$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70c5b799-029a-3603-b484-71d82d564b99.roa File: 70c5b799-029a-3603-b484-71d82d564b99.roa (raw, json) Hash identifier: YJfRR1gRgkLXIzkhPkQrahUrNqaf5Rx9Ut7DNNJqZuU= Subject key identifier: D1:02:D1:1A:0E:7F:6C:5D:73:D1:76:C9:F7:E7:6D:82:76:33:BB:F3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC5ABB10FBE04C81A9F864700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70c5b799-029a-3603-b484-71d82d564b99.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.1.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:b1:0f:be:04:c8:1a:9f:86:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=e06d9231-fcf0-449d-acfa-07a2b84e454e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:03:5b:d9:0b:36:6e:db:68:5c:88:e3:34:a8: 67:4d:f1:a2:84:f9:d1:eb:92:a2:79:87:d4:eb:31: 34:66:71:0f:36:29:00:41:79:0b:73:c3:58:e1:37: 7b:82:9e:b4:df:95:b0:a8:9c:ca:25:0b:20:94:e4: e3:97:54:5b:c3:a8:77:d1:74:45:b3:a1:d3:04:d1: 96:3f:89:d3:5b:c6:c9:b0:79:8e:37:a0:3d:34:82: ef:fe:fa:27:30:05:81:06:23:75:d0:49:d6:7a:69: 84:bf:95:ee:e9:42:a0:f7:da:b3:01:b2:ab:4d:cd: 17:85:94:6d:f6:fa:4e:a7:61:91:b8:1a:01:b6:43: ba:81:58:d3:95:0a:45:6f:6b:e1:a6:ec:44:ae:a8: 3e:ae:e5:bb:53:a1:41:6e:6c:1f:4b:24:d6:63:9f: 78:b3:4e:98:c4:da:6b:ad:d5:11:1b:d5:5c:63:78: f2:68:5c:cd:d1:71:0d:06:7b:8c:bf:bc:da:10:bd: 67:28:5a:e6:8b:18:d8:7d:3e:d0:7b:d5:57:1b:18: 9a:68:d8:51:7d:75:01:6e:f1:42:f9:23:2d:c5:01: 3e:6e:b1:55:6e:91:08:65:52:50:17:6c:a2:63:e6: 70:6c:ef:0e:c1:2f:8a:83:6e:61:3f:5f:46:72:6a: e8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:02:D1:1A:0E:7F:6C:5D:73:D1:76:C9:F7:E7:6D:82:76:33:BB:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70c5b799-029a-3603-b484-71d82d564b99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:34:8f:f8:a3:17:82:23:2e:52:a8:1d:4d:28:16:8b:66:a9: dc:1b:0b:76:f8:0f:8b:ca:3a:ed:ca:b9:07:f1:31:10:93:e0: ac:b4:7e:73:66:9b:a3:00:bd:d3:12:82:61:c7:3a:5f:44:ba: e9:de:74:c6:43:95:1f:3c:5a:33:6a:b3:e8:b8:3e:1b:42:5e: 26:ce:6f:ea:bd:67:35:47:5a:0e:3c:3f:89:c7:fa:b1:ab:54: d5:15:c0:64:dd:1b:56:b9:5f:4f:77:7d:da:45:c6:1e:4f:f4: df:0c:4a:37:3b:ff:b8:b9:bd:13:8d:d8:c3:f1:7e:4a:4b:a4: 52:8d:eb:8b:7d:e2:da:8f:3e:ea:f9:38:dd:a2:22:4a:d0:a3: e9:20:67:c5:d6:bf:81:8c:25:2b:23:5d:7b:1d:ee:28:f3:12: a5:76:15:88:76:e9:1f:12:f7:af:a3:43:d1:4f:7f:29:88:65: 1f:3d:64:45:7d:26:ab:5c:7c:e8:64:47:94:21:38:39:4b:ab: 85:04:f6:da:74:8e:03:5d:dc:6b:42:d2:79:08:13:46:80:80: ff:08:95:71:cf:9a:a9:4e:76:89:7e:f6:8c:e2:d7:80:db:ab: db:69:03:a5:d9:5c:b8:a5:72:89:84:3a:07:90:e9:70:e1:8e: 6a:0e:fb:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq7EPvgTIGp+GRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk ZTA2ZDkyMzEtZmNmMC00NDlkLWFjZmEtMDdhMmI4NGU0NTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArANb2Qs2bttoXIjjNKhnTfGihPnR65KieYfU 6zE0ZnEPNikAQXkLc8NY4Td7gp6035WwqJzKJQsglOTjl1Rbw6h30XRFs6HTBNGW P4nTW8bJsHmON6A9NILv/vonMAWBBiN10EnWemmEv5Xu6UKg99qzAbKrTc0XhZRt 9vpOp2GRuBoBtkO6gVjTlQpFb2vhpuxErqg+ruW7U6FBbmwfSyTWY594s06YxNpr rdURG9VcY3jyaFzN0XENBnuMv7zaEL1nKFrmixjYfT7Qe9VXGxiaaNhRfXUBbvFC +SMtxQE+brFVbpEIZVJQF2yiY+ZwbO8OwS+Kg25hP19Gcmro8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEC0RoOf2xdc9F2yffnbYJ2M7vzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzBjNWI3OTktMDI5YS0z NjAzLWI0ODQtNzFkODJkNTY0Yjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGc0j/ijF4IjLlKoHU0oFotmqdwbC3b4D4vKOu3KuQfxMRCT4Ky0fnNm m6MAvdMSgmHHOl9EuunedMZDlR88WjNqs+i4PhtCXibOb+q9ZzVHWg48P4nH+rGr VNUVwGTdG1a5X093fdpFxh5P9N8MSjc7/7i5vRON2MPxfkpLpFKN64t94tqPPur5 ON2iIkrQo+kgZ8XWv4GMJSsjXXsd7ijzEqV2FYh26R8S96+jQ9FPfymIZR89ZEV9 JqtcfOhkR5QhODlLq4UE9tp0jgNd3GtC0nkIE0aAgP8IlXHPmqlOdol+9ozi14Db q9tpA6XZXLilcomEOgeQ6XDhjmoO+94= -----END CERTIFICATE-----Generated at Sat Aug 23 13:13:21 2025 by rpki-client