$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/435db502-c2a0-3bd5-9acc-e02d8ff58032.roa File: 435db502-c2a0-3bd5-9acc-e02d8ff58032.roa (raw, json) Hash identifier: tVMii7Wx79abchibmhTLGAAj6WODZCdZvHpz7T4xFSo= Subject key identifier: 12:F5:60:FA:14:FF:19:AA:C8:6B:53:FC:BA:E9:D5:0C:E3:77:9D:E6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE4613F5EB51D26F2AB514500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/435db502-c2a0-3bd5-9acc-e02d8ff58032.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.1.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:3f:5e:b5:1d:26:f2:ab:51:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=aeb56f0f-c3f7-474d-ae76-b0b177347643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9f:ce:5a:32:15:03:24:f1:c0:46:7f:34:61: 40:c7:63:50:ef:12:08:0a:cc:88:5a:ac:cd:c2:31: 2a:60:43:74:e8:c5:ea:ff:cd:2a:bd:2d:2a:ad:53: fc:de:b9:1b:5b:63:88:e0:d5:dd:f1:77:e3:fe:5e: e0:c2:59:e6:54:99:8d:ee:19:cd:e2:72:7f:a3:e5: c1:63:09:84:4a:8a:6b:40:ed:58:ad:7c:de:89:d0: a1:36:bb:de:e7:1d:23:c9:63:2a:d9:a2:32:f1:7b: 67:da:ad:96:89:72:53:00:81:9c:0a:d1:ca:49:14: 86:f7:e2:fb:a9:5c:5b:8e:c0:ce:f4:9b:94:af:36: 28:f4:96:d1:27:8a:f2:83:b2:22:a0:42:36:53:7f: 7f:84:b7:71:82:91:40:7b:bb:eb:84:a9:03:56:33: 0e:e0:5e:6e:21:6c:fc:d3:9f:f3:cd:a4:c9:4f:19: 85:13:e7:be:e0:6c:e6:47:10:58:e4:c2:ea:e1:a7: 23:c8:9b:15:52:8b:bd:d2:c3:55:5e:d5:06:1a:a5: 18:e2:6e:a6:76:21:13:1c:b1:97:4e:12:f8:2d:9d: 86:5d:e8:46:f0:b7:23:0d:42:b1:f4:92:e1:30:81: 29:bd:f7:e7:a6:b1:cb:54:da:eb:39:2a:31:f9:f7: e6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F5:60:FA:14:FF:19:AA:C8:6B:53:FC:BA:E9:D5:0C:E3:77:9D:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/435db502-c2a0-3bd5-9acc-e02d8ff58032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:5e:44:92:b4:1e:d1:92:5f:d7:b2:55:c8:fc:cd:b3:78:20: 99:b0:32:9a:01:4f:06:fe:5e:9c:3a:19:73:ae:38:db:81:43: 17:0b:c0:24:a5:c0:78:9a:02:e4:cc:ff:72:21:9f:36:0e:91: 4d:b6:57:cf:10:d7:c4:fb:78:6f:2f:2f:c2:ec:11:72:01:e3: dd:be:7a:5f:03:95:b3:01:98:cb:52:9b:61:df:86:83:8e:c5: aa:88:71:41:65:8c:94:b5:b8:c5:f4:b3:87:08:74:37:39:b5: 1d:28:f9:0d:b4:a2:19:92:77:be:27:97:4b:24:4c:d6:01:c5: 37:9c:38:7e:86:9b:55:00:cb:9c:c7:41:09:3c:fd:21:38:bb: 0a:98:aa:cd:da:1b:ef:16:79:fc:6e:8e:6b:e1:37:2e:93:d6: bb:f1:36:a9:2a:5c:ef:78:10:fa:64:ab:23:a0:cd:56:97:86: 19:9a:80:72:0b:6a:76:aa:24:8b:38:a8:21:b4:13:11:53:24: fc:e2:6f:03:6c:b4:fe:8a:c9:9a:31:3d:44:09:49:de:12:7d: 16:81:ed:72:7a:d7:96:c7:fd:e3:ab:23:57:66:76:7e:aa:38: b7:63:98:fc:53:8e:36:b8:24:3f:6a:a7:87:5b:30:b7:3c:d9: fc:e3:9f:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYT9etR0m8qtRRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk YWViNTZmMGYtYzNmNy00NzRkLWFlNzYtYjBiMTc3MzQ3NjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp/OWjIVAyTxwEZ/NGFAx2NQ7xIICsyIWqzN wjEqYEN06MXq/80qvS0qrVP83rkbW2OI4NXd8Xfj/l7gwlnmVJmN7hnN4nJ/o+XB YwmESoprQO1YrXzeidChNrve5x0jyWMq2aIy8Xtn2q2WiXJTAIGcCtHKSRSG9+L7 qVxbjsDO9JuUrzYo9JbRJ4ryg7IioEI2U39/hLdxgpFAe7vrhKkDVjMO4F5uIWz8 05/zzaTJTxmFE+e+4GzmRxBY5MLq4acjyJsVUou90sNVXtUGGqUY4m6mdiETHLGX ThL4LZ2GXehG8LcjDUKx9JLhMIEpvffnprHLVNrrOSox+ffm1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBL1YPoU/xmqyGtT/Lrp1Qzjd53mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDM1ZGI1MDItYzJhMC0z YmQ1LTlhY2MtZTAyZDhmZjU4MDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwFkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVeRJK0HtGSX9eyVcj8zbN4IJmwMpoBTwb+Xpw6GXOuONuBQxcLwCSl wHiaAuTM/3IhnzYOkU22V88Q18T7eG8vL8LsEXIB492+el8DlbMBmMtSm2HfhoOO xaqIcUFljJS1uMX0s4cIdDc5tR0o+Q20ohmSd74nl0skTNYBxTecOH6Gm1UAy5zH QQk8/SE4uwqYqs3aG+8WefxujmvhNy6T1rvxNqkqXO94EPpkqyOgzVaXhhmagHIL anaqJIs4qCG0ExFTJPzibwNstP6KyZoxPUQJSd4SfRaB7XJ615bH/eOrI1dmdn6q OLdjmPxTjja4JD9qp4dbMLc82fzjn78= -----END CERTIFICATE-----Generated at Sat Aug 23 15:06:15 2025 by rpki-client