$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95568e66-56bc-3fdc-8659-810611ae2528.roa File: 95568e66-56bc-3fdc-8659-810611ae2528.roa (raw, json) Hash identifier: UacbNGUBrfQ1RiXGLZBE7Z4U2mQuj3Jy6PigzWelYPo= Subject key identifier: 9D:E5:E9:7B:47:54:71:94:C8:38:25:3B:50:78:4F:AE:CA:FA:74:BF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE46142F72BBC90231A3CB780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95568e66-56bc-3fdc-8659-810611ae2528.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.11.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:42:f7:2b:bc:90:23:1a:3c:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=f8a3e581-061e-47ff-a57c-40d8b652d487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5b:b3:23:48:8c:63:6b:95:0e:46:2a:e2:38: 10:57:a3:42:64:d9:6e:ce:bc:3b:f6:ea:c6:be:3a: f2:a8:5c:19:23:0b:eb:79:ff:e2:41:02:16:0f:19: 9c:df:2c:7a:45:84:31:f1:8c:df:5b:cc:85:07:a3: 36:ee:79:f0:6b:79:70:5f:8a:f9:54:6d:9d:5e:ce: 88:d9:27:03:bf:8f:8b:ed:f1:6c:31:7f:93:82:66: 01:1c:08:cf:f6:4c:36:fd:dc:d6:43:b3:53:26:96: f6:2e:46:9b:65:38:42:ef:5a:e9:76:88:c5:6a:77: b1:22:b4:08:97:91:37:d8:2e:52:0b:51:86:cb:9f: 24:81:d6:af:1b:44:19:08:e8:6d:c4:4b:bf:f9:fe: fa:eb:b6:17:42:c6:1f:29:33:dc:90:4b:20:bf:1e: 1a:13:1d:9a:28:2d:91:8a:26:f4:59:23:c1:84:b5: 6e:af:e5:92:c4:04:2a:5a:f3:6e:f1:f7:4b:b1:6e: 90:9f:10:53:10:6b:8f:43:78:48:82:1b:8e:50:74: 7d:d9:6d:3a:97:ff:3d:32:fa:1a:55:8b:2a:df:3b: 55:ac:c5:71:ef:06:86:0b:d6:6b:95:cf:16:59:5f: 83:82:91:a8:3d:dd:ed:91:70:5b:ce:c9:16:0a:de: 52:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E5:E9:7B:47:54:71:94:C8:38:25:3B:50:78:4F:AE:CA:FA:74:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95568e66-56bc-3fdc-8659-810611ae2528.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.11.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:65:b6:ab:66:1a:cf:4c:1b:a3:45:c8:e4:32:bd:de:1a:e7: ea:c3:4a:d1:b2:65:a0:50:59:1d:7f:f0:7e:af:65:c9:bd:e5: 6a:df:f0:6f:3d:e4:cd:ec:79:f2:34:06:88:ef:4f:c7:ad:e7: 2c:70:80:d7:af:98:ed:90:f1:81:63:ae:25:5e:63:43:2d:73: d8:32:b8:59:af:67:1a:9c:af:4a:10:dc:fe:43:4d:3d:fd:5f: d4:75:40:35:25:73:32:1d:bb:76:33:62:35:25:2d:63:c3:4c: fa:26:d8:5e:0a:9b:79:ca:96:15:29:14:11:84:a5:e1:0f:9a: ad:d0:96:ce:99:6c:09:e5:63:60:12:5d:52:83:c6:15:04:6e: d7:af:2e:52:a0:e4:3f:a9:8a:b5:8f:66:8b:b7:4f:07:61:c4: 66:f7:22:1f:c4:cf:c1:bc:b3:90:62:5b:fb:26:4f:58:ca:e0: 13:64:fb:9c:32:69:90:0e:95:a8:ad:4f:a6:05:81:51:3c:76: 86:89:fa:d7:69:c3:b7:8d:54:2c:46:b6:0f:5d:1b:26:74:10: 1f:a1:0b:3f:df:a3:c7:a7:ee:0c:0e:85:6e:bf:2d:7f:22:5e: 89:31:d5:26:a7:4b:fe:17:f4:41:85:54:fe:23:72:a0:71:6b: 0c:cb:dc:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYUL3K7yQIxo8t4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk ZjhhM2U1ODEtMDYxZS00N2ZmLWE1N2MtNDBkOGI2NTJkNDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjluzI0iMY2uVDkYq4jgQV6NCZNluzrw79urG vjryqFwZIwvref/iQQIWDxmc3yx6RYQx8YzfW8yFB6M27nnwa3lwX4r5VG2dXs6I 2ScDv4+L7fFsMX+TgmYBHAjP9kw2/dzWQ7NTJpb2LkabZThC71rpdojFanexIrQI l5E32C5SC1GGy58kgdavG0QZCOhtxEu/+f7667YXQsYfKTPckEsgvx4aEx2aKC2R iib0WSPBhLVur+WSxAQqWvNu8fdLsW6QnxBTEGuPQ3hIghuOUHR92W06l/89Mvoa VYsq3ztVrMVx7waGC9Zrlc8WWV+DgpGoPd3tkXBbzskWCt5STwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3l6XtHVHGUyDglO1B4T67K+nS/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTU1NjhlNjYtNTZiYy0z ZmRjLTg2NTktODEwNjExYWUyNTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwvpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVltqtmGs9MG6NFyOQyvd4a5+rDStGyZaBQWR1/8H6vZcm95Wrf8G89 5M3sefI0BojvT8et5yxwgNevmO2Q8YFjriVeY0Mtc9gyuFmvZxqcr0oQ3P5DTT39 X9R1QDUlczIdu3YzYjUlLWPDTPom2F4Km3nKlhUpFBGEpeEPmq3Qls6ZbAnlY2AS XVKDxhUEbtevLlKg5D+pirWPZou3TwdhxGb3Ih/Ez8G8s5BiW/smT1jK4BNk+5wy aZAOlaitT6YFgVE8doaJ+tdpw7eNVCxGtg9dGyZ0EB+hCz/fo8en7gwOhW6/LX8i Xokx1SanS/4X9EGFVP4jcqBxawzL3Gc= -----END CERTIFICATE-----Generated at Sat Aug 23 16:19:02 2025 by rpki-client