$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a1c0c6f-53d0-304c-a776-61d8d939f6ba.roa File: 4a1c0c6f-53d0-304c-a776-61d8d939f6ba.roa (raw, json) Hash identifier: 4KI9jDg0cxreMc46+pFeMMjN4dkI/uNVafb2etK3X5Y= Subject key identifier: 9E:13:2E:74:57:BE:20:4B:43:22:9F:1F:C8:40:02:33:82:39:28:4B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC016375D035AFFF66B64C880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a1c0c6f-53d0-304c-a776-61d8d939f6ba.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 35994 IP address blocks: 23.217.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:37:5d:03:5a:ff:f6:6b:64:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=f9034689-0b82-4a19-a4c5-b0f02ccd9a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c2:94:b5:42:17:90:f7:ba:f2:b5:c3:22:b4: 41:58:a3:97:91:5a:fb:c0:5c:01:09:79:e0:94:b1: fa:9b:b0:0f:42:c7:b0:2a:bd:08:eb:41:b9:3a:ea: f0:26:0f:a7:d6:1a:6e:db:59:82:2c:49:9a:3b:2c: 0a:5d:37:27:db:5b:23:6c:89:db:37:73:59:f8:b5: eb:ed:f5:88:e7:9c:05:2e:cd:32:82:78:13:10:03: f5:56:5e:fa:37:f5:08:13:34:6b:68:75:43:2a:21: 76:b4:c3:c7:4d:75:cf:a6:f0:4d:19:df:5e:02:20: 0b:8c:9a:6e:79:87:5e:b9:81:f6:80:68:81:58:40: df:0d:93:0d:cd:98:18:6b:54:67:c1:8b:67:d1:04: 10:35:d5:d9:d9:5a:61:0a:83:0c:e0:d0:c5:aa:66: 88:0b:47:9e:3e:f0:d1:8b:19:bd:ed:16:aa:77:61: 82:b5:a4:69:d1:c5:e5:3a:30:32:89:2a:77:8c:5a: 3a:cb:d6:42:0e:d2:8c:bf:b0:d1:dc:46:86:c5:82: 5b:be:d1:ff:5a:91:1c:dd:d3:f9:90:23:64:c0:06: 3d:7c:68:82:bd:87:fe:6d:17:74:b4:91:b1:38:ce: 33:92:44:f4:44:37:86:fa:6b:88:1f:ec:58:59:fe: 59:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:13:2E:74:57:BE:20:4B:43:22:9F:1F:C8:40:02:33:82:39:28:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a1c0c6f-53d0-304c-a776-61d8d939f6ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:89:ed:10:3c:85:8e:46:67:c1:a2:3e:17:c7:6c:08:31:d2: 0b:35:24:84:98:04:40:21:50:7f:5b:92:e2:dc:2f:87:6c:f7: 3e:42:be:97:02:67:e4:0d:87:0d:c7:4a:c7:e8:0a:73:61:a2: 81:59:26:cd:08:b4:57:b1:38:03:2c:e8:be:91:ca:18:84:25: 6f:34:1d:de:d5:b6:14:f3:d1:3f:80:c9:94:88:4e:bb:a1:49: 03:37:d0:a8:ac:ee:ca:79:22:35:51:ea:d8:08:ef:51:2c:32: b2:3a:8b:a0:8e:c7:a7:14:b1:15:c4:30:c8:1f:8c:02:22:13: 7e:aa:29:59:e7:bf:62:fb:23:bc:7a:0b:a5:d1:d9:09:0a:9b: 34:e2:b0:6f:47:23:7f:ad:7c:15:c9:f2:12:2c:e7:3f:d2:fd: 0f:48:07:68:be:60:b3:13:c6:3d:de:9c:68:83:78:4b:87:99: 8f:5e:6c:f7:91:17:7e:7e:63:ba:dd:6a:16:c7:47:38:a2:23: c7:ac:9b:95:2b:bc:6a:df:70:18:35:0c:c7:29:87:95:4d:5d: 7c:6f:d9:7e:53:67:50:4f:a9:86:f2:0e:3a:6d:ef:5d:54:cd: 6c:d8:5b:6c:fe:45:10:83:06:d7:ca:08:8d:a9:69:a4:c8:cf: dc:b5:1a:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFjddA1r/9mtkyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk ZjkwMzQ2ODktMGI4Mi00YTE5LWE0YzUtYjBmMDJjY2Q5YTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksKUtUIXkPe68rXDIrRBWKOXkVr7wFwBCXng lLH6m7APQsewKr0I60G5OurwJg+n1hpu21mCLEmaOywKXTcn21sjbInbN3NZ+LXr 7fWI55wFLs0ygngTEAP1Vl76N/UIEzRraHVDKiF2tMPHTXXPpvBNGd9eAiALjJpu eYdeuYH2gGiBWEDfDZMNzZgYa1RnwYtn0QQQNdXZ2VphCoMM4NDFqmaIC0eePvDR ixm97Raqd2GCtaRp0cXlOjAyiSp3jFo6y9ZCDtKMv7DR3EaGxYJbvtH/WpEc3dP5 kCNkwAY9fGiCvYf+bRd0tJGxOM4zkkT0RDeG+muIH+xYWf5ZTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4TLnRXviBLQyKfH8hAAjOCOShLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGExYzBjNmYtNTNkMC0z MDRjLWE3NzYtNjFkOGQ5MzlmNmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9lhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmJ7RA8hY5GZ8GiPhfHbAgx0gs1JISYBEAhUH9bkuLcL4ds9z5CvpcC Z+QNhw3HSsfoCnNhooFZJs0ItFexOAMs6L6RyhiEJW80Hd7VthTz0T+AyZSITruh SQM30Kis7sp5IjVR6tgI71EsMrI6i6COx6cUsRXEMMgfjAIiE36qKVnnv2L7I7x6 C6XR2QkKmzTisG9HI3+tfBXJ8hIs5z/S/Q9IB2i+YLMTxj3enGiDeEuHmY9ebPeR F35+Y7rdahbHRziiI8esm5UrvGrfcBg1DMcph5VNXXxv2X5TZ1BPqYbyDjpt711U zWzYW2z+RRCDBtfKCI2paaTIz9y1Gnc= -----END CERTIFICATE-----Generated at Sat Aug 23 12:53:53 2025 by rpki-client