$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/541a8911-7060-39d6-a2d9-3a18ba1fbccf.roa File: 541a8911-7060-39d6-a2d9-3a18ba1fbccf.roa (raw, json) Hash identifier: xedFqf+4y/YU17TWmq6KShm6v4y5jetNsLLlXMdDnrc= Subject key identifier: 2B:64:D8:CD:57:FF:D3:E8:E8:5E:AE:7F:24:E3:AC:1D:84:27:C4:DD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE2FBC4038F55A6F1AD60E500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/541a8911-7060-39d6-a2d9-3a18ba1fbccf.roa Signing time: Sun 17 Aug 2025 13:00:41 +0000 ROA not before: Sun 17 Aug 2025 13:00:41 +0000 ROA not after: Sat 15 Nov 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.52.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e2:fb:c4:03:8f:55:a6:f1:ad:60:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 17 13:00:41 2025 GMT Not After : Nov 15 14:00:41 2025 GMT Subject: CN=406832e0-537c-442c-97d4-8045704dd729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:7c:45:3c:33:c5:d1:d1:b2:00:f1:c2:d1: 9c:f6:7b:9e:82:06:c0:8f:b8:97:06:a7:53:72:b2: f6:aa:04:c3:d8:01:6f:d7:bf:31:e3:32:4d:de:ce: 8e:ea:58:62:e7:06:8d:e2:79:84:a1:19:80:d4:77: 97:cc:b7:c4:29:eb:06:f5:a2:61:59:22:9d:0e:32: e1:1e:b1:17:a9:12:b6:82:7b:11:ac:12:aa:1a:31: e1:e1:8c:ec:98:dc:de:61:51:2f:10:c4:0b:78:f4: 9e:af:2e:be:18:af:d1:18:96:3e:bb:a0:1d:13:b4: 80:64:13:df:21:a2:e7:3f:f2:bd:c7:7b:81:f9:cb: d8:48:7f:b0:34:37:28:9c:84:f6:c2:f2:20:b9:5f: 7e:57:67:7f:46:e1:69:e0:02:2b:60:98:f5:93:fc: a9:7b:92:d3:57:79:53:26:f1:f3:eb:b5:50:52:33: 6f:82:13:4f:3e:af:7e:4a:da:01:c4:64:4c:b0:74: 96:9f:40:ec:a6:51:95:65:4a:72:31:43:42:22:19: 2b:d8:bd:83:98:2d:4c:8f:b6:11:5b:da:00:e2:64: e9:cb:88:5b:59:3a:4a:6e:4c:c8:a1:31:d3:72:55: 78:02:d8:02:05:b7:85:27:b6:3c:a9:8d:cb:b6:7d: 8b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:64:D8:CD:57:FF:D3:E8:E8:5E:AE:7F:24:E3:AC:1D:84:27:C4:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/541a8911-7060-39d6-a2d9-3a18ba1fbccf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:9d:16:e2:20:99:9b:44:13:82:a2:43:8c:9c:5b:b3:70:87: ae:2e:5e:10:4d:59:6d:07:c1:f9:36:35:b5:83:0d:79:fd:c9: f9:6d:2c:43:e5:f9:c8:45:1c:c8:60:e4:2c:9f:72:2c:68:15: 98:17:83:72:9e:b2:d2:56:52:b8:c3:df:d8:44:8f:95:74:3a: e7:61:de:e9:f1:16:00:62:82:b5:49:9a:77:31:ae:74:1c:76: e3:56:5d:91:fb:85:49:e7:fc:82:26:8b:46:91:6e:bd:46:e7: 7f:86:8b:aa:94:f0:b0:b5:46:9d:0c:87:ab:60:41:3c:26:29: 6d:5b:85:9a:69:cb:1a:cb:2f:17:aa:3f:cb:df:15:fe:11:a5: 29:77:1b:b2:2b:dc:81:8b:48:e9:1b:29:05:b2:fe:3d:a6:66: c3:76:0d:40:f6:f1:f4:d2:36:8c:87:e9:23:ba:d1:96:b9:45: b7:2c:df:25:18:d5:5c:e3:68:2b:1e:82:bf:96:50:4f:69:89: ef:b0:34:ec:cf:59:e3:29:62:00:ec:4d:0c:d0:50:53:f2:48: 5d:76:63:82:93:26:01:25:50:db:82:07:06:45:ff:83:76:c8: a3:2d:c4:e1:49:0d:d2:06:94:f6:f6:c9:c0:92:9f:55:38:01: fc:b5:13:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEri+8QDj1Wm8a1g5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxNzEzMDA0MVoXDTI1MTExNTE0MDA0MVowLzEtMCsGA1UEAxMk NDA2ODMyZTAtNTM3Yy00NDJjLTk3ZDQtODA0NTcwNGRkNzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr18RTwzxdHRsgDxwtGc9nueggbAj7iXBqdT crL2qgTD2AFv178x4zJN3s6O6lhi5waN4nmEoRmA1HeXzLfEKesG9aJhWSKdDjLh HrEXqRK2gnsRrBKqGjHh4YzsmNzeYVEvEMQLePSery6+GK/RGJY+u6AdE7SAZBPf IaLnP/K9x3uB+cvYSH+wNDconIT2wvIguV9+V2d/RuFp4AIrYJj1k/ype5LTV3lT JvHz67VQUjNvghNPPq9+StoBxGRMsHSWn0DsplGVZUpyMUNCIhkr2L2DmC1Mj7YR W9oA4mTpy4hbWTpKbkzIoTHTclV4AtgCBbeFJ7Y8qY3Ltn2L0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtk2M1X/9Po6F6ufyTjrB2EJ8TdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTQxYTg5MTEtNzA2MC0z OWQ2LWEyZDktM2ExOGJhMWZiY2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzRwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGdFuIgmZtEE4KiQ4ycW7Nwh64uXhBNWW0Hwfk2NbWDDXn9yfltLEPl +chFHMhg5CyfcixoFZgXg3KestJWUrjD39hEj5V0Oudh3unxFgBigrVJmncxrnQc duNWXZH7hUnn/IImi0aRbr1G53+Gi6qU8LC1Rp0Mh6tgQTwmKW1bhZppyxrLLxeq P8vfFf4RpSl3G7Ir3IGLSOkbKQWy/j2mZsN2DUD28fTSNoyH6SO60Za5Rbcs3yUY 1VzjaCsegr+WUE9pie+wNOzPWeMpYgDsTQzQUFPySF12Y4KTJgElUNuCBwZF/4N2 yKMtxOFJDdIGlPb2ycCSn1U4Afy1E/I= -----END CERTIFICATE-----Generated at Sat Aug 23 14:45:50 2025 by rpki-client