$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99040fbd-052b-3815-9f8d-3f48368c2a90.roa File: 99040fbd-052b-3815-9f8d-3f48368c2a90.roa (raw, json) Hash identifier: LbMA/BKBCNPTiFxfl2eHws/MokOuz915GGVBMtYBqs0= Subject key identifier: B3:55:76:D1:1A:B6:9F:80:CB:B8:74:F1:AA:0A:8F:92:5A:8D:D3:8E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE72BB56EAF9CEE14528A1738 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99040fbd-052b-3815-9f8d-3f48368c2a90.roa Signing time: Tue 19 Aug 2025 01:00:32 +0000 ROA not before: Tue 19 Aug 2025 01:00:32 +0000 ROA not after: Mon 17 Nov 2025 02:00:32 +0000 asID: 16625 IP address blocks: 23.1.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e7:2b:b5:6e:af:9c:ee:14:52:8a:17:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 19 01:00:32 2025 GMT Not After : Nov 17 02:00:32 2025 GMT Subject: CN=e16bc1c6-899a-4228-8b17-c4e6a5734cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b7:2b:03:2a:a2:ea:d0:7a:0a:c3:7e:bb:65: 04:a5:dc:99:f1:2b:fd:ea:54:90:3d:cb:26:b4:0b: 52:ef:67:1e:7a:df:7c:08:f7:3f:fb:92:f8:1b:ce: af:61:56:46:98:2a:95:d7:63:c0:b8:a3:c1:9e:44: 90:27:66:7e:32:9f:4f:45:80:6d:9f:bf:14:b7:39: 29:58:c6:e3:35:af:5a:65:63:66:4b:ba:16:4b:ea: 20:e8:9d:a5:2b:24:bf:79:d5:65:de:73:30:b6:dd: 21:54:0b:2c:dc:ec:a0:b9:9e:67:51:02:46:b5:c6: 1e:10:5a:c3:80:26:24:26:15:fb:2c:be:6a:01:dc: fa:99:bc:0f:d8:8d:e6:49:0f:62:57:8f:c6:6d:88: 02:b0:5a:82:24:fb:bf:c6:fb:09:e1:fd:48:da:ff: 21:65:c7:73:cd:e4:53:f0:a1:c5:7d:40:fc:2e:96: 48:04:fa:73:72:ea:8f:c9:7f:86:48:d2:b7:f1:1e: d7:8d:8e:3e:d6:82:83:3b:35:75:be:6e:26:ba:4a: 5b:ac:26:b8:d1:57:a2:9e:b4:5c:d4:de:7a:d0:88: a7:88:77:64:44:26:14:34:ce:90:db:5d:af:24:3a: a2:cb:14:80:de:46:1f:d0:98:7d:cb:72:bf:d9:22: e0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:55:76:D1:1A:B6:9F:80:CB:B8:74:F1:AA:0A:8F:92:5A:8D:D3:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99040fbd-052b-3815-9f8d-3f48368c2a90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:9e:8c:5d:54:3c:ea:f4:11:6f:8b:7f:f0:9d:93:56:65:42: b5:f0:c2:ce:81:af:d1:09:5f:87:5b:94:af:81:2c:07:0b:4b: 69:bc:79:61:54:0b:d8:4c:e6:1d:cf:f3:12:89:a7:c2:b3:1f: 7a:02:7a:87:9a:64:43:62:6e:f3:1d:b2:2b:7f:e6:6f:90:2f: 13:80:af:67:54:a1:64:5e:ed:68:fe:e1:39:be:db:18:9d:37: d3:6f:ff:7b:06:0a:56:cb:b8:5b:56:f7:71:0a:f5:07:31:c7: 42:fc:c9:1c:7f:01:37:18:dc:69:a6:d9:ac:81:cc:64:f9:1d: a7:59:4b:39:8b:56:c3:1b:36:20:4f:4e:9f:8c:4d:4c:47:39: 02:7a:af:dc:80:36:ee:d9:82:53:68:a0:b3:c7:28:2a:ce:28: 25:9c:b5:6e:01:63:72:60:d3:94:33:60:b9:c4:83:76:1b:9d: 49:21:27:38:94:9b:2a:39:ef:7f:28:2a:42:09:5b:19:38:78: a7:fe:d7:06:10:48:3b:4f:7d:96:bf:f2:5f:4a:ef:1a:82:f2: 61:5b:b1:34:ae:93:d8:9b:1c:59:66:36:ea:11:04:b5:54:1e: 95:d2:85:ad:75:57:14:12:8c:40:b4:31:2d:80:a3:98:7f:63: 3f:9a:49:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErnK7Vur5zuFFKKFzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxOTAxMDAzMloXDTI1MTExNzAyMDAzMlowLzEtMCsGA1UEAxMk ZTE2YmMxYzYtODk5YS00MjI4LThiMTctYzRlNmE1NzM0Y2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrcrAyqi6tB6CsN+u2UEpdyZ8Sv96lSQPcsm tAtS72ceet98CPc/+5L4G86vYVZGmCqV12PAuKPBnkSQJ2Z+Mp9PRYBtn78Utzkp WMbjNa9aZWNmS7oWS+og6J2lKyS/edVl3nMwtt0hVAss3OyguZ5nUQJGtcYeEFrD gCYkJhX7LL5qAdz6mbwP2I3mSQ9iV4/GbYgCsFqCJPu/xvsJ4f1I2v8hZcdzzeRT 8KHFfUD8LpZIBPpzcuqPyX+GSNK38R7XjY4+1oKDOzV1vm4mukpbrCa40VeinrRc 1N560IiniHdkRCYUNM6Q212vJDqiyxSA3kYf0Jh9y3K/2SLgoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNVdtEatp+Ay7h08aoKj5JajdOOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTkwNDBmYmQtMDUyYi0z ODE1LTlmOGQtM2Y0ODM2OGMyYTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSejF1UPOr0EW+Lf/Cdk1ZlQrXwws6Br9EJX4dblK+BLAcLS2m8eWFU C9hM5h3P8xKJp8KzH3oCeoeaZENibvMdsit/5m+QLxOAr2dUoWRe7Wj+4Tm+2xid N9Nv/3sGClbLuFtW93EK9Qcxx0L8yRx/ATcY3Gmm2ayBzGT5HadZSzmLVsMbNiBP Tp+MTUxHOQJ6r9yANu7ZglNooLPHKCrOKCWctW4BY3Jg05QzYLnEg3YbnUkhJziU myo5738oKkIJWxk4eKf+1wYQSDtPfZa/8l9K7xqC8mFbsTSuk9ibHFlmNuoRBLVU HpXSha11VxQSjEC0MS2Ao5h/Yz+aSWo= -----END CERTIFICATE-----Generated at Sat Aug 23 17:35:42 2025 by rpki-client