$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43de1d2e-2d24-35d7-881a-a177dc742059.roa File: 43de1d2e-2d24-35d7-881a-a177dc742059.roa (raw, json) Hash identifier: TcmXguWEh8e0vOII3jynNbfEgyhSR54/nu2aNMtPg0I= Subject key identifier: 67:1D:BB:D5:D5:91:34:19:33:CF:42:7A:D0:94:B1:16:42:E7:72:83 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ADD668EB730590AF2C50D5080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43de1d2e-2d24-35d7-881a-a177dc742059.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.198.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:8e:b7:30:59:0a:f2:c5:0d:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=baa06342-951b-479e-84d0-9da991c99859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b4:98:cf:e1:d9:58:e3:9a:5b:81:c7:35:bc: 3b:23:3e:ed:71:2d:6f:e3:ab:05:a2:8d:9f:60:9c: 41:05:b6:68:43:3d:3a:ad:df:51:b6:3c:f2:47:12: dd:28:bd:25:b2:2a:ca:5e:a5:46:bd:e2:3d:84:9c: da:ae:10:41:37:e5:f2:52:44:82:10:da:fa:f8:87: 6a:0d:4a:a8:41:05:ec:d8:6c:f7:7f:8a:33:20:e1: 5b:50:dc:4a:26:29:6f:93:c7:9b:5c:03:59:10:e4: 2f:a3:a2:5d:4f:e5:00:47:68:70:2e:f1:78:57:53: cd:52:9d:6d:a6:3e:ad:42:76:a2:b4:2d:dd:af:51: 65:28:5e:ad:35:5a:87:b8:c1:35:20:e3:57:b7:2a: ef:03:72:08:19:54:85:60:c4:71:7f:98:8c:2e:ea: cd:f9:41:9a:73:de:01:fd:a4:f7:9b:04:33:1f:09: a2:99:f3:a6:5c:b3:58:79:a6:c3:5b:fb:65:2c:1c: ec:a3:89:1a:22:9a:56:6f:d7:ac:4e:ba:d5:a4:ca: 6a:5a:ac:7f:23:24:31:97:ff:53:f6:7d:3c:20:45: 34:79:c5:db:78:0d:bf:8e:79:23:60:5e:d0:a3:f7: 97:7d:6e:16:40:1c:e3:02:03:f8:95:b4:e9:f9:ce: ba:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1D:BB:D5:D5:91:34:19:33:CF:42:7A:D0:94:B1:16:42:E7:72:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43de1d2e-2d24-35d7-881a-a177dc742059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.198.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:00:32:1d:6a:08:3a:04:73:c5:36:ad:5a:c8:1d:53:15:34: 96:49:d6:ef:f0:dd:e0:71:78:a1:f6:53:aa:d2:e7:54:8f:06: 10:a6:40:95:18:5d:56:47:14:51:1d:d5:0c:1e:42:58:b2:61: 42:4e:00:93:50:07:1e:76:dc:a8:50:f3:6f:16:b4:ec:51:c4: f0:15:b8:db:f8:96:38:0c:ac:8e:1f:a1:1e:b4:d2:fb:6b:ae: a2:6f:c7:5a:36:92:5b:ba:d4:36:a3:e8:47:f9:63:0e:27:1c: fb:12:f6:fb:5a:1c:af:ad:eb:06:f4:c9:ed:16:c6:5a:6d:ee: c9:d9:57:92:a3:57:5c:ea:1c:7c:52:e5:b8:31:16:0a:40:ab: 01:61:08:03:6d:e3:2a:47:f4:ba:70:a1:f9:ef:1d:b0:38:d8: 74:3b:00:c2:6c:e2:0f:d7:62:ff:d4:72:7f:f8:82:a3:0a:fb: d0:03:87:3d:df:3f:f1:ad:b4:e9:58:44:35:d2:81:78:93:9e: f6:74:1a:b9:e5:e3:e5:35:1b:99:64:a9:9d:dd:52:cd:4a:f6: de:b5:79:b4:f3:72:f2:bd:33:49:9b:64:21:91:72:4f:58:8d: 29:89:49:08:0d:20:7f:37:cf:62:e2:46:85:f8:49:96:19:5c: 3d:06:fa:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZo63MFkK8sUNUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk YmFhMDYzNDItOTUxYi00NzllLTg0ZDAtOWRhOTkxYzk5ODU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7SYz+HZWOOaW4HHNbw7Iz7tcS1v46sFoo2f YJxBBbZoQz06rd9RtjzyRxLdKL0lsirKXqVGveI9hJzarhBBN+XyUkSCENr6+Idq DUqoQQXs2Gz3f4ozIOFbUNxKJilvk8ebXANZEOQvo6JdT+UAR2hwLvF4V1PNUp1t pj6tQnaitC3dr1FlKF6tNVqHuME1IONXtyrvA3IIGVSFYMRxf5iMLurN+UGac94B /aT3mwQzHwmimfOmXLNYeabDW/tlLBzso4kaIppWb9esTrrVpMpqWqx/IyQxl/9T 9n08IEU0ecXbeA2/jnkjYF7Qo/eXfW4WQBzjAgP4lbTp+c66DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcdu9XVkTQZM89CetCUsRZC53KDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDNkZTFkMmUtMmQyNC0z NWQ3LTg4MWEtYTE3N2RjNzQyMDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8YAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAAMh1qCDoEc8U2rVrIHVMVNJZJ1u/w3eBxeKH2U6rS51SPBhCmQJUY XVZHFFEd1QweQliyYUJOAJNQBx523KhQ828WtOxRxPAVuNv4ljgMrI4foR600vtr rqJvx1o2klu61Daj6Ef5Yw4nHPsS9vtaHK+t6wb0ye0Wxlpt7snZV5KjV1zqHHxS 5bgxFgpAqwFhCANt4ypH9LpwofnvHbA42HQ7AMJs4g/XYv/Ucn/4gqMK+9ADhz3f P/GttOlYRDXSgXiTnvZ0Grnl4+U1G5lkqZ3dUs1K9t61ebTzcvK9M0mbZCGRck9Y jSmJSQgNIH83z2LiRoX4SZYZXD0G+hY= -----END CERTIFICATE-----Generated at Sat Aug 23 12:55:46 2025 by rpki-client