$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43083772-3eb5-35cd-a8ea-5deefe5de773.roa File: 43083772-3eb5-35cd-a8ea-5deefe5de773.roa (raw, json) Hash identifier: 4CTIPkFKpybrvqmmQOFMH0VVXv1aWeH1RSAZQTl+LBw= Subject key identifier: 14:18:16:5D:2C:84:52:09:92:F5:CC:89:65:D7:88:7C:71:03:87:84 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE891361D3721C51A4AFEF870 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43083772-3eb5-35cd-a8ea-5deefe5de773.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.0.0.0/12 maxlen: 12 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:36:1d:37:21:c5:1a:4a:fe:f8:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=e31efb63-be2a-4109-aac9-2ecee70f8122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e2:e7:a2:3f:1e:2a:e4:ea:11:a5:7a:9d:84: 0c:61:2b:37:80:85:b8:f8:cc:f3:64:fa:6c:b7:4f: 7e:f1:4d:19:5d:40:f3:54:d1:ca:8c:25:16:ef:b8: ef:e7:f1:3e:7d:b3:58:21:04:70:a3:3f:0b:42:34: c8:87:bd:37:65:2d:f7:3a:47:41:10:75:5a:b6:24: 7d:90:ba:71:3c:ad:73:da:42:a6:e0:b6:d4:da:93: ac:76:b4:86:42:7d:91:33:5a:da:1e:84:c0:51:96: ba:c5:c9:90:b7:48:88:4a:fc:49:6f:3d:3c:f9:fd: aa:c9:e9:02:95:b2:15:fb:d9:d5:01:74:d5:87:95: 99:11:9b:44:cd:d2:44:e5:a9:b6:ee:6e:8a:ff:37: 72:71:69:67:d9:32:e7:d8:e0:09:5e:e2:51:3d:03: 0d:cb:d6:56:44:9d:34:bc:ca:7a:ee:56:82:60:f4: 2f:a2:0b:a4:60:a6:7c:a8:c6:a9:33:ec:b7:83:21: c4:cb:af:ef:df:fc:92:08:eb:5a:f0:3e:06:b2:17: 22:b9:5b:3c:1d:2f:d6:30:82:dc:f3:07:b4:22:5f: ae:e9:18:0f:40:05:e4:af:a4:68:4a:4e:c7:9d:91: 82:8b:6b:45:93:58:ef:47:ce:7a:af:d8:c5:fb:0f: 1c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:18:16:5D:2C:84:52:09:92:F5:CC:89:65:D7:88:7C:71:03:87:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43083772-3eb5-35cd-a8ea-5deefe5de773.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.0.0.0/12 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:e5:96:a3:15:bb:66:59:a8:bd:3e:15:6e:22:a2:64:ac:f1: 8c:3c:f7:93:a4:63:fb:24:4a:3d:03:f6:e0:c3:ed:d3:32:1e: 29:5d:d8:6a:3f:1f:83:31:e2:76:72:9d:f4:f1:b0:26:3d:88: 04:a4:9a:21:58:89:89:13:ee:38:b3:6e:0c:d6:97:cc:9b:1c: d4:56:99:a2:64:42:86:f2:b0:62:de:f0:2c:c8:ac:70:9f:ed: 47:21:0f:e5:f0:1b:07:28:a2:26:94:d8:81:59:ad:b4:7d:97: db:bd:0f:10:9f:c7:9d:da:c2:8e:15:5f:b2:6b:39:43:f5:2c: 59:2a:b0:ec:a0:25:13:8a:ea:e0:14:49:0f:36:39:ef:d2:c8: cf:4f:73:55:ab:d6:6d:c0:1a:1a:f3:83:b4:04:f0:0c:5a:20: 89:a1:e7:17:da:02:e4:9e:f6:be:a3:85:0c:77:7d:cb:6a:82: ea:2a:ad:71:b5:ec:87:c7:07:9d:2b:96:2a:d2:db:92:cb:30: e9:36:e1:a0:d8:5e:d1:e0:7e:b3:53:f5:e2:06:ab:32:4b:f6: a3:25:2c:7c:1d:cc:07:10:79:ea:50:b3:43:15:1b:aa:c7:4f: 50:26:2f:92:a5:b8:36:07:26:6a:51:4d:a8:fc:7b:aa:7c:b8: 7a:e6:b6:d3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErokTYdNyHFGkr++HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk ZTMxZWZiNjMtYmUyYS00MTA5LWFhYzktMmVjZWU3MGY4MTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuLnoj8eKuTqEaV6nYQMYSs3gIW4+MzzZPps t09+8U0ZXUDzVNHKjCUW77jv5/E+fbNYIQRwoz8LQjTIh703ZS33OkdBEHVatiR9 kLpxPK1z2kKm4LbU2pOsdrSGQn2RM1raHoTAUZa6xcmQt0iISvxJbz08+f2qyekC lbIV+9nVAXTVh5WZEZtEzdJE5am27m6K/zdycWln2TLn2OAJXuJRPQMNy9ZWRJ00 vMp67laCYPQvogukYKZ8qMapM+y3gyHEy6/v3/ySCOta8D4GshciuVs8HS/WMILc 8we0Il+u6RgPQAXkr6RoSk7HnZGCi2tFk1jvR856r9jF+w8crQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBQYFl0shFIJkvXMiWXXiHxxA4eEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDMwODM3NzItM2ViNS0z NWNkLWE4ZWEtNWRlZWZlNWRlNzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMEFwAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAFuWWoxW7ZlmovT4VbiKiZKzxjDz3k6Rj+yRKPQP24MPt0zIeKV3Yaj8f gzHidnKd9PGwJj2IBKSaIViJiRPuOLNuDNaXzJsc1FaZomRChvKwYt7wLMiscJ/t RyEP5fAbByiiJpTYgVmttH2X270PEJ/HndrCjhVfsms5Q/UsWSqw7KAlE4rq4BRJ DzY579LIz09zVavWbcAaGvODtATwDFogiaHnF9oC5J72vqOFDHd9y2qC6iqtcbXs h8cHnSuWKtLbkssw6TbhoNhe0eB+s1P14garMkv2oyUsfB3MBxB56lCzQxUbqsdP UCYvkqW4NgcmalFNqPx7qny4eua20w== -----END CERTIFICATE-----Generated at Sat Aug 23 15:07:07 2025 by rpki-client