$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e2438a2-fb94-398c-ba49-230b8452d27d.roa File: 7e2438a2-fb94-398c-ba49-230b8452d27d.roa (raw, json) Hash identifier: zFQs4sH7Vgb04Uc79ohxPtIMx1CTTMGhsaMTnE2D8vQ= Subject key identifier: 17:04:CF:19:54:E1:87:F0:DD:81:EC:50:C3:14:94:9A:05:05:D0:91 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ADECBCB8DDEB752FDFD73A210 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e2438a2-fb94-398c-ba49-230b8452d27d.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.41.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:cb:8d:de:b7:52:fd:fd:73:a2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=057355ff-1359-46d6-83f5-fe00052c1bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:be:fa:02:04:93:b2:6b:ed:47:87:7e:1e:9c: af:35:db:70:3f:9b:df:d1:ac:32:8d:77:7a:85:17: 5a:68:d4:a2:6f:26:05:3d:19:36:cc:04:57:b8:cc: 4b:24:75:35:ce:bf:fa:f8:f0:26:b0:b6:5c:80:ff: 8d:4b:a5:11:2e:64:0c:a4:38:92:75:10:c8:aa:f6: 53:46:a1:3e:e7:33:cd:a4:ae:e2:6c:d1:83:cd:6a: 1b:fd:43:00:a8:77:ec:d3:87:83:18:6f:5c:74:ea: 02:f5:ea:67:c3:37:bb:11:f3:90:6c:97:ea:85:05: 3b:6a:be:fe:53:ca:eb:f9:66:64:a0:b8:46:1c:42: e5:4f:5a:0f:e7:eb:d7:f2:e1:20:83:59:80:72:da: 53:7c:06:0e:dc:57:ed:ef:fa:24:37:17:99:fe:a4: c5:18:9b:9a:5a:84:33:ee:f3:a6:46:66:83:ce:ea: 96:f0:95:05:fe:ff:f0:54:d5:c7:c6:2b:ed:35:c4: 2a:ac:05:af:e5:a0:c7:1e:a0:86:57:f1:0b:06:14: 93:38:b3:cd:2d:76:64:ba:ca:6e:a2:cc:03:8a:ca: f7:45:aa:90:36:ab:c3:ef:dd:31:54:3a:5c:f6:72: 15:74:84:95:35:dd:6d:a7:06:59:cb:a1:6c:d5:45: 93:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:04:CF:19:54:E1:87:F0:DD:81:EC:50:C3:14:94:9A:05:05:D0:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e2438a2-fb94-398c-ba49-230b8452d27d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:2b:75:8e:15:06:62:12:de:da:a6:ad:9d:b5:a2:03:f9:32: a9:a0:2f:73:35:d9:b6:e8:dd:48:85:cf:c3:08:d4:80:e9:05: 1d:a9:20:7a:7c:72:fb:7e:81:ac:01:9b:e8:69:69:9f:5b:a3: d3:a8:73:d3:4a:76:16:49:eb:c2:ae:4c:28:89:34:81:37:f0: a3:37:a2:c2:43:c9:5a:b0:ce:87:fa:14:b9:e3:94:1f:62:98: 74:df:fd:36:e3:d2:83:5a:9d:ca:e8:9d:19:9e:9a:2b:fa:9b: 61:b8:22:fc:66:47:ee:e2:1d:aa:86:a0:bb:86:e2:b0:cc:b7: a8:56:37:fb:9b:81:05:38:29:5d:e5:6c:2c:ab:4b:de:5e:02: 9d:5d:23:3c:42:91:b5:8b:fd:d4:8e:37:2c:d2:0e:ba:e4:fa: 46:30:7e:83:14:4c:e8:db:25:bb:52:5e:5a:9a:2f:11:83:4c: 46:35:89:e8:e7:a5:cb:01:96:aa:1d:18:e5:db:26:52:d4:d4: ba:f1:ce:d4:8c:8a:d5:59:5e:3a:66:aa:67:64:a4:f8:1f:60: 3f:d0:39:ba:fb:03:33:2c:a8:cf:0f:81:4b:ab:8d:44:00:45: 10:80:cf:3c:61:ce:66:6f:7f:15:ca:95:82:9f:20:a4:2f:2e: af:96:e8:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey8uN3rdS/f1zohAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk MDU3MzU1ZmYtMTM1OS00NmQ2LTgzZjUtZmUwMDA1MmMxYmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb76AgSTsmvtR4d+HpyvNdtwP5vf0awyjXd6 hRdaaNSibyYFPRk2zARXuMxLJHU1zr/6+PAmsLZcgP+NS6URLmQMpDiSdRDIqvZT RqE+5zPNpK7ibNGDzWob/UMAqHfs04eDGG9cdOoC9epnwze7EfOQbJfqhQU7ar7+ U8rr+WZkoLhGHELlT1oP5+vX8uEgg1mActpTfAYO3Fft7/okNxeZ/qTFGJuaWoQz 7vOmRmaDzuqW8JUF/v/wVNXHxivtNcQqrAWv5aDHHqCGV/ELBhSTOLPNLXZkuspu oswDisr3RaqQNqvD790xVDpc9nIVdISVNd1tpwZZy6Fs1UWTIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcEzxlU4Yfw3YHsUMMUlJoFBdCRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2UyNDM4YTItZmI5NC0z OThjLWJhNDktMjMwYjg0NTJkMjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFykgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUrdY4VBmIS3tqmrZ21ogP5MqmgL3M12bbo3UiFz8MI1IDpBR2pIHp8 cvt+gawBm+hpaZ9bo9Ooc9NKdhZJ68KuTCiJNIE38KM3osJDyVqwzof6FLnjlB9i mHTf/Tbj0oNancronRmemiv6m2G4IvxmR+7iHaqGoLuG4rDMt6hWN/ubgQU4KV3l bCyrS95eAp1dIzxCkbWL/dSONyzSDrrk+kYwfoMUTOjbJbtSXlqaLxGDTEY1iejn pcsBlqodGOXbJlLU1LrxztSMitVZXjpmqmdkpPgfYD/QObr7AzMsqM8PgUurjUQA RRCAzzxhzmZvfxXKlYKfIKQvLq+W6Dk= -----END CERTIFICATE-----Generated at Sat Aug 23 14:08:45 2025 by rpki-client