$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80f1ce13-2d43-3668-b870-0ded0e5f15a3.roa File: 80f1ce13-2d43-3668-b870-0ded0e5f15a3.roa (raw, json) Hash identifier: N5m8bEt6B2ISQWEgYIENETLDIWtogLk7GZZ9ljpzLXY= Subject key identifier: BA:75:FF:54:6F:DC:1E:CE:7D:62:C9:63:55:92:D8:92:B0:9F:17:BD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE4614013302611C5E30DD040 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80f1ce13-2d43-3668-b870-0ded0e5f15a3.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.2.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:40:13:30:26:11:c5:e3:0d:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=4f14b3d1-e612-4209-8ba5-5cdc737ee36c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f1:45:45:66:86:7f:9a:e5:6c:8b:f9:9e:ee: 47:92:f6:c4:f2:ee:8a:0b:03:47:c6:ba:b6:3c:c7: db:db:f9:6c:74:88:13:65:23:06:94:ec:84:00:98: a6:8b:b3:e5:57:c6:b7:6a:6c:ce:bd:f4:75:f0:bf: f6:c8:15:eb:cb:6a:cc:54:04:1b:ac:41:49:2c:9e: f7:78:8d:dc:6c:88:77:ce:ec:65:b2:b4:de:85:89: 39:6e:b1:d1:21:3e:59:8d:48:6f:69:41:80:8d:22: 8a:70:a4:23:3e:ce:c8:3e:ca:2b:7e:42:c0:c6:6c: 78:04:5c:5a:44:53:17:af:52:fc:a6:5b:e9:66:c2: e1:4c:cf:f1:9f:18:78:38:3e:f9:32:aa:78:9e:8b: 24:74:fe:1c:9b:3c:35:3c:2a:10:f8:f6:f9:27:1a: dd:cd:ab:62:1c:59:8a:56:a1:59:eb:16:91:52:f3: 93:b2:25:ff:be:61:7a:0a:81:48:5c:f2:56:db:52: 3a:61:91:6f:15:d5:90:c2:65:f8:32:6d:af:47:83: 7b:c7:c0:e8:c6:d1:2f:ae:bd:4d:69:80:09:3c:ff: c2:09:d7:c7:12:97:0f:63:f1:31:c0:4d:7c:bd:6a: 69:14:92:96:c2:3d:14:c8:5d:6d:eb:b3:e8:95:79: 28:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:75:FF:54:6F:DC:1E:CE:7D:62:C9:63:55:92:D8:92:B0:9F:17:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80f1ce13-2d43-3668-b870-0ded0e5f15a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.2.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:af:08:a9:b3:51:1a:a3:6d:98:8c:42:2c:aa:bb:23:a9:d7: 40:05:48:8e:2d:1a:33:5f:40:ff:79:36:0b:79:89:5a:02:ad: 4e:a0:3f:78:e8:4a:5c:36:b1:92:c8:00:6c:fc:0a:88:f8:49: e9:1b:ae:4c:1f:dd:95:79:7c:42:dc:8d:46:6f:7b:ec:66:b1: 47:6b:08:9b:ed:0e:05:92:63:7c:74:d3:ef:96:7b:a8:62:c0: 80:ff:ef:ee:e6:f0:83:d1:ad:41:a8:4b:1b:4f:9a:84:7d:8a: 73:81:2d:79:6d:cd:ee:d3:44:60:1d:2f:eb:1a:32:44:40:bb: db:ea:8a:89:af:ae:1e:28:a3:47:b6:7a:34:d1:05:15:a4:5c: 07:99:a6:5d:03:f6:2f:16:13:d6:23:9a:a2:4b:29:c8:06:b5: cc:01:b6:fc:8f:22:c5:55:53:27:66:9a:89:63:f4:c1:1d:c0: ec:fc:59:70:14:70:01:b1:98:b6:ad:0a:b2:4a:b8:11:b6:b0: c4:93:52:cc:e6:dd:54:d7:4f:03:76:95:c6:45:aa:b4:eb:1e: fe:4f:a8:ca:d3:a4:d5:eb:69:e2:2e:e9:49:a2:17:8d:d4:f0: 90:0b:47:d7:f0:f3:d7:0e:94:c2:ff:91:06:3d:36:26:14:3b: e5:8e:ee:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYUATMCYRxeMN0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk NGYxNGIzZDEtZTYxMi00MjA5LThiYTUtNWNkYzczN2VlMzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufFFRWaGf5rlbIv5nu5HkvbE8u6KCwNHxrq2 PMfb2/lsdIgTZSMGlOyEAJimi7PlV8a3amzOvfR18L/2yBXry2rMVAQbrEFJLJ73 eI3cbIh3zuxlsrTehYk5brHRIT5ZjUhvaUGAjSKKcKQjPs7IPsorfkLAxmx4BFxa RFMXr1L8plvpZsLhTM/xnxh4OD75Mqp4noskdP4cmzw1PCoQ+Pb5JxrdzatiHFmK VqFZ6xaRUvOTsiX/vmF6CoFIXPJW21I6YZFvFdWQwmX4Mm2vR4N7x8DoxtEvrr1N aYAJPP/CCdfHEpcPY/ExwE18vWppFJKWwj0UyF1t67PolXkojQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLp1/1Rv3B7OfWLJY1WS2JKwnxe9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODBmMWNlMTMtMmQ0My0z NjY4LWI4NzAtMGRlZDBlNWYxNWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwJUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+vCKmzURqjbZiMQiyquyOp10AFSI4tGjNfQP95Ngt5iVoCrU6gP3jo Slw2sZLIAGz8Coj4Sekbrkwf3ZV5fELcjUZve+xmsUdrCJvtDgWSY3x00++We6hi wID/7+7m8IPRrUGoSxtPmoR9inOBLXltze7TRGAdL+saMkRAu9vqiomvrh4oo0e2 ejTRBRWkXAeZpl0D9i8WE9YjmqJLKcgGtcwBtvyPIsVVUydmmolj9MEdwOz8WXAU cAGxmLatCrJKuBG2sMSTUszm3VTXTwN2lcZFqrTrHv5PqMrTpNXraeIu6UmiF43U 8JALR9fw89cOlML/kQY9NiYUO+WO7tk= -----END CERTIFICATE-----Generated at Sat Aug 23 16:55:12 2025 by rpki-client