$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b84dcbd0-45de-3518-b9be-14855a3a2f9a.roa File: b84dcbd0-45de-3518-b9be-14855a3a2f9a.roa (raw, json) Hash identifier: vs2uZZxHGhUWCz2VpbBEZRGhWNwzqZwqgY5mf0HRUhw= Subject key identifier: 9E:BE:80:BB:9E:0E:1E:4B:58:84:C2:D0:C5:12:C5:94:01:C9:25:04 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE4612F3B588370E9C9AFB300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b84dcbd0-45de-3518-b9be-14855a3a2f9a.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.4.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:2f:3b:58:83:70:e9:c9:af:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=c5ace930-9123-4df6-989e-cbe4344f0aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:97:ea:9e:63:26:10:33:6f:75:cc:89:ff:98: 7c:65:33:09:5a:99:87:f0:2f:4d:54:5d:db:1d:43: a1:0e:3c:dc:e1:9f:63:d1:1f:a4:15:ea:5d:98:13: 1c:7a:65:5c:4b:09:75:0c:d0:df:b6:90:dd:de:31: 41:d0:15:20:68:1e:fa:ba:f9:88:02:bf:06:d9:16: 31:bb:29:56:4b:1d:87:b0:55:09:2f:b5:6a:d0:ed: 1d:29:98:72:7a:d2:ee:15:13:23:36:ba:d6:aa:48: d9:59:c9:2d:3f:a1:cd:87:f5:8a:31:90:0b:8a:7d: c3:c6:a0:16:64:c9:ab:a1:2e:a2:58:a0:50:c2:b9: 74:d4:97:86:e0:2b:7e:a0:a3:95:d0:94:4d:54:0e: 3f:1e:7e:0c:1d:be:ea:ab:6c:ce:79:63:46:3c:8c: fb:78:3c:ab:fe:18:37:db:76:70:e9:b9:db:c7:4b: 47:75:1e:f4:c3:bc:34:c8:d4:9d:0c:91:15:7d:4c: c8:1f:7a:ce:90:36:91:3e:98:2c:2a:15:2c:e6:3b: f7:ad:2f:ec:66:15:17:69:95:18:e2:9e:e9:fb:51: 70:d0:8a:47:a7:4e:49:36:21:a2:32:ef:0d:3c:ee: 1c:22:1b:48:9a:95:47:cc:13:53:a8:dc:78:08:fd: 89:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BE:80:BB:9E:0E:1E:4B:58:84:C2:D0:C5:12:C5:94:01:C9:25:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b84dcbd0-45de-3518-b9be-14855a3a2f9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.4.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:30:c0:98:8d:d7:e0:7a:fc:f6:0c:c3:58:d5:21:ff:12:5d: 4b:08:6a:d2:58:d3:e5:52:95:96:47:7c:5e:84:2b:91:19:ae: ef:19:63:bf:ac:f5:ec:68:f5:3b:19:e4:77:7b:ce:bd:29:b4: 02:85:66:b8:ea:4a:6a:cc:16:99:c1:72:44:30:84:b9:22:dd: c5:72:c2:bc:c6:b7:b8:ac:9d:4b:54:5a:00:81:ff:5f:5d:5c: 70:49:1d:e4:ec:cf:0f:c5:69:52:92:f6:e4:63:c7:f2:05:0d: f5:32:d4:69:5a:91:de:c7:1d:ef:61:5f:51:b0:ba:70:4b:91: a0:3b:c2:7e:52:7e:b8:8b:ca:08:72:f0:79:7a:05:33:aa:60: f7:e1:30:1a:7b:02:f3:a1:f2:a3:0d:d5:ce:54:46:ff:23:21: d4:bf:18:e4:d5:10:c2:f2:97:d4:89:32:39:a7:13:46:b2:c0: 98:8b:75:07:26:6f:f9:1d:2f:bc:6e:e9:97:a8:4f:2f:95:51: 82:96:92:f5:dc:e0:48:37:ca:d5:52:dc:e9:0f:84:10:21:ea: 40:bb:66:3c:08:dd:3c:45:b4:76:13:9f:09:c2:13:f3:3d:78: 1e:0b:69:15:28:34:d3:01:e9:18:5b:4e:c7:38:89:77:af:e3: a7:77:ec:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYS87WINw6cmvswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk YzVhY2U5MzAtOTEyMy00ZGY2LTk4OWUtY2JlNDM0NGYwYWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJfqnmMmEDNvdcyJ/5h8ZTMJWpmH8C9NVF3b HUOhDjzc4Z9j0R+kFepdmBMcemVcSwl1DNDftpDd3jFB0BUgaB76uvmIAr8G2RYx uylWSx2HsFUJL7Vq0O0dKZhyetLuFRMjNrrWqkjZWcktP6HNh/WKMZALin3DxqAW ZMmroS6iWKBQwrl01JeG4Ct+oKOV0JRNVA4/Hn4MHb7qq2zOeWNGPIz7eDyr/hg3 23Zw6bnbx0tHdR70w7w0yNSdDJEVfUzIH3rOkDaRPpgsKhUs5jv3rS/sZhUXaZUY 4p7p+1Fw0IpHp05JNiGiMu8NPO4cIhtImpVHzBNTqNx4CP2JJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6+gLueDh5LWITC0MUSxZQBySUEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjg0ZGNiZDAtNDVkZS0z NTE4LWI5YmUtMTQ4NTVhM2EyZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUwwJiN1+B6/PYMw1jVIf8SXUsIatJY0+VSlZZHfF6EK5EZru8ZY7+s 9exo9TsZ5Hd7zr0ptAKFZrjqSmrMFpnBckQwhLki3cVywrzGt7isnUtUWgCB/19d XHBJHeTszw/FaVKS9uRjx/IFDfUy1Glakd7HHe9hX1GwunBLkaA7wn5SfriLyghy 8Hl6BTOqYPfhMBp7AvOh8qMN1c5URv8jIdS/GOTVEMLyl9SJMjmnE0aywJiLdQcm b/kdL7xu6ZeoTy+VUYKWkvXc4Eg3ytVS3OkPhBAh6kC7ZjwI3TxFtHYTnwnCE/M9 eB4LaRUoNNMB6RhbTsc4iXev46d37KA= -----END CERTIFICATE-----Generated at Sat Aug 23 14:59:26 2025 by rpki-client