$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fbdd238-b90c-341b-933f-17017a2c76c2.roa File: 5fbdd238-b90c-341b-933f-17017a2c76c2.roa (raw, json) Hash identifier: xx971mY+0YaHvyvm8NAMjF7Xf5lNJPPt5VS2hqvs7Ks= Subject key identifier: AD:61:A6:E0:37:17:BA:77:2C:EC:15:1A:F8:4D:25:94:EC:AB:93:62 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AD3A1209ABAB1A21A9B8C8F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fbdd238-b90c-341b-933f-17017a2c76c2.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 16625 IP address blocks: 23.65.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:20:9a:ba:b1:a2:1a:9b:8c:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=17c4e5b7-b57f-442d-96d9-f49d6b83355b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bf:a8:2d:2a:3a:18:76:f2:ca:14:7c:72:9c: df:be:8d:56:cd:60:33:8b:d8:81:c7:e7:42:58:ec: 18:a8:45:11:86:68:6c:ba:53:45:8e:a0:0e:3e:16: 2d:7b:9d:34:2b:3c:d3:69:b0:98:53:5d:bf:ab:f3: ef:8b:72:85:ce:15:84:ab:66:3c:99:29:8c:21:fe: 71:e6:94:da:e9:07:8a:dc:5e:57:14:62:4d:ea:3b: 99:20:49:42:9a:6b:54:43:c2:05:ba:2f:4d:64:b2: b8:fb:31:1d:8b:05:6d:ec:09:99:12:e9:fb:4f:38: b8:47:b3:3c:40:b3:19:5d:bd:98:03:82:e2:76:8a: a7:0b:72:5c:70:1b:5b:b3:be:1b:01:21:47:eb:7f: 0f:07:ff:69:ab:66:a0:22:eb:b8:f1:59:ab:2b:ce: 2f:a6:83:4b:8f:b6:b2:f3:a3:29:c7:38:69:1f:38: be:ca:e1:e8:be:2c:52:1b:ed:e5:fb:8b:95:58:29: 86:80:fb:e1:4e:b5:7d:d1:64:75:eb:a6:fc:cc:eb: 91:b4:c3:32:1d:d6:e8:f7:0c:6a:a1:06:59:37:f3: 2d:fd:26:3b:9f:5a:9a:92:ef:bf:c3:92:74:75:40: fd:04:08:bb:9a:35:c8:fd:65:ab:55:42:cc:6d:96: e9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:61:A6:E0:37:17:BA:77:2C:EC:15:1A:F8:4D:25:94:EC:AB:93:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fbdd238-b90c-341b-933f-17017a2c76c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.65.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:14:b8:d2:42:36:e2:2f:05:35:70:2a:ee:8e:96:99:df:58: 48:96:0d:e9:96:87:5e:c9:62:bd:00:27:ba:0b:29:69:57:c6: d1:c7:05:c1:c2:9c:f6:8a:16:7a:f1:ae:d5:b9:8c:d7:9e:71: 62:3e:6e:ce:b4:a5:48:10:dd:fd:40:9d:ed:d1:bf:dd:0e:c4: 13:c2:46:b8:fc:35:98:60:50:53:cf:05:11:9b:1d:10:8b:89: 26:db:7a:32:9e:bc:2f:97:75:57:8d:db:a5:fb:79:29:12:d6: 92:56:d1:cd:85:1d:c3:98:06:b7:36:97:f4:25:3a:a2:87:ab: 1e:54:69:c0:70:3b:13:03:3c:36:6f:7e:3b:ec:8a:25:e6:35: e9:1a:da:63:45:c3:cc:6c:76:cb:7b:d0:23:7c:c9:2c:2d:48: bc:69:d2:a8:da:dc:fa:c1:f0:fb:d5:d0:7b:04:0e:3c:2a:76: 42:d8:92:a2:fa:6d:c0:51:9f:58:6d:e7:94:f7:a3:0a:e8:02: 14:aa:4d:94:00:40:d5:7d:9d:cb:cb:ed:6d:20:4d:83:6d:fc: 04:2b:79:97:40:bc:76:ce:c2:7a:37:d6:7e:31:4b:0a:d4:5b: 5b:11:0f:ba:a3:83:51:cc:94:d9:97:26:bc:57:7e:e2:35:6b: b1:33:ef:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToSCaurGiGpuMj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk MTdjNGU1YjctYjU3Zi00NDJkLTk2ZDktZjQ5ZDZiODMzNTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr+oLSo6GHbyyhR8cpzfvo1WzWAzi9iBx+dC WOwYqEURhmhsulNFjqAOPhYte500KzzTabCYU12/q/Pvi3KFzhWEq2Y8mSmMIf5x 5pTa6QeK3F5XFGJN6juZIElCmmtUQ8IFui9NZLK4+zEdiwVt7AmZEun7Tzi4R7M8 QLMZXb2YA4LidoqnC3JccBtbs74bASFH638PB/9pq2agIuu48VmrK84vpoNLj7ay 86MpxzhpHzi+yuHovixSG+3l+4uVWCmGgPvhTrV90WR166b8zOuRtMMyHdbo9wxq oQZZN/Mt/SY7n1qaku+/w5J0dUD9BAi7mjXI/WWrVULMbZbp9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1hpuA3F7p3LOwVGvhNJZTsq5NiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWZiZGQyMzgtYjkwYy0z NDFiLTkzM2YtMTcwMTdhMmM3NmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF0HAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUUuNJCNuIvBTVwKu6OlpnfWEiWDemWh17JYr0AJ7oLKWlXxtHHBcHC nPaKFnrxrtW5jNeecWI+bs60pUgQ3f1Ane3Rv90OxBPCRrj8NZhgUFPPBRGbHRCL iSbbejKevC+XdVeN26X7eSkS1pJW0c2FHcOYBrc2l/QlOqKHqx5UacBwOxMDPDZv fjvsiiXmNeka2mNFw8xsdst70CN8ySwtSLxp0qja3PrB8PvV0HsEDjwqdkLYkqL6 bcBRn1ht55T3owroAhSqTZQAQNV9ncvL7W0gTYNt/AQreZdAvHbOwno31n4xSwrU W1sRD7qjg1HMlNmXJrxXfuI1a7Ez77A= -----END CERTIFICATE-----Generated at Sat Aug 23 13:00:55 2025 by rpki-client