$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89afa793-4e1b-338b-8d16-78d6b96f5ae2.roa File: 89afa793-4e1b-338b-8d16-78d6b96f5ae2.roa (raw, json) Hash identifier: DrcDJem4oag4vzN+6dOqmU/L1CA/kEBJ9LbCmWZ/vOM= Subject key identifier: DA:4E:54:CA:BC:25:BF:14:FE:88:F8:A3:D5:ED:86:6B:DF:BE:5D:74 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE8914137747ECA6A069B5A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89afa793-4e1b-338b-8d16-78d6b96f5ae2.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.0.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:41:37:74:7e:ca:6a:06:9b:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=57cfc9bf-2a81-446e-8cfb-d31d67c448b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2a:11:2f:77:43:c0:fa:bd:64:27:ae:e6:b3: 3c:22:36:c0:7d:22:4e:22:a3:70:29:1e:a5:10:03: 29:e7:d0:e1:dd:6c:25:4c:e5:45:da:f9:96:b7:7c: b8:68:36:b6:11:34:4f:8a:c5:9c:db:6a:41:fe:fd: 2f:46:58:ad:70:f0:68:69:fb:66:2e:18:94:25:f0: 20:3a:35:33:d1:b3:93:6b:a1:ad:30:5b:07:a5:cd: b7:bd:00:cb:5d:23:a2:93:86:7b:04:97:f6:bc:99: e4:6c:f8:3a:c7:a3:44:e7:6e:c1:a7:96:9a:b0:2c: bc:c4:90:c2:c0:b5:ad:cf:4b:2d:ad:61:bb:1c:99: a6:02:78:af:ab:bd:c4:dd:5c:97:dd:67:23:bf:7c: f2:f7:70:b0:75:29:c2:e3:69:c5:72:82:c0:21:af: 9d:42:5a:8e:24:2b:de:b5:73:b0:a1:64:d1:d1:0e: ab:a0:81:57:62:d7:37:49:dd:3a:68:41:a4:3e:ff: 6c:87:a3:44:c0:a2:87:29:fd:0e:ec:1e:53:24:70: db:0b:fe:f4:cd:ac:60:21:bb:0f:e7:02:98:1f:81: 8e:e3:2d:83:c5:7e:c8:5a:c2:5a:87:8d:f9:60:b0: 64:cc:80:4e:c6:1e:ce:ad:8e:b7:0e:ce:b2:87:2d: 3b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:4E:54:CA:BC:25:BF:14:FE:88:F8:A3:D5:ED:86:6B:DF:BE:5D:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89afa793-4e1b-338b-8d16-78d6b96f5ae2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.0.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:80:ed:81:18:e8:07:33:d9:b2:9d:a7:a9:13:e9:a5:28:7b: 2d:dd:57:67:10:36:40:33:72:e2:a7:48:49:51:66:90:05:d2: e2:5e:43:56:66:9a:e4:bd:cb:dd:31:fd:fd:dc:10:e5:15:54: d8:9e:f8:ab:0a:2c:14:d1:6f:97:63:8f:24:04:61:a8:a2:0e: 3b:7f:64:6a:f9:80:de:cd:ec:be:44:47:f3:72:e4:3b:a0:78: d9:c5:c2:8b:d9:82:3e:c9:bd:c4:8c:e9:ad:cb:23:9c:5a:14: 4a:74:4a:c5:26:3c:10:0c:d4:d0:25:91:03:3e:80:10:df:cd: e5:38:34:46:86:da:19:cf:a2:7f:8d:9a:20:91:78:90:16:7a: ea:12:d5:48:83:75:2e:86:e4:23:d9:b1:85:23:74:e6:83:ea: 76:87:f3:b6:5c:da:63:ed:a7:75:d0:ed:17:78:cc:d6:13:2e: 85:64:54:29:25:25:68:02:1f:7e:e0:be:5c:c9:4f:25:b0:ae: b8:ad:a6:77:c7:f5:c8:ca:75:72:79:3c:67:36:0a:38:28:52: 02:0b:d6:1a:8b:2b:92:24:cc:b6:95:e0:1f:36:12:57:b6:24: 36:07:f0:8c:3e:6f:6c:e4:67:eb:d1:0d:e3:97:e5:6f:fa:68: 3d:b6:f4:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokUE3dH7KagabWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk NTdjZmM5YmYtMmE4MS00NDZlLThjZmItZDMxZDY3YzQ0OGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCoRL3dDwPq9ZCeu5rM8IjbAfSJOIqNwKR6l EAMp59Dh3WwlTOVF2vmWt3y4aDa2ETRPisWc22pB/v0vRlitcPBoaftmLhiUJfAg OjUz0bOTa6GtMFsHpc23vQDLXSOik4Z7BJf2vJnkbPg6x6NE527Bp5aasCy8xJDC wLWtz0strWG7HJmmAnivq73E3VyX3Wcjv3zy93CwdSnC42nFcoLAIa+dQlqOJCve tXOwoWTR0Q6roIFXYtc3Sd06aEGkPv9sh6NEwKKHKf0O7B5TJHDbC/70zaxgIbsP 5wKYH4GO4y2DxX7IWsJah435YLBkzIBOxh7OrY63Ds6yhy07dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpOVMq8Jb8U/oj4o9Xthmvfvl10MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODlhZmE3OTMtNGUxYi0z MzhiLThkMTYtNzhkNmI5NmY1YWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6A7YEY6Acz2bKdp6kT6aUoey3dV2cQNkAzcuKnSElRZpAF0uJeQ1Zm muS9y90x/f3cEOUVVNie+KsKLBTRb5djjyQEYaiiDjt/ZGr5gN7N7L5ER/Ny5Dug eNnFwovZgj7JvcSM6a3LI5xaFEp0SsUmPBAM1NAlkQM+gBDfzeU4NEaG2hnPon+N miCReJAWeuoS1UiDdS6G5CPZsYUjdOaD6naH87Zc2mPtp3XQ7Rd4zNYTLoVkVCkl JWgCH37gvlzJTyWwrritpnfH9cjKdXJ5PGc2CjgoUgIL1hqLK5IkzLaV4B82Ele2 JDYH8Iw+b2zkZ+vRDeOX5W/6aD229Ls= -----END CERTIFICATE-----Generated at Sat Aug 23 14:57:32 2025 by rpki-client