$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b16f305-7155-38b7-a0aa-9dddbe3ca03b.roa File: 5b16f305-7155-38b7-a0aa-9dddbe3ca03b.roa (raw, json) Hash identifier: RyTvuzHyJKIC6xQAYns1gL8zV2Z8n/aaoeF8iQgEktw= Subject key identifier: 79:4B:13:6D:0C:02:DB:53:C6:73:EF:AA:63:33:2E:8C:9F:6F:1B:9F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC7101C25B85F43E413BD5300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b16f305-7155-38b7-a0aa-9dddbe3ca03b.roa Signing time: Thu 07 Aug 2025 12:59:05 +0000 ROA not before: Thu 07 Aug 2025 12:59:05 +0000 ROA not after: Wed 05 Nov 2025 13:59:05 +0000 asID: 20940 IP address blocks: 23.38.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:10:1c:25:b8:5f:43:e4:13:bd:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 7 12:59:05 2025 GMT Not After : Nov 5 13:59:05 2025 GMT Subject: CN=b73be648-d2be-447e-bb30-8861bbb2f14c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:22:f1:08:b8:d2:2a:f4:f3:e7:94:0a:0a:b5: 0b:db:4b:94:34:1b:4b:a1:db:d5:31:49:6d:4c:98: 4a:af:b6:3f:91:f4:8e:36:96:24:02:86:60:54:02: 3d:1d:7c:5b:78:09:4b:36:d7:20:6a:08:0f:ec:62: 0f:db:23:0e:02:8a:75:41:8f:e3:aa:00:53:8f:99: a5:42:e3:10:6e:b8:58:88:53:df:f8:5b:45:47:2a: 41:00:d0:0b:b4:60:25:50:0b:f1:77:b3:e0:34:57: 0e:b7:0a:96:19:ba:26:53:75:4e:ec:4e:32:7e:f8: 51:30:4a:3f:ae:38:b4:63:b4:6d:e3:fd:75:49:ab: 5a:f2:2c:db:de:e5:8a:b0:23:37:d4:00:f8:40:e7: 3a:f5:46:a4:29:e7:93:21:7e:35:6a:f2:ca:a3:ad: 64:05:3c:e5:70:aa:9f:1d:c8:f7:ee:4a:fa:cb:51: 75:8a:cd:85:42:05:3d:68:0b:9d:33:9e:40:9b:3b: df:5a:33:b8:84:89:ff:1b:b8:6b:ac:2e:a1:27:0d: 1d:ab:45:5f:98:80:80:51:e4:fc:ba:6e:a3:1c:cf: bd:16:31:e7:bc:f1:ba:d7:b4:23:53:65:8f:66:fe: f1:61:5e:f9:ab:35:bc:aa:5d:6a:b2:9d:15:3b:55: 50:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4B:13:6D:0C:02:DB:53:C6:73:EF:AA:63:33:2E:8C:9F:6F:1B:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b16f305-7155-38b7-a0aa-9dddbe3ca03b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:52:d6:6d:9d:7c:14:18:6c:f6:c5:8a:50:12:1a:68:1c:8c: 18:7a:34:48:6c:c4:6b:f0:06:3a:c4:34:e0:7b:49:99:11:54: a0:ee:35:a5:a6:91:10:11:49:f6:f9:d4:6b:a2:d1:20:29:5e: 15:5e:8d:8a:f8:25:58:ce:8c:6c:bd:e7:1e:06:de:59:eb:62: 8a:64:a8:8c:75:5c:14:e4:e7:1b:06:fb:3d:74:c3:96:82:96: 9f:2c:c1:a6:a9:76:93:d7:db:1b:25:44:79:00:7d:d5:66:ad: 0e:d8:49:22:75:e9:06:73:45:3f:f2:60:61:11:8b:b9:4f:54: a2:f7:11:a3:cf:02:2a:55:5e:b5:b6:08:7c:b1:95:32:ce:73: 19:53:9c:be:ea:cd:9b:db:7a:79:26:72:6b:c7:73:c1:8c:dd: 2f:79:c2:de:f5:dc:75:77:05:20:7a:e3:a8:02:51:ef:a8:0c: 39:1e:87:fd:ef:2b:78:f7:64:7d:4b:ba:c8:79:a6:ad:6b:1b: 23:c5:15:c9:6a:cc:f5:16:af:f3:62:62:a4:ad:10:90:ec:d6: cc:bf:4f:ab:12:a9:ac:84:82:de:67:c1:80:14:00:8f:be:cc: 17:b9:ce:02:ec:f5:26:26:c1:de:c6:8c:97:a5:08:57:e0:0e: f4:c7:2b:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEBwluF9D5BO9UwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNzEyNTkwNVoXDTI1MTEwNTEzNTkwNVowLzEtMCsGA1UEAxMk YjczYmU2NDgtZDJiZS00NDdlLWJiMzAtODg2MWJiYjJmMTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yLxCLjSKvTz55QKCrUL20uUNBtLodvVMUlt TJhKr7Y/kfSONpYkAoZgVAI9HXxbeAlLNtcgaggP7GIP2yMOAop1QY/jqgBTj5ml QuMQbrhYiFPf+FtFRypBANALtGAlUAvxd7PgNFcOtwqWGbomU3VO7E4yfvhRMEo/ rji0Y7Rt4/11Sata8izb3uWKsCM31AD4QOc69UakKeeTIX41avLKo61kBTzlcKqf Hcj37kr6y1F1is2FQgU9aAudM55AmzvfWjO4hIn/G7hrrC6hJw0dq0VfmICAUeT8 um6jHM+9FjHnvPG617QjU2WPZv7xYV75qzW8ql1qsp0VO1VQvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlLE20MAttTxnPvqmMzLoyfbxufMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWIxNmYzMDUtNzE1NS0z OGI3LWEwYWEtOWRkZGJlM2NhMDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyalMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9S1m2dfBQYbPbFilASGmgcjBh6NEhsxGvwBjrENOB7SZkRVKDuNaWm kRARSfb51Gui0SApXhVejYr4JVjOjGy95x4G3lnrYopkqIx1XBTk5xsG+z10w5aC lp8swaapdpPX2xslRHkAfdVmrQ7YSSJ16QZzRT/yYGERi7lPVKL3EaPPAipVXrW2 CHyxlTLOcxlTnL7qzZvbenkmcmvHc8GM3S95wt713HV3BSB646gCUe+oDDkeh/3v K3j3ZH1Lush5pq1rGyPFFclqzPUWr/NiYqStEJDs1sy/T6sSqayEgt5nwYAUAI++ zBe5zgLs9SYmwd7GjJelCFfgDvTHK1Y= -----END CERTIFICATE-----Generated at Sat Aug 23 17:36:39 2025 by rpki-client