$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c75aa0a-9d48-3b87-bf8c-d65b3151c388.roa File: 8c75aa0a-9d48-3b87-bf8c-d65b3151c388.roa (raw, json) Hash identifier: nFL1ANoUARRdDrCFUefwUPEAZsF521f1Hgh8jYqkqnk= Subject key identifier: DE:20:B1:BB:9D:21:99:A5:65:AC:7A:B6:4A:29:82:04:BF:E8:95:8C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE4614076F268CA49E7E6E240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c75aa0a-9d48-3b87-bf8c-d65b3151c388.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 9498 IP address blocks: 23.3.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:40:76:f2:68:ca:49:e7:e6:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=192aed08-ddb8-4978-9d42-f31d92c7f33b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:99:25:06:d9:57:69:e0:6d:d2:7e:71:21:43: 04:2c:c7:13:49:5e:fc:31:48:85:d8:31:64:bb:67: ff:2d:4f:6a:77:46:e5:6e:61:7d:1b:e1:0a:01:89: d3:cf:05:81:12:97:c4:85:ab:9e:af:cf:80:07:81: bf:9b:7b:36:e6:b4:85:74:87:85:98:ba:6c:19:c3: b7:c2:28:b4:c1:33:91:89:45:92:e8:c9:65:36:d5: 05:06:61:48:16:ea:74:74:bb:0e:66:7e:a8:5c:d8: 3c:be:90:c6:02:94:87:64:37:ed:a1:8d:c5:18:b7: 4c:2f:77:80:ee:e0:2c:3e:44:d1:fd:43:8f:3f:3d: 7d:a7:0a:8d:1a:75:b1:90:d5:8e:84:17:fa:b0:37: ab:cc:b6:91:5a:1d:6d:cd:56:f2:60:63:bc:17:1c: 0f:cf:b4:29:e4:73:28:56:8b:a8:e3:93:b7:5e:29: 47:9b:7a:a7:7c:59:30:46:90:f9:68:52:8f:2c:88: e8:ec:b8:76:0f:c7:a1:24:bc:7a:6b:ca:f2:f5:8e: bf:37:6c:36:4f:33:09:2d:3e:13:8e:6d:3e:06:ee: 76:62:6f:c4:ac:2d:5a:af:47:d2:d3:26:cd:26:9e: ed:38:03:f2:4e:3f:5a:b9:3c:a6:8f:f8:eb:31:7f: 9c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:20:B1:BB:9D:21:99:A5:65:AC:7A:B6:4A:29:82:04:BF:E8:95:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c75aa0a-9d48-3b87-bf8c-d65b3151c388.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:82:26:7d:d5:bb:29:b4:b9:b6:70:72:dd:ce:86:c6:00:16: c1:ba:e4:c2:40:4d:f4:57:ef:28:f0:47:28:5d:3f:4e:ed:ea: c2:e5:73:08:dd:e0:73:d0:48:31:4a:4b:97:0c:92:86:43:46: 76:9d:ae:1d:0e:ba:96:12:8c:28:e0:f0:64:bd:93:ef:98:35: 2d:e6:90:d1:34:04:55:e8:51:94:31:43:77:63:97:14:85:76: 0e:fa:3b:05:dd:4d:5e:de:59:eb:7b:d5:ec:43:80:74:95:65: d2:c9:57:b5:b5:80:f6:7e:1b:61:3e:49:9e:81:3a:ae:b2:0b: e8:6c:a8:a8:48:52:eb:1e:2f:f4:79:4f:c0:e0:4d:2f:71:27: 93:7d:27:d0:0f:ee:d4:58:74:56:f3:c2:70:d2:43:31:68:3a: e0:af:d0:8e:c3:9f:98:53:c9:05:37:51:ee:a8:17:c1:00:b2: be:84:5b:6a:28:18:3e:fb:83:a1:f1:c0:b1:0e:91:c7:df:4e: b4:5d:71:32:59:66:3e:57:bf:79:53:6c:7b:bc:80:4e:f8:c8: 00:19:c4:a0:1a:cb:a6:0e:3a:dc:04:26:48:14:98:d2:cc:75: 27:06:63:bb:a2:81:98:fd:46:87:cf:2f:98:79:61:28:76:83: 3c:f4:6e:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYUB28mjKSefm4kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk MTkyYWVkMDgtZGRiOC00OTc4LTlkNDItZjMxZDkyYzdmMzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJklBtlXaeBt0n5xIUMELMcTSV78MUiF2DFk u2f/LU9qd0blbmF9G+EKAYnTzwWBEpfEhauer8+AB4G/m3s25rSFdIeFmLpsGcO3 wii0wTORiUWS6MllNtUFBmFIFup0dLsOZn6oXNg8vpDGApSHZDftoY3FGLdML3eA 7uAsPkTR/UOPPz19pwqNGnWxkNWOhBf6sDerzLaRWh1tzVbyYGO8FxwPz7Qp5HMo Vouo45O3XilHm3qnfFkwRpD5aFKPLIjo7Lh2D8ehJLx6a8ry9Y6/N2w2TzMJLT4T jm0+Bu52Ym/ErC1ar0fS0ybNJp7tOAPyTj9auTymj/jrMX+cjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4gsbudIZmlZax6tkopggS/6JWMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGM3NWFhMGEtOWQ0OC0z Yjg3LWJmOGMtZDY1YjMxNTFjMzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwNGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqCJn3Vuym0ubZwct3OhsYAFsG65MJATfRX7yjwRyhdP07t6sLlcwjd 4HPQSDFKS5cMkoZDRnadrh0OupYSjCjg8GS9k++YNS3mkNE0BFXoUZQxQ3djlxSF dg76OwXdTV7eWet71exDgHSVZdLJV7W1gPZ+G2E+SZ6BOq6yC+hsqKhIUuseL/R5 T8DgTS9xJ5N9J9AP7tRYdFbzwnDSQzFoOuCv0I7Dn5hTyQU3Ue6oF8EAsr6EW2oo GD77g6HxwLEOkcffTrRdcTJZZj5Xv3lTbHu8gE74yAAZxKAay6YOOtwEJkgUmNLM dScGY7uigZj9RofPL5h5YSh2gzz0bkI= -----END CERTIFICATE-----Generated at Sat Aug 23 16:50:10 2025 by rpki-client