$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41851ca6-df54-3d54-8d5f-1bdda39ed87e.roa File: 41851ca6-df54-3d54-8d5f-1bdda39ed87e.roa (raw, json) Hash identifier: CH06yHom37wAbCNDNKtf/lm9oRBmC65W3cM3sYbbpsY= Subject key identifier: 52:AB:EF:66:8F:FB:4E:A0:6A:84:67:2C:67:B5:6C:4D:BE:C1:DC:4A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE461414AECE1EAC9DD21B500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41851ca6-df54-3d54-8d5f-1bdda39ed87e.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.3.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:41:4a:ec:e1:ea:c9:dd:21:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=734f48ee-b09d-4537-9ba1-4492d4b5813c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:11:3e:94:f3:16:ad:c2:8a:62:14:43:d3:0f: c3:75:ec:85:73:c0:a6:b0:65:84:a3:2e:5c:64:a9: 93:90:f1:04:a7:d1:3e:dd:48:e5:e4:8f:b3:bc:45: ee:e8:ca:ee:1e:00:d7:94:c3:a1:1d:43:6a:59:e0: 7f:0b:ec:96:93:39:56:8b:3f:77:e4:7e:cf:d9:91: 59:b4:4e:1b:a6:e8:41:9f:92:b8:04:a2:d5:a4:2e: e0:5f:7a:f7:96:bc:6a:4a:50:f8:1c:4e:b5:42:7d: 1a:00:17:d5:ff:5d:ea:0b:f5:14:f5:fb:6b:b5:5e: 43:60:d4:ab:2e:03:0d:89:f1:f0:9d:00:33:86:b6: 47:8b:08:79:f6:95:bb:e3:f2:45:48:db:40:b7:80: 28:ff:93:80:c8:4f:a5:ee:d8:02:68:18:ae:6a:65: 2a:a1:23:d0:d2:84:d9:53:dc:c1:25:1c:f8:59:b0: a1:a6:51:42:6b:80:51:9d:01:d7:40:b3:0c:ea:5e: 5a:3f:bd:42:c7:b6:83:f3:e8:e9:c3:6b:79:8a:73: 78:ec:5f:a0:66:fd:85:59:c2:c2:c7:34:42:b4:77: 3a:24:c0:b9:ea:4e:82:ef:80:1e:17:57:94:90:d8: 2d:18:09:16:a1:30:b0:a9:dc:ad:cb:7a:9a:97:3a: 9b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:AB:EF:66:8F:FB:4E:A0:6A:84:67:2C:67:B5:6C:4D:BE:C1:DC:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41851ca6-df54-3d54-8d5f-1bdda39ed87e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:f3:69:7e:0b:6d:b6:ae:62:c8:fa:21:e8:14:64:7a:06:cb: 9b:55:8a:49:c3:e3:f4:ba:84:e1:18:01:9f:51:e2:00:ff:9b: 92:da:d7:ee:35:42:7c:fd:c1:f7:71:59:52:ac:c6:30:36:18: 24:aa:a7:18:9e:81:9c:3b:bc:c4:c1:f7:29:68:f6:ae:be:18: 05:4c:fb:03:34:5b:99:d9:a4:28:53:1d:a7:0a:f3:40:9d:d6: 50:5c:31:f6:5d:e0:2a:43:9f:37:ae:94:79:74:c4:d1:91:9c: f6:97:76:eb:ad:13:06:76:e2:5a:41:db:92:76:41:38:ff:cf: 95:9a:45:f7:1c:04:b4:7f:8b:70:d0:3d:1c:6f:e8:cd:d5:68: 70:1c:1e:29:e7:ec:fa:76:95:dc:b7:32:1e:3c:00:4b:c2:5b: 7a:30:17:a6:31:a7:64:fa:cb:e4:93:d3:e5:4b:e0:ab:a5:be: fb:31:c6:5c:51:2f:7c:78:f1:55:42:10:2d:fc:d6:8b:a6:d3: e1:34:84:4a:b2:53:08:3c:fa:00:98:57:08:d7:c0:96:73:95: 1f:9e:c5:7b:d3:69:fe:dc:87:d9:62:ea:35:f8:5f:a4:cc:51: 15:65:1d:0c:b7:2f:b3:9c:02:1b:ff:da:8c:dc:17:1b:f2:d3: cd:14:ce:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYUFK7OHqyd0htQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk NzM0ZjQ4ZWUtYjA5ZC00NTM3LTliYTEtNDQ5MmQ0YjU4MTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhE+lPMWrcKKYhRD0w/DdeyFc8CmsGWEoy5c ZKmTkPEEp9E+3Ujl5I+zvEXu6MruHgDXlMOhHUNqWeB/C+yWkzlWiz935H7P2ZFZ tE4bpuhBn5K4BKLVpC7gX3r3lrxqSlD4HE61Qn0aABfV/13qC/UU9ftrtV5DYNSr LgMNifHwnQAzhrZHiwh59pW74/JFSNtAt4Ao/5OAyE+l7tgCaBiuamUqoSPQ0oTZ U9zBJRz4WbChplFCa4BRnQHXQLMM6l5aP71Cx7aD8+jpw2t5inN47F+gZv2FWcLC xzRCtHc6JMC56k6C74AeF1eUkNgtGAkWoTCwqdyty3qalzqbsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKr72aP+06gaoRnLGe1bE2+wdxKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDE4NTFjYTYtZGY1NC0z ZDU0LThkNWYtMWJkZGEzOWVkODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzzaX4LbbauYsj6IegUZHoGy5tViknD4/S6hOEYAZ9R4gD/m5La1+41 Qnz9wfdxWVKsxjA2GCSqpxiegZw7vMTB9ylo9q6+GAVM+wM0W5nZpChTHacK80Cd 1lBcMfZd4CpDnzeulHl0xNGRnPaXduutEwZ24lpB25J2QTj/z5WaRfccBLR/i3DQ PRxv6M3VaHAcHinn7Pp2ldy3Mh48AEvCW3owF6Yxp2T6y+ST0+VL4KulvvsxxlxR L3x48VVCEC381oum0+E0hEqyUwg8+gCYVwjXwJZzlR+exXvTaf7ch9li6jX4X6TM URVlHQy3L7OcAhv/2ozcFxvy080UzlM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:49:10 2025 by rpki-client