$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9421a8f-63af-31f2-b9b2-c9ac1b0b5c33.roa File: b9421a8f-63af-31f2-b9b2-c9ac1b0b5c33.roa (raw, json) Hash identifier: PLaxzo/z8GHEEA+RbrpKZnDWGx9ZglMDlS7vosixuBg= Subject key identifier: 3B:1E:BA:BB:89:0C:6B:57:8C:29:42:0F:7A:A8:6F:67:9B:BB:E7:D9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ADECBC807472D92B360590A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9421a8f-63af-31f2-b9b2-c9ac1b0b5c33.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.72.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:c8:07:47:2d:92:b3:60:59:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=ab86351a-2409-4ac1-aeb5-addc487bc471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:59:e6:38:ed:7d:5f:37:1d:c0:cd:c5:04:70: 54:0b:b2:b8:36:19:a6:1d:b9:5d:0c:9d:91:d1:e9: dc:37:c3:b3:8f:a5:a6:33:96:6a:1a:f6:39:4b:b0: 9e:6a:d5:ee:ff:50:24:8a:5a:c9:1d:8f:9c:33:63: 2c:ae:f4:56:7b:0e:79:c3:56:a1:a6:20:43:db:f2: 75:92:e3:e1:01:d3:6a:6a:43:08:c8:b9:ba:8e:18: 42:f5:13:ad:bf:27:ca:3d:2b:bd:9a:7e:a0:ea:f2: a2:d6:12:eb:ee:8b:5c:41:dd:c1:ab:f1:cb:8f:6f: 36:62:86:37:cb:ed:15:21:5c:a3:53:c4:5a:c3:cd: cb:01:9c:e4:28:ba:f8:9a:ac:cb:ba:f6:c1:d0:da: 67:58:0a:ea:10:1a:01:d7:36:53:79:0c:d1:11:1b: 72:cf:06:ac:48:d2:31:a6:6a:a4:b6:bf:23:38:1e: e8:1a:27:e1:00:cc:7c:75:c9:88:be:f3:c7:65:f1: 87:51:6c:24:f8:3b:9b:81:97:ad:73:c3:09:2b:05: 49:a4:20:94:1c:4e:24:da:21:27:15:bc:37:ae:20: 77:8a:85:31:78:5b:ce:ed:99:16:73:7d:a8:6a:e9: b3:6b:1d:dc:9a:1a:95:24:9a:07:74:a9:48:53:91: 3c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1E:BA:BB:89:0C:6B:57:8C:29:42:0F:7A:A8:6F:67:9B:BB:E7:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9421a8f-63af-31f2-b9b2-c9ac1b0b5c33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.72.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:75:e5:bb:f4:b8:89:34:e2:eb:0e:98:90:c1:0f:47:58:6d: 4d:80:0f:99:a4:35:6c:cb:34:71:13:05:12:3b:7b:85:45:34: 3d:d2:30:d5:e7:52:20:db:90:d9:3b:35:5c:6a:0b:97:e1:e7: e1:a4:36:fe:e3:7c:73:f6:22:14:4f:d5:a9:50:2f:b9:05:bb: 40:33:7c:a7:d5:cd:6d:59:d0:a1:17:da:2f:5c:4b:08:14:fb: de:e4:91:f2:e0:f2:f5:2b:77:e3:5b:b1:1b:40:b1:df:9b:09: 09:1e:06:10:4f:9b:9b:a0:97:e1:e5:fc:7f:d8:f3:a2:1b:e7: 38:43:3a:88:6a:79:c8:16:d0:bc:b5:cf:2d:74:46:4b:98:e9: f8:f2:e2:69:fe:ed:ac:4e:d1:66:99:6e:71:27:b0:94:83:c0: 53:6e:0c:34:de:6d:85:52:65:d7:19:73:df:aa:8f:8d:e3:0e: 27:12:b0:89:43:15:82:c5:06:62:19:9c:09:c5:f9:d4:8f:f6: c7:8f:61:b7:d7:20:c4:3e:8c:de:5c:14:75:20:8f:18:ff:d3: 86:fc:ed:22:d9:29:6c:2b:91:8c:25:ad:17:4f:cf:84:75:7f: f2:20:fe:5f:3b:2e:6a:61:e7:cd:4a:94:2a:61:48:23:2f:f3: a0:b5:46:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey8gHRy2Ss2BZCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk YWI4NjM1MWEtMjQwOS00YWMxLWFlYjUtYWRkYzQ4N2JjNDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1nmOO19XzcdwM3FBHBUC7K4NhmmHbldDJ2R 0encN8Ozj6WmM5ZqGvY5S7CeatXu/1AkilrJHY+cM2MsrvRWew55w1ahpiBD2/J1 kuPhAdNqakMIyLm6jhhC9ROtvyfKPSu9mn6g6vKi1hLr7otcQd3Bq/HLj282YoY3 y+0VIVyjU8Raw83LAZzkKLr4mqzLuvbB0NpnWArqEBoB1zZTeQzRERtyzwasSNIx pmqktr8jOB7oGifhAMx8dcmIvvPHZfGHUWwk+DubgZetc8MJKwVJpCCUHE4k2iEn Fbw3riB3ioUxeFvO7ZkWc32oaumzax3cmhqVJJoHdKlIU5E8uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDseuruJDGtXjClCD3qob2ebu+fZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjk0MjFhOGYtNjNhZi0z MWYyLWI5YjItYzlhYzFiMGI1YzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0j9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHd15bv0uIk04usOmJDBD0dYbU2AD5mkNWzLNHETBRI7e4VFND3SMNXn UiDbkNk7NVxqC5fh5+GkNv7jfHP2IhRP1alQL7kFu0AzfKfVzW1Z0KEX2i9cSwgU +97kkfLg8vUrd+NbsRtAsd+bCQkeBhBPm5ugl+Hl/H/Y86Ib5zhDOohqecgW0Ly1 zy10RkuY6fjy4mn+7axO0WaZbnEnsJSDwFNuDDTebYVSZdcZc9+qj43jDicSsIlD FYLFBmIZnAnF+dSP9sePYbfXIMQ+jN5cFHUgjxj/04b87SLZKWwrkYwlrRdPz4R1 f/Ig/l87Lmph581KlCphSCMv86C1RqU= -----END CERTIFICATE-----Generated at Sat Aug 23 15:03:32 2025 by rpki-client