$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9965c21a-d3d0-33de-969e-e44b520ca86a.roa File: 9965c21a-d3d0-33de-969e-e44b520ca86a.roa (raw, json) Hash identifier: 3yrInuyzrE56Bc92wLB+uyZI2MfW+J1v34GbOBP34MM= Subject key identifier: CA:BF:0F:A7:65:08:4A:1F:2A:1B:DF:6C:4F:F1:EA:A0:79:CE:EA:E7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC0163EF1B5B5A058C31B7A40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9965c21a-d3d0-33de-969e-e44b520ca86a.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 9299 IP address blocks: 23.44.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:3e:f1:b5:b5:a0:58:c3:1b:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=5b9581a8-b06e-44c9-9df2-979a5cbbce56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1b:5b:8d:b1:cd:bd:2a:fb:89:07:2a:9a:99: 01:29:12:e3:13:08:a0:0a:df:89:36:e8:cb:08:47: 4c:59:f3:9b:d1:00:4c:35:bf:0f:6e:be:61:29:d0: 49:9d:c9:df:94:88:ab:86:f8:16:27:ba:c1:0b:d3: c9:f8:28:d0:ee:2d:14:6d:60:4e:87:44:aa:30:26: 67:d4:bb:46:4c:b7:06:09:62:cc:4e:ba:07:8f:50: 40:56:f3:b6:1e:36:85:37:16:87:a4:e7:cd:84:57: bb:6f:64:61:bd:a3:65:19:fa:10:00:46:a1:93:0f: 6a:e7:a7:0b:82:ea:16:0d:99:a4:07:ea:a8:b1:3a: f0:b9:67:1a:c4:78:ba:93:8f:ba:43:03:9e:be:9d: f9:0e:6d:a1:0a:ec:c7:53:3e:26:ac:e4:00:fc:3d: b6:f0:55:2a:e8:ef:3d:17:24:8b:28:12:e1:4b:26: ed:8a:6e:cf:99:1a:a7:72:ce:7a:ab:2e:6e:bc:f4: cf:73:11:db:6b:12:5c:a2:35:4b:33:e4:62:86:63: e7:4e:b5:73:8b:6e:b4:0e:d6:9a:a0:a1:66:69:21: fa:65:c4:9f:11:21:53:1f:e2:bc:01:e8:a8:e4:2b: c5:16:e0:52:ff:ea:c5:24:1f:dc:2d:de:1a:34:53: a3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BF:0F:A7:65:08:4A:1F:2A:1B:DF:6C:4F:F1:EA:A0:79:CE:EA:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9965c21a-d3d0-33de-969e-e44b520ca86a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:54:ad:ff:fb:36:06:34:64:d5:74:10:00:bd:33:47:f4:85: 00:f4:fb:01:be:67:1e:ff:2b:3c:cf:ca:d6:9c:5e:9c:f8:40: 35:29:34:58:72:fb:5c:3e:b0:f7:75:c4:7c:28:4b:24:13:9d: 6a:83:b9:8a:41:d3:61:7f:ff:78:d8:2e:c3:a2:3e:c7:6d:74: fe:14:c0:4b:93:86:95:ec:4f:5b:4d:d9:51:1a:3c:f0:c5:da: 88:dd:64:da:2e:32:ff:52:59:e2:f0:13:b4:51:79:7b:31:1e: c6:b5:6d:34:71:8a:7e:89:cb:47:7f:11:73:d1:b3:bc:e4:d3: 80:89:13:58:52:9f:f8:12:65:6a:d6:25:53:f8:ac:e3:43:76: b0:06:6c:69:50:66:9d:78:6a:d6:c9:a2:2d:4f:4d:7c:1c:65: 24:26:e1:f3:f3:61:3e:fb:3b:fe:be:74:a5:5a:d4:7c:54:b0: 56:6c:7d:89:68:5f:5b:0c:b8:46:5c:58:e2:73:9e:ee:14:9b: 28:3f:8a:49:36:2f:ee:67:bd:fc:44:b3:1b:c0:36:0d:54:f0: c3:64:61:02:92:74:80:43:7a:6f:87:ad:a8:88:fb:a9:77:57: 1e:e7:cb:af:9e:d8:f6:8c:e1:8d:d9:82:bf:57:28:27:60:ff: 57:45:50:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFj7xtbWgWMMbekAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk NWI5NTgxYTgtYjA2ZS00NGM5LTlkZjItOTc5YTVjYmJjZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBtbjbHNvSr7iQcqmpkBKRLjEwigCt+JNujL CEdMWfOb0QBMNb8Pbr5hKdBJncnflIirhvgWJ7rBC9PJ+CjQ7i0UbWBOh0SqMCZn 1LtGTLcGCWLMTroHj1BAVvO2HjaFNxaHpOfNhFe7b2RhvaNlGfoQAEahkw9q56cL guoWDZmkB+qosTrwuWcaxHi6k4+6QwOevp35Dm2hCuzHUz4mrOQA/D228FUq6O89 FySLKBLhSybtim7PmRqncs56qy5uvPTPcxHbaxJcojVLM+RihmPnTrVzi260Dtaa oKFmaSH6ZcSfESFTH+K8Aeio5CvFFuBS/+rFJB/cLd4aNFOjdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMq/D6dlCEofKhvfbE/x6qB5zurnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTk2NWMyMWEtZDNkMC0z M2RlLTk2OWUtZTQ0YjUyMGNhODZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFUrf/7NgY0ZNV0EAC9M0f0hQD0+wG+Zx7/KzzPytacXpz4QDUpNFhy +1w+sPd1xHwoSyQTnWqDuYpB02F//3jYLsOiPsdtdP4UwEuThpXsT1tN2VEaPPDF 2ojdZNouMv9SWeLwE7RReXsxHsa1bTRxin6Jy0d/EXPRs7zk04CJE1hSn/gSZWrW JVP4rONDdrAGbGlQZp14atbJoi1PTXwcZSQm4fPzYT77O/6+dKVa1HxUsFZsfYlo X1sMuEZcWOJznu4Umyg/ikk2L+5nvfxEsxvANg1U8MNkYQKSdIBDem+HraiI+6l3 Vx7ny6+e2PaM4Y3Zgr9XKCdg/1dFUGw= -----END CERTIFICATE-----Generated at Sat Aug 23 16:56:54 2025 by rpki-client