$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5eac9c2f-a80c-3580-b512-852f9cc27405.roa File: 5eac9c2f-a80c-3580-b512-852f9cc27405.roa (raw, json) Hash identifier: T2f9yjhOmSyWoWVa0dL7L2yQ7OfDyRyjFOBIkoDI0FI= Subject key identifier: 99:FD:9B:9B:F5:E2:8F:47:E1:69:F9:A0:53:C8:EE:BB:F6:5F:F8:54 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ADD668EE9147F4BAA2BA4C280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5eac9c2f-a80c-3580-b512-852f9cc27405.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.209.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:8e:e9:14:7f:4b:aa:2b:a4:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=87e5ee24-ba86-4fd9-9541-6c6d7a10d32b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:66:34:c0:db:c1:7c:fd:fb:5f:51:f0:24:8c: da:a9:59:aa:c2:86:27:00:59:45:ce:75:e8:62:c8: 48:e6:4a:e0:c3:aa:f3:09:dd:29:fc:0d:2f:3e:7d: 7e:ae:b2:c9:13:fd:c4:e3:9f:f6:15:1a:36:97:8f: f0:4d:95:66:29:b4:5a:b0:48:16:63:45:88:c1:1c: aa:7d:c9:a9:f6:0d:58:76:08:61:ea:64:9a:0e:24: 67:ae:7f:06:d2:61:29:c6:3e:1a:73:ce:53:41:87: 8c:40:cc:49:18:78:11:b7:d3:8b:49:b7:de:5c:3d: 46:cc:71:de:a9:33:93:d2:76:fd:84:dd:e5:2b:f7: fb:ac:cb:a1:1b:c6:02:60:18:b3:45:b0:27:a2:05: 01:e2:d8:47:c4:9a:38:62:a7:77:dc:da:6d:9a:1e: d0:04:9d:e1:0e:a5:b1:f7:8e:ed:37:55:55:32:c0: 8d:6c:66:63:de:fb:18:14:55:77:ea:a3:25:ce:69: 8b:b0:9b:93:71:6d:97:42:47:a7:8c:05:ca:ec:37: 3d:b4:b4:13:91:6f:56:75:4b:b7:39:00:40:84:7a: 3a:ef:3a:bd:01:2e:5d:5a:5e:6a:d2:d2:4a:af:40: 0c:48:74:0d:65:c1:f2:1f:f5:46:07:ec:06:b9:27: 8f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FD:9B:9B:F5:E2:8F:47:E1:69:F9:A0:53:C8:EE:BB:F6:5F:F8:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5eac9c2f-a80c-3580-b512-852f9cc27405.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:18:7a:8e:7e:5f:55:ea:34:85:78:83:9b:32:a2:3d:31:c4: 8a:90:9c:c4:50:e3:82:95:b0:c1:47:39:9f:e9:05:3c:7b:24: 41:87:a9:31:de:fd:78:fb:3e:79:56:9e:fe:77:99:00:cb:f5: 15:0f:08:a8:e3:8d:b4:04:c6:b0:ea:5a:c8:37:29:77:15:0c: 48:77:7b:5d:31:44:fc:e4:89:a1:c9:2f:9f:6a:ef:ae:cc:bc: 72:17:59:2b:8f:cc:fa:e5:6c:9e:57:cb:22:51:a2:f4:5e:d1: 8c:65:73:f4:ba:a4:7b:6c:86:65:01:08:88:d2:f1:0c:f7:51: 49:96:c2:8a:32:d5:f6:a3:e1:00:a3:8c:95:60:63:e5:1a:e2: af:0e:eb:ba:3d:09:73:95:b2:56:bd:6c:4a:ef:8b:bd:e2:ef: e2:79:9c:1f:22:89:3f:73:45:cf:96:a0:d8:de:20:90:33:72: 15:0c:51:15:19:23:a7:c4:ad:47:17:7a:e3:b8:a9:01:84:2b: 78:bd:32:e9:e3:26:72:e8:3a:ff:2b:f0:0f:1e:69:58:a8:41: 5c:d9:3f:f5:15:16:23:4c:a3:69:02:ce:a4:8d:56:fe:36:7c: 9e:ef:84:0e:71:88:fa:7c:29:e7:96:b7:d6:94:af:c3:f4:99: d8:8b:c2:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZo7pFH9LqiukwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk ODdlNWVlMjQtYmE4Ni00ZmQ5LTk1NDEtNmM2ZDdhMTBkMzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmY0wNvBfP37X1HwJIzaqVmqwoYnAFlFznXo YshI5krgw6rzCd0p/A0vPn1+rrLJE/3E45/2FRo2l4/wTZVmKbRasEgWY0WIwRyq fcmp9g1Ydghh6mSaDiRnrn8G0mEpxj4ac85TQYeMQMxJGHgRt9OLSbfeXD1GzHHe qTOT0nb9hN3lK/f7rMuhG8YCYBizRbAnogUB4thHxJo4Yqd33Nptmh7QBJ3hDqWx 947tN1VVMsCNbGZj3vsYFFV36qMlzmmLsJuTcW2XQkenjAXK7Dc9tLQTkW9WdUu3 OQBAhHo67zq9AS5dWl5q0tJKr0AMSHQNZcHyH/VGB+wGuSeP9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJn9m5v14o9H4Wn5oFPI7rv2X/hUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWVhYzljMmYtYTgwYy0z NTgwLWI1MTItODUyZjljYzI3NDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9EgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIYeo5+X1XqNIV4g5syoj0xxIqQnMRQ44KVsMFHOZ/pBTx7JEGHqTHe /Xj7PnlWnv53mQDL9RUPCKjjjbQExrDqWsg3KXcVDEh3e10xRPzkiaHJL59q767M vHIXWSuPzPrlbJ5XyyJRovRe0Yxlc/S6pHtshmUBCIjS8Qz3UUmWwooy1faj4QCj jJVgY+Ua4q8O67o9CXOVsla9bErvi73i7+J5nB8iiT9zRc+WoNjeIJAzchUMURUZ I6fErUcXeuO4qQGEK3i9MunjJnLoOv8r8A8eaVioQVzZP/UVFiNMo2kCzqSNVv42 fJ7vhA5xiPp8KeeWt9aUr8P0mdiLwpY= -----END CERTIFICATE-----Generated at Sat Aug 23 14:49:55 2025 by rpki-client