$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2828014-bcc2-3906-94bc-9c4be80c7e6d.roa File: b2828014-bcc2-3906-94bc-9c4be80c7e6d.roa (raw, json) Hash identifier: LQRX+rTWp+UzRdPSd196giQOYhUcJbGao6yEpsjEmdM= Subject key identifier: C2:E0:2A:C0:02:66:2D:96:48:A2:12:00:4C:B1:05:CC:64:C0:15:02 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AD66B9BAE7297734A93359F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2828014-bcc2-3906-94bc-9c4be80c7e6d.roa Signing time: Wed 13 Aug 2025 01:00:32 +0000 ROA not before: Wed 13 Aug 2025 01:00:32 +0000 ROA not after: Tue 11 Nov 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.3.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d6:6b:9b:ae:72:97:73:4a:93:35:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 13 01:00:32 2025 GMT Not After : Nov 11 02:00:32 2025 GMT Subject: CN=8dc1bfb4-7c4a-4b57-882c-eb97c34f9021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b6:79:c7:5c:03:04:88:d9:ab:e1:fb:f1:df: 6e:bd:2c:5a:72:2c:5e:75:bf:bf:52:a6:d3:ae:05: 41:6b:27:f2:70:66:e3:51:7f:cc:fa:a7:b2:02:47: 4c:71:b8:9b:9c:72:44:e0:0d:f8:64:b8:e0:c5:ea: 31:a0:3d:04:7b:16:6e:f3:f2:4d:8b:ae:3b:8a:7a: 68:62:01:07:15:a0:8d:d0:4b:cf:5b:c5:58:79:7e: ed:11:c0:2d:bd:83:53:b7:26:ed:59:9c:6f:b8:e7: ec:fc:08:0e:5f:29:61:1a:fc:4e:de:1c:ac:67:ad: 6e:5d:e5:21:f6:f9:72:f3:97:8c:7f:c3:cd:b3:b6: ad:80:7a:7c:f2:ab:ef:a9:09:58:79:08:20:cd:4f: af:7b:0e:58:d3:b8:75:a4:29:b1:fb:7c:32:66:61: c1:f2:7e:90:5f:7a:9d:84:11:4f:4a:2f:a0:00:dc: 39:66:bd:3b:4d:f8:fd:bd:1a:01:87:1d:68:ab:0e: b7:1f:0d:48:e5:6e:94:f8:14:fb:20:51:29:32:cc: 54:81:2d:0c:d0:43:d8:2d:ef:e9:32:34:f2:7d:a9: 09:59:07:27:5e:86:5c:df:b8:6b:32:d7:86:40:c6: d5:3c:09:d6:41:75:fb:bf:cd:16:23:86:96:ce:30: e3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E0:2A:C0:02:66:2D:96:48:A2:12:00:4C:B1:05:CC:64:C0:15:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2828014-bcc2-3906-94bc-9c4be80c7e6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:d8:0b:f9:9f:91:c0:70:a4:a5:55:7b:03:47:88:60:b4:f6: 75:37:ad:aa:bf:46:4c:46:58:2e:68:1b:ea:7a:77:ea:65:59: f8:c1:87:b3:33:61:9e:3d:f8:e5:4b:21:6d:8a:da:b4:46:da: 82:75:e6:78:c0:5d:09:85:c8:4c:67:62:d4:87:4c:4b:ee:d3: c9:7a:a2:25:61:6e:2d:30:ed:3a:40:f7:c0:5f:ba:08:2b:32: 96:ff:fc:6a:87:a4:f9:10:e4:62:58:92:f3:d2:af:11:71:14: 64:48:ab:d0:bb:5b:19:d8:75:17:be:99:39:dd:c0:24:33:21: b2:98:1e:4d:e8:f8:21:f4:dc:44:8b:21:4e:bf:8a:67:c9:37: f9:f3:8e:12:a1:0a:ed:a0:88:99:ae:58:33:37:ce:0a:72:ea: 88:15:4f:f5:fb:95:cf:eb:e2:06:10:44:f1:d0:f8:a2:91:d9: 51:bb:aa:5a:3c:c2:8e:9f:e7:97:33:ce:8c:69:b4:6e:c8:50: db:5f:08:52:4c:92:fc:04:56:c0:64:55:7d:4b:ae:25:47:c8: f2:fa:8d:cc:0d:ce:08:60:53:cc:cb:77:f0:ca:ee:85:cb:7b: 91:88:dd:68:00:d0:69:1b:68:11:bc:a4:95:12:22:5e:0b:13: fc:ce:86:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErWa5uucpdzSpM1n4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxMzAxMDAzMloXDTI1MTExMTAyMDAzMlowLzEtMCsGA1UEAxMk OGRjMWJmYjQtN2M0YS00YjU3LTg4MmMtZWI5N2MzNGY5MDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrZ5x1wDBIjZq+H78d9uvSxacixedb+/UqbT rgVBayfycGbjUX/M+qeyAkdMcbibnHJE4A34ZLjgxeoxoD0EexZu8/JNi647inpo YgEHFaCN0EvPW8VYeX7tEcAtvYNTtybtWZxvuOfs/AgOXylhGvxO3hysZ61uXeUh 9vly85eMf8PNs7atgHp88qvvqQlYeQggzU+vew5Y07h1pCmx+3wyZmHB8n6QX3qd hBFPSi+gANw5Zr07Tfj9vRoBhx1oqw63Hw1I5W6U+BT7IFEpMsxUgS0M0EPYLe/p MjTyfakJWQcnXoZc37hrMteGQMbVPAnWQXX7v80WI4aWzjDj7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLgKsACZi2WSKISAEyxBcxkwBUCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjI4MjgwMTQtYmNjMi0z OTA2LTk0YmMtOWM0YmU4MGM3ZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwMMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/YC/mfkcBwpKVVewNHiGC09nU3raq/RkxGWC5oG+p6d+plWfjBh7Mz YZ49+OVLIW2K2rRG2oJ15njAXQmFyExnYtSHTEvu08l6oiVhbi0w7TpA98Bfuggr Mpb//GqHpPkQ5GJYkvPSrxFxFGRIq9C7WxnYdRe+mTndwCQzIbKYHk3o+CH03ESL IU6/imfJN/nzjhKhCu2giJmuWDM3zgpy6ogVT/X7lc/r4gYQRPHQ+KKR2VG7qlo8 wo6f55czzoxptG7IUNtfCFJMkvwEVsBkVX1LriVHyPL6jcwNzghgU8zLd/DK7oXL e5GI3WgA0GkbaBG8pJUSIl4LE/zOhuI= -----END CERTIFICATE-----Generated at Sat Aug 23 13:05:54 2025 by rpki-client