$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c128d0a-0a26-3c51-82d2-4b69b79875fd.roa File: 5c128d0a-0a26-3c51-82d2-4b69b79875fd.roa (raw, json) Hash identifier: VOg0qv/fDfZmdWNJIlsey+EuMmGG7rxMXtTqPCO9SUU= Subject key identifier: CB:67:1B:53:A0:25:EF:21:0D:55:EE:91:1D:F4:F1:46:C3:08:AC:7A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE4614046B87083F5E584C500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c128d0a-0a26-3c51-82d2-4b69b79875fd.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.2.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:40:46:b8:70:83:f5:e5:84:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=c1fd1bc7-0c66-4613-b817-2e1ab823c077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:36:13:f0:1d:3d:19:14:7d:16:cc:36:29:d6: 64:49:98:3e:5d:ad:45:ba:56:0a:7b:ff:e8:68:3d: 67:57:a6:e5:d0:e3:0f:bb:7c:a9:0b:19:81:e6:14: 76:12:bd:c4:fb:15:91:78:4b:c9:86:85:37:91:67: b2:f4:dd:e9:f0:b3:ed:23:71:09:0a:a1:2a:94:4c: 9e:8f:e3:3f:f6:62:e3:5b:04:7a:86:11:73:52:95: 46:a8:9e:4b:58:59:eb:9d:55:82:c7:7e:96:cc:91: 3b:44:78:7e:1a:53:6b:85:45:7b:f0:6b:e8:0d:4c: 1d:15:10:62:19:01:44:f6:35:10:59:98:fb:6a:63: 36:60:e7:02:73:47:75:11:85:3f:ec:1b:29:92:bd: a1:ac:74:2c:c5:4b:ad:1b:43:a8:d3:f5:9f:e6:b7: 49:25:bf:26:1c:a2:be:45:05:50:d4:12:86:28:be: c9:8d:09:79:2d:ca:20:2f:86:97:3d:7b:90:ce:c4: 84:5e:82:6b:af:a6:26:47:79:08:5b:e4:a0:03:1e: 95:63:8c:a9:17:fd:f6:a2:de:f0:52:18:55:cf:fa: 43:e0:88:85:f7:19:c6:ff:26:0c:09:ee:2f:20:e0: d8:b0:bc:ac:fa:89:c4:5b:0d:2a:8c:8c:1c:de:b7: 63:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:67:1B:53:A0:25:EF:21:0D:55:EE:91:1D:F4:F1:46:C3:08:AC:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c128d0a-0a26-3c51-82d2-4b69b79875fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.2.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:fe:f6:9f:3d:51:ca:21:5c:99:d2:fa:d8:3f:51:dd:e1:44: 8c:28:56:b6:9a:e3:39:11:47:09:59:01:56:a7:78:60:3a:52: bc:49:ac:23:91:c1:94:ca:19:61:63:92:62:2e:10:12:f3:eb: c7:1b:96:d7:86:2d:91:9f:12:d1:67:12:6c:69:2c:4b:22:51: 89:79:03:eb:b3:3d:30:76:99:0b:83:bc:9e:70:a7:25:10:f0: 82:45:3f:6b:20:e7:63:02:e5:f1:8a:72:68:6d:f3:53:c1:2a: e3:4d:24:73:4f:27:12:ba:46:bb:30:70:0b:02:1d:27:fa:36: 29:f2:b3:35:96:c9:0f:e5:c2:c9:fd:05:64:4e:99:36:6f:c8: 19:9c:8b:4c:1e:dc:7b:41:2b:a9:e9:34:3d:f7:ec:5b:de:c4: 29:d1:c5:d4:18:0a:71:b6:15:66:6f:c5:62:2b:23:10:ff:5c: 97:21:c7:f6:69:b4:67:e4:62:fb:e6:58:38:f8:12:f2:30:dc: 2a:a2:ea:af:cd:42:74:de:57:37:82:7f:8f:45:96:d2:78:54: 22:75:3b:b1:65:10:8b:90:4f:4a:61:11:04:9b:d8:77:ea:0d: 6a:c9:d9:f8:98:07:39:b8:33:63:ac:73:91:95:76:79:16:59: 7a:16:11:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYUBGuHCD9eWExQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk YzFmZDFiYzctMGM2Ni00NjEzLWI4MTctMmUxYWI4MjNjMDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTYT8B09GRR9Fsw2KdZkSZg+Xa1FulYKe//o aD1nV6bl0OMPu3ypCxmB5hR2Er3E+xWReEvJhoU3kWey9N3p8LPtI3EJCqEqlEye j+M/9mLjWwR6hhFzUpVGqJ5LWFnrnVWCx36WzJE7RHh+GlNrhUV78GvoDUwdFRBi GQFE9jUQWZj7amM2YOcCc0d1EYU/7Bspkr2hrHQsxUutG0Oo0/Wf5rdJJb8mHKK+ RQVQ1BKGKL7JjQl5LcogL4aXPXuQzsSEXoJrr6YmR3kIW+SgAx6VY4ypF/32ot7w UhhVz/pD4IiF9xnG/yYMCe4vIODYsLys+onEWw0qjIwc3rdj6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtnG1OgJe8hDVXukR308UbDCKx6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWMxMjhkMGEtMGEyNi0z YzUxLTgyZDItNGI2OWI3OTg3NWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/+9p89UcohXJnS+tg/Ud3hRIwoVraa4zkRRwlZAVaneGA6UrxJrCOR wZTKGWFjkmIuEBLz68cblteGLZGfEtFnEmxpLEsiUYl5A+uzPTB2mQuDvJ5wpyUQ 8IJFP2sg52MC5fGKcmht81PBKuNNJHNPJxK6RrswcAsCHSf6NinyszWWyQ/lwsn9 BWROmTZvyBmci0we3HtBK6npND337FvexCnRxdQYCnG2FWZvxWIrIxD/XJchx/Zp tGfkYvvmWDj4EvIw3Cqi6q/NQnTeVzeCf49FltJ4VCJ1O7FlEIuQT0phEQSb2Hfq DWrJ2fiYBzm4M2Osc5GVdnkWWXoWEXQ= -----END CERTIFICATE-----Generated at Sat Aug 23 13:01:53 2025 by rpki-client