$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ef1c711-d50a-3f1d-a03d-c0984424b13a.roa File: 7ef1c711-d50a-3f1d-a03d-c0984424b13a.roa (raw, json) Hash identifier: y6m2SzBgsZhhYJ12VZXO8afj7gPc9YV3GymVNvJQgrk= Subject key identifier: FF:11:AD:19:71:0D:07:20:CA:D8:E5:2A:3A:CB:C6:83:8E:B2:C3:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ADECBD0D928E9A22C1B01D900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ef1c711-d50a-3f1d-a03d-c0984424b13a.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 9498 IP address blocks: 23.76.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:d0:d9:28:e9:a2:2c:1b:01:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=6d6c9504-cea9-455d-a055-abff6503fbc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a3:3c:2e:39:59:a8:f8:ff:fc:10:20:ea:63: 81:05:c6:9d:8c:e5:cd:c8:3a:b6:29:e0:22:c1:95: 3c:06:c8:f6:79:1e:6c:74:92:13:1b:60:26:35:f9: 16:48:12:75:b0:ac:32:d8:34:04:a9:d8:db:6b:84: 6f:2b:ce:10:76:6c:0f:22:a6:ec:56:ad:f8:41:82: 5c:9f:09:7f:b2:4c:29:d8:d2:fd:56:9e:91:4a:f0: 14:53:8f:a3:dc:1d:e5:d7:2d:45:fe:69:4f:8b:ac: 12:4c:e5:6f:52:4f:c9:e3:4e:8d:56:74:06:33:4d: c9:17:e4:a8:49:23:10:58:71:92:d4:79:ff:99:c4: 3a:0e:29:30:f1:ef:c8:6e:50:80:99:b0:b4:00:63: 85:00:c6:a6:9b:43:ad:94:ca:ba:76:ee:66:56:38: 12:4f:21:89:c1:4f:c3:cb:6e:71:c2:b4:dd:10:33: 8e:38:ac:24:e3:ae:4a:96:d1:78:c8:51:97:06:21: 82:ed:9b:ad:c7:e1:47:4a:a3:89:90:7c:c6:ea:81: da:47:b2:5f:fe:05:38:61:df:a0:1d:75:7d:ad:79: ac:10:ae:fa:25:cf:69:6d:7d:87:a2:74:49:17:c6: 22:3f:d4:c6:2d:67:fa:23:bb:31:ad:cf:f2:7e:e6: a8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:11:AD:19:71:0D:07:20:CA:D8:E5:2A:3A:CB:C6:83:8E:B2:C3:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ef1c711-d50a-3f1d-a03d-c0984424b13a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.76.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:cf:57:64:21:5c:41:81:84:d5:fa:e4:93:71:d9:53:e3:14: 03:bd:e1:8a:f1:a7:53:42:70:d7:f0:65:9a:dc:a7:bc:0e:64: 23:f3:67:7f:70:c7:7a:1f:93:33:26:a0:9a:cf:5b:8f:ff:f9: 08:93:a4:d0:28:67:51:3d:08:26:51:bb:f1:fa:7d:10:15:f4: ff:67:60:32:af:bf:d4:6f:a4:db:b0:2b:ea:f3:93:b4:86:54: 45:0d:24:b4:a6:d9:d2:6d:0c:53:19:bc:d6:ea:01:63:dc:88: 54:c3:9e:fc:58:04:05:97:45:c5:f3:07:6f:9f:14:bc:14:06: 5e:53:b2:7d:c2:34:86:c4:85:9a:16:65:37:2f:d6:ba:4d:36: 7e:33:07:83:c2:78:16:5f:4c:6b:74:bc:f1:53:a7:9b:b8:91: 79:f2:45:02:91:1c:a1:02:e3:05:6e:1c:18:ee:c0:4d:e2:c5: a9:86:36:a7:e8:ec:ed:1a:48:59:31:d8:12:17:17:09:4d:e6: 5e:47:4a:1a:99:7d:d9:1d:7c:74:9d:3c:83:10:a2:c7:eb:49: df:8f:dc:78:6a:47:85:9a:d2:99:3e:a0:65:6c:e6:b5:14:c7: 0a:92:e1:9c:9c:94:42:ee:42:7f:7a:9d:3a:96:00:0f:c3:a5: d9:26:ca:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey9DZKOmiLBsB2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk NmQ2Yzk1MDQtY2VhOS00NTVkLWEwNTUtYWJmZjY1MDNmYmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqM8LjlZqPj//BAg6mOBBcadjOXNyDq2KeAi wZU8Bsj2eR5sdJITG2AmNfkWSBJ1sKwy2DQEqdjba4RvK84QdmwPIqbsVq34QYJc nwl/skwp2NL9Vp6RSvAUU4+j3B3l1y1F/mlPi6wSTOVvUk/J406NVnQGM03JF+So SSMQWHGS1Hn/mcQ6Dikw8e/IblCAmbC0AGOFAMamm0OtlMq6du5mVjgSTyGJwU/D y25xwrTdEDOOOKwk465KltF4yFGXBiGC7Zutx+FHSqOJkHzG6oHaR7Jf/gU4Yd+g HXV9rXmsEK76Jc9pbX2HonRJF8YiP9TGLWf6I7sxrc/yfuao7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8RrRlxDQcgytjlKjrLxoOOssMRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2VmMWM3MTEtZDUwYS0z ZjFkLWEwM2QtYzA5ODQ0MjRiMTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0ycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvPV2QhXEGBhNX65JNx2VPjFAO94Yrxp1NCcNfwZZrcp7wOZCPzZ39w x3ofkzMmoJrPW4//+QiTpNAoZ1E9CCZRu/H6fRAV9P9nYDKvv9RvpNuwK+rzk7SG VEUNJLSm2dJtDFMZvNbqAWPciFTDnvxYBAWXRcXzB2+fFLwUBl5Tsn3CNIbEhZoW ZTcv1rpNNn4zB4PCeBZfTGt0vPFTp5u4kXnyRQKRHKEC4wVuHBjuwE3ixamGNqfo 7O0aSFkx2BIXFwlN5l5HShqZfdkdfHSdPIMQosfrSd+P3HhqR4Wa0pk+oGVs5rUU xwqS4ZyclELuQn96nTqWAA/DpdkmyiI= -----END CERTIFICATE-----Generated at Sat Aug 23 16:52:20 2025 by rpki-client