$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5228471c-bc67-320a-a62b-029da4f5cf8a.roa File: 5228471c-bc67-320a-a62b-029da4f5cf8a.roa (raw, json) Hash identifier: iVEVjV+KBZK9mg9p41Zj6QU7qjwj4bxa8DaUkbFuTqY= Subject key identifier: F5:DA:EC:27:CD:32:32:27:D1:47:E4:5F:D8:E2:09:C0:9F:FE:C7:5B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE89139EF2A2AD91CC2912850 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5228471c-bc67-320a-a62b-029da4f5cf8a.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.11.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:39:ef:2a:2a:d9:1c:c2:91:28:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=d0c39afe-5e3f-48cc-b66d-d9ecfee14b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:dc:c8:1b:5a:2c:46:00:c5:25:f0:00:3b:b3: d5:a2:8f:dc:0d:b8:f4:8b:06:0f:7e:1f:9c:6c:6f: 5c:45:51:ab:30:9f:bd:31:65:98:d8:7c:12:e5:f5: 3b:0a:ec:e3:4a:c8:40:67:54:25:3f:cc:6c:ab:db: ee:00:d0:b9:d8:48:0a:42:61:fa:90:2f:9f:1e:b5: 9a:ee:c2:63:c1:73:44:b6:87:29:99:81:e9:88:29: 9b:53:cf:45:10:bf:81:d1:13:2e:a9:59:0c:7c:21: d9:4d:d8:73:53:85:b4:7d:b3:cc:5e:79:1a:3f:88: b7:6f:73:74:11:1b:ff:6d:0f:81:e8:b3:a2:42:2d: 06:ad:7d:56:95:b4:4b:ac:f1:6a:04:29:ab:fb:58: 76:b4:c8:20:96:8f:36:c5:a9:97:85:bd:55:a3:40: c1:30:de:41:25:51:0c:e6:5c:4a:59:34:9b:aa:8b: 0c:d7:2b:eb:dd:9e:ad:cb:98:1e:30:d0:c3:e7:81: ab:94:27:f2:0f:cc:38:bb:2e:b2:c5:5e:11:e6:79: 37:da:66:a2:1b:ca:c6:77:92:6c:71:5b:7e:8b:ff: c5:41:e2:b0:eb:82:1f:1e:e4:b8:be:fc:86:77:fc: 18:5e:6e:6f:9d:3d:46:2b:e6:d5:16:35:82:22:43: b5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:DA:EC:27:CD:32:32:27:D1:47:E4:5F:D8:E2:09:C0:9F:FE:C7:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5228471c-bc67-320a-a62b-029da4f5cf8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.11.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:d9:f1:4d:2c:0d:20:a3:14:65:c5:78:7e:14:67:5d:02:df: fb:5a:92:ae:63:ce:d9:8a:46:e8:de:33:44:47:33:85:a7:8f: 88:81:e9:b6:7e:25:45:06:c4:b0:3d:32:5b:15:b9:ea:4e:69: 14:dc:c0:c8:51:d2:a7:e6:c7:9a:cb:8f:3e:cc:23:a0:b6:b3: 05:af:80:bb:6b:b7:2d:48:5b:e9:50:72:68:6f:80:5a:eb:5e: 40:49:1e:27:43:9a:1d:44:ed:49:5e:d9:8e:90:e8:29:2f:fc: 57:0b:ab:ec:88:01:27:64:f4:cc:03:14:0f:95:54:4a:e9:30: 9e:21:c7:1c:8d:8f:f9:a6:6a:96:2d:b0:b1:2b:74:c5:8b:7b: 4c:a2:b4:62:d5:1b:a0:f3:9a:81:42:0f:95:d9:39:e1:b3:9b: d4:b3:f8:2e:c7:50:8e:20:97:51:0c:cf:dd:f6:03:00:b4:29: 0f:86:ba:9b:12:36:c4:a0:95:56:1e:1b:47:34:dd:36:e7:07: d4:fb:0f:2c:c0:26:fe:3b:12:f6:c2:12:86:50:70:b2:cd:3b: b9:3c:ba:37:1b:38:a6:56:c0:fb:d6:b9:07:f4:e6:df:26:18: ee:26:16:84:93:65:0d:52:8c:eb:4a:e8:94:50:a4:d3:20:a2: db:1c:d3:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokTnvKirZHMKRKFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk ZDBjMzlhZmUtNWUzZi00OGNjLWI2NmQtZDllY2ZlZTE0YjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NzIG1osRgDFJfAAO7PVoo/cDbj0iwYPfh+c bG9cRVGrMJ+9MWWY2HwS5fU7CuzjSshAZ1QlP8xsq9vuANC52EgKQmH6kC+fHrWa 7sJjwXNEtocpmYHpiCmbU89FEL+B0RMuqVkMfCHZTdhzU4W0fbPMXnkaP4i3b3N0 ERv/bQ+B6LOiQi0GrX1WlbRLrPFqBCmr+1h2tMgglo82xamXhb1Vo0DBMN5BJVEM 5lxKWTSbqosM1yvr3Z6ty5geMNDD54GrlCfyD8w4uy6yxV4R5nk32maiG8rGd5Js cVt+i//FQeKw64IfHuS4vvyGd/wYXm5vnT1GK+bVFjWCIkO1OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXa7CfNMjIn0UfkX9jiCcCf/sdbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTIyODQ3MWMtYmM2Ny0z MjBhLWE2MmItMDI5ZGE0ZjVjZjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTZ8U0sDSCjFGXFeH4UZ10C3/takq5jztmKRujeM0RHM4Wnj4iB6bZ+ JUUGxLA9MlsVuepOaRTcwMhR0qfmx5rLjz7MI6C2swWvgLtrty1IW+lQcmhvgFrr XkBJHidDmh1E7Ule2Y6Q6Ckv/FcLq+yIASdk9MwDFA+VVErpMJ4hxxyNj/mmapYt sLErdMWLe0yitGLVG6DzmoFCD5XZOeGzm9Sz+C7HUI4gl1EMz932AwC0KQ+GupsS NsSglVYeG0c03TbnB9T7DyzAJv47EvbCEoZQcLLNO7k8ujcbOKZWwPvWuQf05t8m GO4mFoSTZQ1SjOtK6JRQpNMgotsc06g= -----END CERTIFICATE-----Generated at Sat Aug 23 12:55:51 2025 by rpki-client