$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a1af5c2-1726-3ca7-afe0-3840780d7b26.roa File: 5a1af5c2-1726-3ca7-afe0-3840780d7b26.roa (raw, json) Hash identifier: Fyyv+wDYswmdwyiHeUiSXLCVXXCUketBGqDALnjm68o= Subject key identifier: F5:5C:A4:52:00:85:AF:B7:D9:D8:E3:30:56:DF:9C:0D:E1:D1:E9:5B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE46140A7C1E04E2700BD3100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a1af5c2-1726-3ca7-afe0-3840780d7b26.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.3.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:40:a7:c1:e0:4e:27:00:bd:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=d0f5c85c-e0c1-4779-bbcd-b2c784137f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:eb:e0:aa:65:db:ed:1b:a0:cc:aa:ba:cb:bf: 15:fc:20:ca:91:fe:95:7e:10:b5:cd:0c:bc:50:43: af:05:7c:4d:58:37:b3:ae:2c:05:0a:cb:34:ed:3a: 2f:ab:b5:ec:e2:81:06:de:1f:4b:43:fe:9c:25:f7: 57:53:ca:0f:c9:4f:8f:a2:bb:60:5f:f5:3d:de:5a: 0f:cc:66:be:db:d9:3c:79:e8:ad:82:17:22:8f:55: 28:50:e6:a3:11:1a:76:7c:fa:ad:2e:ca:12:54:48: de:a5:b0:9e:cb:fc:d4:03:e0:d6:85:81:c6:06:6e: 9a:98:a8:ed:74:f9:35:de:52:20:e9:0f:9d:89:8e: 78:16:70:58:1e:34:06:be:e3:2f:69:92:62:50:26: ec:01:2c:89:eb:2a:a6:a0:2b:80:b7:d0:b6:4e:f0: b7:f7:a6:51:91:54:c5:43:ec:c1:91:a0:43:43:d5: 26:4c:ad:6c:44:d6:d6:2d:b4:9b:0d:bd:05:9d:73: cc:a3:7a:19:26:6d:46:55:aa:4e:16:85:91:b1:af: 13:25:fc:69:33:ec:7c:28:bb:67:b8:a3:bd:9a:3d: 89:fb:fe:af:16:6c:3b:70:07:79:6c:17:07:34:ca: 32:13:e6:53:0b:30:42:83:f1:89:e8:61:8b:f4:f8: c0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:5C:A4:52:00:85:AF:B7:D9:D8:E3:30:56:DF:9C:0D:E1:D1:E9:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a1af5c2-1726-3ca7-afe0-3840780d7b26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:60:a7:b0:23:3e:1f:39:18:88:e5:17:96:93:16:af:5c:a0: 9e:96:62:d4:d2:78:21:53:7f:90:d7:c1:00:45:72:93:e5:24: d3:ba:62:36:70:9c:fb:3f:1a:09:96:fa:25:8b:01:df:35:44: 96:bf:06:c9:1d:27:82:3e:73:43:60:1c:13:0c:3e:fe:54:aa: d3:86:36:35:28:26:83:9d:47:3b:31:a7:d7:8d:38:c8:d9:83: 44:b5:fe:f0:73:a5:9f:ef:50:be:10:81:81:7e:2e:57:c0:21: a0:e4:46:c8:6e:bd:20:8f:85:90:ee:ee:8d:54:9f:26:0f:52: 7e:2d:3a:a1:d2:c8:90:c2:1e:f6:e5:39:a5:ea:0e:04:71:39: 52:e9:5e:58:a8:d4:c3:eb:24:6c:9b:2f:e5:45:61:33:a5:8f: 08:77:10:a7:a7:f9:b2:38:77:5e:65:dd:81:f9:0b:02:08:11: 7e:b0:ee:81:c2:2f:b9:29:4a:a3:07:af:ea:a6:3f:c2:9a:e3: d7:48:9f:ab:c0:01:86:ac:7d:4c:58:bd:16:3d:05:9a:c2:a8: 9c:bd:8a:bd:ba:19:4a:d6:db:0b:3e:9c:0b:58:eb:9f:74:1c: 48:75:72:2d:f2:a8:81:17:70:d8:33:d4:69:b2:98:2d:a5:9c: 77:48:c7:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYUCnweBOJwC9MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk ZDBmNWM4NWMtZTBjMS00Nzc5LWJiY2QtYjJjNzg0MTM3ZjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjevgqmXb7RugzKq6y78V/CDKkf6VfhC1zQy8 UEOvBXxNWDezriwFCss07Tovq7Xs4oEG3h9LQ/6cJfdXU8oPyU+PortgX/U93loP zGa+29k8eeitghcij1UoUOajERp2fPqtLsoSVEjepbCey/zUA+DWhYHGBm6amKjt dPk13lIg6Q+diY54FnBYHjQGvuMvaZJiUCbsASyJ6yqmoCuAt9C2TvC396ZRkVTF Q+zBkaBDQ9UmTK1sRNbWLbSbDb0FnXPMo3oZJm1GVapOFoWRsa8TJfxpM+x8KLtn uKO9mj2J+/6vFmw7cAd5bBcHNMoyE+ZTCzBCg/GJ6GGL9PjAXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVcpFIAha+32djjMFbfnA3h0elbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWExYWY1YzItMTcyNi0z Y2E3LWFmZTAtMzg0MDc4MGQ3YjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwNUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9gp7AjPh85GIjlF5aTFq9coJ6WYtTSeCFTf5DXwQBFcpPlJNO6YjZw nPs/GgmW+iWLAd81RJa/BskdJ4I+c0NgHBMMPv5UqtOGNjUoJoOdRzsxp9eNOMjZ g0S1/vBzpZ/vUL4QgYF+LlfAIaDkRshuvSCPhZDu7o1UnyYPUn4tOqHSyJDCHvbl OaXqDgRxOVLpXlio1MPrJGybL+VFYTOljwh3EKen+bI4d15l3YH5CwIIEX6w7oHC L7kpSqMHr+qmP8Ka49dIn6vAAYasfUxYvRY9BZrCqJy9ir26GUrW2ws+nAtY6590 HEh1ci3yqIEXcNgz1GmymC2lnHdIx2Q= -----END CERTIFICATE-----Generated at Sat Aug 23 18:08:20 2025 by rpki-client