$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/493659b6-64ee-3cea-9f82-ffd009d4b4e3.roa File: 493659b6-64ee-3cea-9f82-ffd009d4b4e3.roa (raw, json) Hash identifier: qL4lBWh5RS8pxgJDuRCBb1nL6uBbMnE7IiSLGQTYz4U= Subject key identifier: 2E:E3:0B:A7:F3:38:20:E8:FB:93:DF:F3:4D:B4:D9:36:A8:12:65:A9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ADECBCA0E112CEC247EF2CE20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/493659b6-64ee-3cea-9f82-ffd009d4b4e3.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.77.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:ca:0e:11:2c:ec:24:7e:f2:ce:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=7c7cd1d8-204a-4f7e-b61d-d3aa7b569162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:98:27:cd:d7:a7:f7:07:3d:7e:7f:9d:76:ad: e5:81:d9:02:56:8f:c3:b4:72:21:f7:d9:a4:3c:33: 82:3f:b1:37:26:f5:27:03:94:75:b5:07:97:82:c5: f9:fb:59:a0:17:a2:c8:14:1f:ad:21:4c:d7:68:03: c6:19:ab:6d:35:76:7c:fc:cd:b0:3a:37:77:df:68: c7:f0:76:70:f5:a3:0a:4f:d6:3c:45:ee:98:de:89: 84:e5:ab:71:f8:0a:c3:c8:cf:8c:cc:25:56:c6:0e: bb:aa:ba:ff:c6:0e:05:77:b0:32:e9:1f:7e:b8:2a: 87:1b:da:a9:0c:b7:a3:fc:9b:9d:cc:e3:6a:01:3d: ea:60:3e:fb:c9:0c:c1:de:ea:0f:d4:1c:ec:a5:16: c3:59:a7:84:0f:74:27:af:35:2c:65:8b:e6:db:f1: 2c:b4:c1:c2:c6:fb:3d:eb:4b:f2:31:6d:6e:78:bd: b7:4a:35:3a:a4:0e:44:d4:7f:b9:18:a5:43:d5:77: c8:d8:c6:66:3a:b3:30:b2:ff:cf:5b:df:2e:63:21: 00:17:44:39:34:1c:3c:74:11:75:40:cf:ad:30:67: d8:f3:a3:fa:3d:6d:09:36:a5:9d:23:1f:78:24:83: 7c:31:3e:98:63:3d:11:42:84:d9:89:46:93:71:e2: 5a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E3:0B:A7:F3:38:20:E8:FB:93:DF:F3:4D:B4:D9:36:A8:12:65:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/493659b6-64ee-3cea-9f82-ffd009d4b4e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.77.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:5c:8d:9b:92:77:c1:a3:74:1a:56:e5:2e:86:47:93:6c:9b: fc:3e:6f:a7:f7:32:b9:94:a2:7f:af:8c:61:fb:9d:88:d1:23: a5:57:02:e5:ca:93:45:d3:a2:bb:ac:8f:aa:8b:f2:fd:f4:f3: 33:39:9c:d1:d6:4a:f4:f0:12:66:85:db:ec:3b:97:c5:44:15: 3e:cd:b8:e0:43:48:98:3e:b9:de:e1:a0:55:5e:a6:6d:63:95: eb:e1:17:f6:98:77:39:a9:55:e8:89:c4:d8:73:01:1d:51:59: 7c:c2:fd:64:12:27:bb:f1:48:73:47:83:c0:af:32:6e:d4:4e: 25:69:90:29:43:95:83:a6:da:00:fe:c6:af:f2:20:8d:31:1f: e2:55:a4:50:04:71:22:f3:19:ea:30:c0:70:53:f8:93:24:5e: b6:e3:c3:c3:da:97:13:bc:30:9f:4e:7e:d3:a8:59:11:ec:c8: f5:7d:2d:c9:d0:32:22:d2:2a:2a:0e:d2:06:92:5b:e6:70:b2: 7e:6e:06:3f:21:45:69:55:3b:6c:5f:fc:0b:65:65:95:e7:e0: 0f:02:d9:91:84:fe:ff:65:93:7f:ba:82:64:a8:cb:6b:6f:25: 31:4e:af:3b:55:c6:e3:ca:f4:d4:8b:f4:95:96:56:33:fd:93: 9e:f2:7a:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey8oOESzsJH7yziAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk N2M3Y2QxZDgtMjA0YS00ZjdlLWI2MWQtZDNhYTdiNTY5MTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5gnzden9wc9fn+ddq3lgdkCVo/DtHIh99mk PDOCP7E3JvUnA5R1tQeXgsX5+1mgF6LIFB+tIUzXaAPGGattNXZ8/M2wOjd332jH 8HZw9aMKT9Y8Re6Y3omE5atx+ArDyM+MzCVWxg67qrr/xg4Fd7Ay6R9+uCqHG9qp DLej/JudzONqAT3qYD77yQzB3uoP1BzspRbDWaeED3QnrzUsZYvm2/EstMHCxvs9 60vyMW1ueL23SjU6pA5E1H+5GKVD1XfI2MZmOrMwsv/PW98uYyEAF0Q5NBw8dBF1 QM+tMGfY86P6PW0JNqWdIx94JIN8MT6YYz0RQoTZiUaTceJa9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7jC6fzOCDo+5Pf80202TaoEmWpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDkzNjU5YjYtNjRlZS0z Y2VhLTlmODItZmZkMDA5ZDRiNGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF03FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANcjZuSd8GjdBpW5S6GR5Nsm/w+b6f3MrmUon+vjGH7nYjRI6VXAuXK k0XTorusj6qL8v308zM5nNHWSvTwEmaF2+w7l8VEFT7NuOBDSJg+ud7hoFVepm1j levhF/aYdzmpVeiJxNhzAR1RWXzC/WQSJ7vxSHNHg8CvMm7UTiVpkClDlYOm2gD+ xq/yII0xH+JVpFAEcSLzGeowwHBT+JMkXrbjw8PalxO8MJ9OftOoWRHsyPV9LcnQ MiLSKioO0gaSW+Zwsn5uBj8hRWlVO2xf/AtlZZXn4A8C2ZGE/v9lk3+6gmSoy2tv JTFOrztVxuPK9NSL9JWWVjP9k57yegY= -----END CERTIFICATE-----Generated at Sat Aug 23 13:02:46 2025 by rpki-client