 vMDKEdVmGw8Z9wNuBf00sBMs0LTmWAGy4VU/C9ZqCIN7Xnf9JM0qS6Ga/OrilKk2 5LjWLyqJFNllSvWorj8i0Dup2ZOXg2kgFTjNM+2gAPtLqtueusMrOXE/+ZKzKpTY 1MdJtgFhoEHqJL2tqnvwwtQ2svikvrKuiPklDutiaLvlvaSVjAGkogHWM2f1KnaF TSOUHA4UjmTeuK+jqb3I8AfCVOIvQRc= -----END CERTIFICATE-----Generated at Sat Aug 23 17:33:54 2025 by rpki-client