$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55683f0b-f842-3ba8-b2ee-5b8db083f974.roa File: 55683f0b-f842-3ba8-b2ee-5b8db083f974.roa (raw, json) Hash identifier: H8MKq+GmYmyF99fIVv/70y34EwPs2CUGc88hBTSy+oo= Subject key identifier: CA:8D:C0:60:4C:15:88:4B:2B:90:65:D3:52:F0:74:99:70:CB:25:79 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ADD667659C378092BC3B5ED80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55683f0b-f842-3ba8-b2ee-5b8db083f974.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.192.0.0/11 maxlen: 11 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:76:59:c3:78:09:2b:c3:b5:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=b242caee-269a-4c10-88a6-1cd65b43a340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ea:e3:ac:47:68:6a:10:cf:79:aa:a3:cd:7c: f4:cb:f3:86:14:98:a1:87:7a:be:08:a8:e9:9a:69: 31:04:1e:e2:5d:81:cf:dd:38:9a:d5:ab:cf:56:d7: a4:b9:1c:1f:85:8a:c7:c1:a9:8e:5c:ed:bc:b7:75: f0:bf:e4:44:49:31:f3:e9:74:98:0f:7b:32:d7:99: da:0c:73:da:e4:d7:38:44:e6:4f:5e:4a:8b:3e:63: 8f:49:6c:e0:18:d0:64:dc:e6:dd:bb:31:0c:67:d1: 70:da:a4:fb:d4:d0:88:08:af:88:c7:13:71:d2:c2: c5:09:73:94:ff:8e:79:f8:b2:4e:27:70:3a:52:05: e6:62:34:10:ac:9c:6c:c8:4a:99:31:56:c3:06:cb: 2a:da:6d:d8:df:a5:7d:fe:41:95:28:6c:b5:bb:bd: 4b:b3:c7:0e:0c:d3:71:0e:32:de:fd:d3:c7:71:53: 9e:39:33:7d:bc:7a:ab:8f:f0:bc:5c:1f:a9:65:6a: d8:d4:07:6c:3a:2e:cf:45:16:44:a1:19:b8:de:81: 6b:00:dd:33:53:43:9d:c9:07:18:d0:63:90:80:3c: c9:c8:cf:2e:ee:aa:cf:f5:e5:20:a2:e3:25:1c:ce: 7d:e1:0e:8a:fb:be:da:da:9f:bd:f9:b3:4f:7a:86: 62:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8D:C0:60:4C:15:88:4B:2B:90:65:D3:52:F0:74:99:70:CB:25:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55683f0b-f842-3ba8-b2ee-5b8db083f974.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.192.0.0/11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:17:75:7c:2c:5c:a4:b3:b7:3d:5d:b2:5f:a4:7e:8f:2f:e5: 62:6a:db:10:9a:78:79:4b:bf:03:60:11:4a:cb:ca:a5:b5:f0: 31:86:3f:e6:5f:69:1b:f4:96:5d:b8:af:25:dd:c9:83:33:17: f1:08:3a:3a:fb:34:21:09:c3:75:3d:46:92:2f:00:9a:48:e2: c8:1b:06:6d:f2:ca:12:22:d2:f7:03:6f:0c:71:ae:fc:d9:95: 4c:6e:64:6e:8a:c8:ca:bc:44:88:b0:a2:1b:b9:46:0d:53:9d: a6:89:3e:00:ce:13:2d:30:38:5a:23:cd:90:60:92:da:5f:e2: df:a5:6c:a1:c3:f1:cf:a6:d2:b5:ff:bc:dc:a3:4b:43:22:af: 80:1f:9c:00:bf:a6:af:db:a1:fa:49:a6:a8:bc:ea:d4:e2:91: b6:be:1b:71:81:ba:e6:3e:74:ae:d1:04:12:aa:08:8c:aa:45: 3d:f3:ac:e6:04:75:98:55:f8:c8:b2:90:80:55:85:33:95:7d: 1a:f9:83:ee:8f:e4:0e:71:2f:c1:11:8e:04:8d:29:1f:13:bb: 4d:cf:b8:73:33:f0:30:d1:23:46:63:a2:73:88:e4:10:11:60: d6:ac:a8:0a:d7:e2:c9:5f:48:14:ce:47:e8:65:6c:87:12:0a: e5:c3:af:c9 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErdZnZZw3gJK8O17YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk YjI0MmNhZWUtMjY5YS00YzEwLTg4YTYtMWNkNjViNDNhMzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+rjrEdoahDPeaqjzXz0y/OGFJihh3q+CKjp mmkxBB7iXYHP3Tia1avPVtekuRwfhYrHwamOXO28t3Xwv+RESTHz6XSYD3sy15na DHPa5Nc4ROZPXkqLPmOPSWzgGNBk3ObduzEMZ9Fw2qT71NCICK+IxxNx0sLFCXOU /455+LJOJ3A6UgXmYjQQrJxsyEqZMVbDBssq2m3Y36V9/kGVKGy1u71Ls8cODNNx DjLe/dPHcVOeOTN9vHqrj/C8XB+pZWrY1AdsOi7PRRZEoRm43oFrAN0zU0OdyQcY 0GOQgDzJyM8u7qrP9eUgouMlHM594Q6K+77a2p+9+bNPeoZiNwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMqNwGBMFYhLK5Bl01LwdJlwyyV5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTU2ODNmMGItZjg0Mi0z YmE4LWIyZWUtNWI4ZGIwODNmOTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMFF8AwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEADRd1fCxcpLO3PV2yX6R+jy/lYmrbEJp4eUu/A2ARSsvKpbXwMYY/5l9p G/SWXbivJd3JgzMX8Qg6Ovs0IQnDdT1Gki8AmkjiyBsGbfLKEiLS9wNvDHGu/NmV TG5kborIyrxEiLCiG7lGDVOdpok+AM4TLTA4WiPNkGCS2l/i36VsocPxz6bStf+8 3KNLQyKvgB+cAL+mr9uh+kmmqLzq1OKRtr4bcYG65j50rtEEEqoIjKpFPfOs5gR1 mFX4yLKQgFWFM5V9GvmD7o/kDnEvwRGOBI0pHxO7Tc+4czPwMNEjRmOic4jkEBFg 1qyoCtfiyV9IFM5H6GVshxIK5cOvyQ== -----END CERTIFICATE-----Generated at Sat Aug 23 13:02:34 2025 by rpki-client