$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/628c2b11-2d67-382b-beb6-7781ee6b32ac.roa File: 628c2b11-2d67-382b-beb6-7781ee6b32ac.roa (raw, json) Hash identifier: +BQlD3l2U7693nApXSZJxrh7kvqo9Ya/L1wnKSP7N5A= Subject key identifier: 1D:B8:04:90:8B:68:BF:F5:E8:C3:A9:F7:F8:F1:6B:31:BF:04:33:12 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AD3A119F9F21285C458EE3EA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/628c2b11-2d67-382b-beb6-7781ee6b32ac.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.65.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:19:f9:f2:12:85:c4:58:ee:3e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=aaa974f9-0c8b-4f1c-90a8-7df08d2f9b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b5:76:81:03:27:ef:4e:b6:94:bf:b7:6a:78: 54:99:ad:7a:6d:e6:f6:5d:d8:b9:21:8e:c0:7d:b7: 01:85:a0:ee:f1:49:aa:36:57:06:37:01:0d:5b:75: 37:61:ac:b4:58:e1:c7:15:2d:d8:db:48:b3:f6:41: 2d:a3:fb:57:6a:59:ed:15:a7:19:fe:4e:42:ce:86: 24:c1:bb:80:91:72:0c:5e:bd:00:b0:c6:09:ec:f6: 59:3d:2d:cb:fa:57:a8:7f:7d:f9:0d:7e:66:5d:69: 8c:69:b4:43:c4:ed:de:f7:4c:37:0b:64:10:2c:c2: ab:f0:f8:4e:ce:5d:c4:73:38:c3:c4:9b:b1:88:11: f7:6f:f9:a8:dc:f4:32:29:4d:89:d6:9e:c8:80:1b: b6:93:f0:9a:e2:ca:2b:4c:02:7e:19:54:6c:52:ad: bd:9b:ce:14:5e:78:c8:e9:e7:67:e6:be:37:ab:9d: 59:cb:e0:48:57:66:cf:73:7d:2f:90:98:5a:4c:e8: 3d:22:84:10:19:55:37:96:45:48:cf:f9:94:4e:f2: a0:be:b3:9f:dc:cb:99:4f:02:f8:ae:e2:25:00:04: 88:56:72:4f:8d:1d:09:6d:a6:e5:83:b1:68:73:66: 39:d7:f7:19:b8:63:8e:f4:6e:dd:4a:05:13:03:c1: 4a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B8:04:90:8B:68:BF:F5:E8:C3:A9:F7:F8:F1:6B:31:BF:04:33:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/628c2b11-2d67-382b-beb6-7781ee6b32ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.65.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:b0:19:c2:1a:da:b8:e6:04:28:94:6a:79:71:7f:ba:7d:e3: 64:73:ca:5a:34:5c:70:89:22:b4:60:75:3b:32:58:ac:ec:60: 16:73:c1:47:26:a1:1a:58:95:17:54:e8:7a:6e:58:37:bb:f2: a8:26:a7:b7:5d:57:32:01:98:e5:5b:fb:67:4d:3d:e2:2b:a3: ca:36:55:5b:df:41:8f:83:c7:4e:0c:b6:fc:2e:2c:0d:7d:11: cb:00:a4:6c:71:b2:53:4b:55:12:55:69:bb:f4:12:79:6d:c7: 18:a2:86:e7:62:e3:a0:13:bf:80:bf:a4:9b:85:06:ec:51:ba: f7:48:29:bf:fa:06:95:d8:4a:1c:4c:27:b9:d3:cc:cf:c7:af: af:ce:5f:9f:89:13:be:9f:4f:5f:62:8f:f2:73:6a:cd:34:b6: 91:bf:ae:b0:f4:54:1f:19:53:42:00:8a:83:07:f2:78:61:79: 8f:33:53:87:03:13:c7:76:a7:72:3e:00:7e:ec:41:92:3d:b8: 74:96:6b:56:3c:63:8b:59:48:6e:97:a4:12:37:1a:42:6d:72: 2b:90:b3:35:41:4b:ec:dd:0a:dc:88:48:f4:57:92:76:bf:72: cd:f3:c7:6b:dc:d0:62:be:c2:35:a6:ba:9c:a4:5f:fd:41:ed: f8:f6:2f:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToRn58hKFxFjuPqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk YWFhOTc0ZjktMGM4Yi00ZjFjLTkwYTgtN2RmMDhkMmY5YjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrV2gQMn7062lL+3anhUma16beb2Xdi5IY7A fbcBhaDu8UmqNlcGNwENW3U3Yay0WOHHFS3Y20iz9kEto/tXalntFacZ/k5CzoYk wbuAkXIMXr0AsMYJ7PZZPS3L+leof335DX5mXWmMabRDxO3e90w3C2QQLMKr8PhO zl3EczjDxJuxiBH3b/mo3PQyKU2J1p7IgBu2k/Ca4sorTAJ+GVRsUq29m84UXnjI 6edn5r43q51Zy+BIV2bPc30vkJhaTOg9IoQQGVU3lkVIz/mUTvKgvrOf3MuZTwL4 ruIlAASIVnJPjR0Jbablg7Foc2Y51/cZuGOO9G7dSgUTA8FKwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB24BJCLaL/16MOp9/jxazG/BDMSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjI4YzJiMTEtMmQ2Ny0z ODJiLWJlYjYtNzc4MWVlNmIzMmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0F6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGwGcIa2rjmBCiUanlxf7p942Rzylo0XHCJIrRgdTsyWKzsYBZzwUcm oRpYlRdU6HpuWDe78qgmp7ddVzIBmOVb+2dNPeIro8o2VVvfQY+Dx04MtvwuLA19 EcsApGxxslNLVRJVabv0Enltxxiihudi46ATv4C/pJuFBuxRuvdIKb/6BpXYShxM J7nTzM/Hr6/OX5+JE76fT19ij/Jzas00tpG/rrD0VB8ZU0IAioMH8nhheY8zU4cD E8d2p3I+AH7sQZI9uHSWa1Y8Y4tZSG6XpBI3GkJtciuQszVBS+zdCtyISPRXkna/ cs3zx2vc0GK+wjWmupykX/1B7fj2Lwo= -----END CERTIFICATE-----Generated at Sat Aug 23 19:49:54 2025 by rpki-client