$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a88d7f06-3ff5-3495-8bb7-5e329ed81d48.roa File: a88d7f06-3ff5-3495-8bb7-5e329ed81d48.roa (raw, json) Hash identifier: IMo55KcsjvrSz9Lhz6pDAESnutMCOlprnRbbEzcKTr4= Subject key identifier: D3:D3:4F:46:C2:7E:6F:65:DC:41:CA:AC:0C:60:12:BD:D3:83:BA:F8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC5AB8518A9795D4B19678400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a88d7f06-3ff5-3495-8bb7-5e329ed81d48.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 24319 IP address blocks: 23.67.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:85:18:a9:79:5d:4b:19:67:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=cd7329f9-c747-4a3e-810a-831ddb85dd1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:10:80:c6:f3:02:27:34:94:69:c2:3d:2c:8c: 39:65:40:b9:e7:3e:d2:23:26:ef:90:7b:cf:55:4e: 3e:c8:5e:2c:5c:9b:6c:75:6a:00:3a:bf:0a:1d:d1: db:97:a2:80:6c:ed:2d:0e:09:e1:de:02:95:5f:39: 55:96:0e:a4:af:c9:8d:37:4a:44:03:f1:ec:64:f1: e5:94:46:41:3e:f4:ee:ec:6d:ca:a4:6b:05:be:30: 42:38:42:78:aa:c2:08:cd:f0:7a:33:fc:d8:4e:3b: 7b:ae:19:48:e7:91:b1:82:3a:78:c4:7b:37:fe:4d: 36:53:d1:7e:a1:d1:32:f7:62:fd:37:6f:05:9f:81: 2e:36:7e:34:5b:84:44:7f:1c:e1:f7:47:5a:a3:c9: 96:ce:86:ac:23:0b:e6:17:68:dd:8d:63:c4:99:26: 7f:f0:87:39:18:7e:b3:0f:06:a6:1f:06:e4:a2:94: 1a:04:9a:4b:84:48:30:3a:f9:22:a9:62:7d:21:5b: 57:81:91:c5:c4:9b:30:ad:37:fb:90:9b:e8:fe:94: c7:a3:15:54:82:4d:b5:b0:d7:8f:60:f2:49:8d:f9: f4:43:a3:2d:4e:1a:eb:b0:dd:93:05:de:e2:eb:53: c6:c6:b8:ab:68:eb:f4:78:8c:94:e1:82:26:74:0c: 8e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D3:4F:46:C2:7E:6F:65:DC:41:CA:AC:0C:60:12:BD:D3:83:BA:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a88d7f06-3ff5-3495-8bb7-5e329ed81d48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.67.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:07:f0:98:b5:9d:a9:81:93:e7:32:1c:07:32:6f:f3:6f:61: 5b:d9:d0:12:7b:ba:73:f1:e9:70:da:8b:96:58:dd:62:c8:7b: dc:dd:76:9e:6d:96:ba:ae:55:ee:a1:50:21:d9:1c:ff:01:e9: ce:5e:8d:97:9f:a6:29:10:2c:d6:b5:36:94:e8:48:bb:37:e5: d3:f5:9b:5d:80:77:93:85:e6:3d:7c:ad:39:38:89:6c:d2:42: ac:a2:38:cf:e9:83:8f:79:6c:fb:70:1a:d7:ae:73:31:28:40: 6a:e3:fd:2d:58:ef:8a:00:22:00:06:50:17:46:c9:61:c2:e6: 7c:1c:b3:3a:87:fa:69:d7:24:6e:68:ec:e5:fb:fd:ce:68:2b: 71:d9:03:84:7d:ca:a0:a9:37:5f:d3:22:da:05:66:00:35:d7: 17:49:7f:da:ab:66:ad:d0:3d:2e:d4:8a:f3:be:14:3b:e6:c6: 59:ed:42:20:9e:4d:a8:96:cb:23:85:8f:06:bc:cb:79:11:78: f4:b4:47:11:ae:6c:7f:b5:3d:d8:6b:cb:91:9d:0b:90:b5:63: 13:c6:c7:b3:97:79:cb:48:45:86:9b:15:5b:eb:5e:a1:a8:27: 38:46:05:ca:1c:0e:d8:7c:c3:65:4d:e4:41:28:81:71:28:ec: 23:1a:54:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq4UYqXldSxlnhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk Y2Q3MzI5ZjktYzc0Ny00YTNlLTgxMGEtODMxZGRiODVkZDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhCAxvMCJzSUacI9LIw5ZUC55z7SIybvkHvP VU4+yF4sXJtsdWoAOr8KHdHbl6KAbO0tDgnh3gKVXzlVlg6kr8mNN0pEA/HsZPHl lEZBPvTu7G3KpGsFvjBCOEJ4qsIIzfB6M/zYTjt7rhlI55Gxgjp4xHs3/k02U9F+ odEy92L9N28Fn4EuNn40W4REfxzh90dao8mWzoasIwvmF2jdjWPEmSZ/8Ic5GH6z DwamHwbkopQaBJpLhEgwOvkiqWJ9IVtXgZHFxJswrTf7kJvo/pTHoxVUgk21sNeP YPJJjfn0Q6MtThrrsN2TBd7i61PGxriraOv0eIyU4YImdAyORQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPTT0bCfm9l3EHKrAxgEr3Tg7r4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTg4ZDdmMDYtM2ZmNS0z NDk1LThiYjctNWUzMjllZDgxZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0MtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgH8Ji1namBk+cyHAcyb/NvYVvZ0BJ7unPx6XDai5ZY3WLIe9zddp5t lrquVe6hUCHZHP8B6c5ejZefpikQLNa1NpToSLs35dP1m12Ad5OF5j18rTk4iWzS QqyiOM/pg495bPtwGteuczEoQGrj/S1Y74oAIgAGUBdGyWHC5nwcszqH+mnXJG5o 7OX7/c5oK3HZA4R9yqCpN1/TItoFZgA11xdJf9qrZq3QPS7UivO+FDvmxlntQiCe TaiWyyOFjwa8y3kRePS0RxGubH+1Pdhry5GdC5C1YxPGx7OXectIRYabFVvrXqGo JzhGBcocDth8w2VN5EEogXEo7CMaVAI= -----END CERTIFICATE-----Generated at Sat Aug 23 19:50:20 2025 by rpki-client