$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0208cde-2a96-36bf-8e1e-b383de847a81.roa File: a0208cde-2a96-36bf-8e1e-b383de847a81.roa (raw, json) Hash identifier: FOyLps3l/+bjnDa6b0gnjm6MGtVsIwwcU5dd4oPD3nE= Subject key identifier: 56:49:31:0C:02:D3:0C:B0:9E:50:32:F6:13:DE:D9:C9:97:67:82:38 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE461428F13D4B08DF84D83E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0208cde-2a96-36bf-8e1e-b383de847a81.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.10.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:42:8f:13:d4:b0:8d:f8:4d:83:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=1707c21f-9964-43a0-8fab-8425752a717e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:20:ff:8a:98:2a:72:3a:6c:5f:9a:25:f6:bc: 85:85:c6:e9:dc:d3:bb:f1:aa:42:2c:6d:f3:1b:5f: d2:4a:20:e8:9d:45:e2:17:f4:60:51:6f:57:9f:df: 77:89:6c:6a:13:38:ca:f4:75:95:30:e8:dd:b6:88: be:de:3e:90:86:b0:a4:03:66:b4:25:16:ea:46:79: 41:e9:df:3c:2f:37:e6:89:82:54:2f:87:dc:24:ad: 49:15:5d:fd:26:c4:de:7d:15:58:a1:6a:f2:a0:b3: 8d:ef:7b:f2:81:ec:ae:84:ed:65:91:0f:e0:fa:f2: e2:cc:55:5d:66:df:5e:1b:09:da:45:fc:09:55:60: 85:54:ed:13:6e:12:b3:49:c0:94:c1:32:2b:ec:55: 31:67:2e:f2:bc:9d:52:77:bd:cb:c7:59:31:ca:6c: 68:51:5c:1d:07:0a:32:da:bf:e4:9a:11:ae:da:fc: 4d:c8:e5:38:74:14:af:a7:ec:7d:aa:65:f3:33:77: c5:ff:c7:73:7c:aa:9c:c3:e0:3b:9e:c5:1b:75:a3: 83:27:a4:bc:1e:63:f1:bc:e4:0c:40:1e:d8:dd:d0: 8a:e9:58:b4:ce:48:89:d2:60:0f:3d:41:55:65:8c: 13:b3:a2:49:4e:f8:ec:b6:03:2f:4f:86:3e:4b:1c: 7a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:49:31:0C:02:D3:0C:B0:9E:50:32:F6:13:DE:D9:C9:97:67:82:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0208cde-2a96-36bf-8e1e-b383de847a81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.10.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ed:7d:86:2d:be:0b:36:91:b2:f0:77:e2:a4:8a:66:da:9a: 1a:18:3d:d4:6d:54:fd:9d:7d:6a:cf:bb:e9:0a:08:22:bb:90: 28:98:b0:ad:a4:7d:82:d0:d4:fb:98:fd:80:37:ca:76:4c:ea: b8:92:dc:cc:28:bc:c7:92:1f:9b:27:06:50:93:c3:f0:b6:4f: ef:d9:a1:12:de:f1:04:84:30:fd:18:db:6a:ee:50:cd:58:7b: 44:10:f2:0f:d1:40:44:8a:39:1e:4e:c3:3c:44:2f:01:10:ec: fd:ed:a1:34:fa:81:35:89:37:21:de:de:d6:1f:35:c1:23:73: 73:c6:99:1b:12:2e:1b:24:5a:90:c1:d8:f0:93:82:35:83:28: 0d:9f:7d:d7:b1:8b:63:2c:4c:fc:f9:c8:12:5d:0c:9b:2e:33: f9:5a:2c:9b:25:f8:d3:15:29:97:55:8a:85:80:66:b9:9a:24: 6b:87:6b:10:60:98:cf:ac:24:6d:13:51:20:63:9f:17:56:57: 83:df:01:70:16:70:90:0e:16:23:df:7d:18:92:b1:ad:64:47: 83:4f:33:8f:1e:b6:61:4f:68:67:bd:3b:cc:8f:4b:2d:fb:a1: 9b:9f:f2:05:65:59:73:81:40:50:68:b5:11:09:ae:59:4f:42: f4:8b:ee:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYUKPE9SwjfhNg+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk MTcwN2MyMWYtOTk2NC00M2EwLThmYWItODQyNTc1MmE3MTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSD/ipgqcjpsX5ol9ryFhcbp3NO78apCLG3z G1/SSiDonUXiF/RgUW9Xn993iWxqEzjK9HWVMOjdtoi+3j6QhrCkA2a0JRbqRnlB 6d88LzfmiYJUL4fcJK1JFV39JsTefRVYoWryoLON73vygeyuhO1lkQ/g+vLizFVd Zt9eGwnaRfwJVWCFVO0TbhKzScCUwTIr7FUxZy7yvJ1Sd73Lx1kxymxoUVwdBwoy 2r/kmhGu2vxNyOU4dBSvp+x9qmXzM3fF/8dzfKqcw+A7nsUbdaODJ6S8HmPxvOQM QB7Y3dCK6Vi0zkiJ0mAPPUFVZYwTs6JJTvjstgMvT4Y+Sxx6VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZJMQwC0wywnlAy9hPe2cmXZ4I4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTAyMDhjZGUtMmE5Ni0z NmJmLThlMWUtYjM4M2RlODQ3YTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPtfYYtvgs2kbLwd+KkimbamhoYPdRtVP2dfWrPu+kKCCK7kCiYsK2k fYLQ1PuY/YA3ynZM6riS3MwovMeSH5snBlCTw/C2T+/ZoRLe8QSEMP0Y22ruUM1Y e0QQ8g/RQESKOR5OwzxELwEQ7P3toTT6gTWJNyHe3tYfNcEjc3PGmRsSLhskWpDB 2PCTgjWDKA2ffdexi2MsTPz5yBJdDJsuM/laLJsl+NMVKZdVioWAZrmaJGuHaxBg mM+sJG0TUSBjnxdWV4PfAXAWcJAOFiPffRiSsa1kR4NPM48etmFPaGe9O8yPSy37 oZuf8gVlWXOBQFBotREJrllPQvSL7hg= -----END CERTIFICATE-----Generated at Sat Aug 23 13:10:45 2025 by rpki-client