$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf9a01c4-df8e-3ac4-aee6-c476a8e0f71e.roa File: bf9a01c4-df8e-3ac4-aee6-c476a8e0f71e.roa (raw, json) Hash identifier: yv+PKzNZ1H9DIhIyQiJnwrHcRKR+fBYUwweYTnUaMao= Subject key identifier: 79:5C:D9:11:C9:14:DF:B0:20:37:18:DC:17:29:ED:9B:3C:6A:20:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AD3A11F979D61A3C20E876780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf9a01c4-df8e-3ac4-aee6-c476a8e0f71e.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.64.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:1f:97:9d:61:a3:c2:0e:87:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=91bef3d8-9569-4d3e-b688-ef588c1ebd3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0b:83:e6:d6:18:2a:7a:e7:a9:4c:90:15:3c: a1:8d:51:d9:f7:8c:3d:17:0e:0a:4f:06:b0:8c:22: 4e:03:18:1f:b8:fd:21:e7:13:c6:15:c3:f4:41:58: fd:6e:c5:52:3c:18:6a:1d:73:49:a6:4a:75:94:a6: 5f:d2:04:de:18:da:00:8c:25:1c:71:b4:21:80:4d: 73:f4:8a:b8:ff:54:e8:e0:04:81:45:37:0d:d6:e4: ba:a5:83:89:27:4d:7a:5e:1e:d7:d2:07:68:7d:20: 96:c4:f3:a6:c7:cf:2e:fd:5d:b1:de:f3:60:23:51: 8b:85:9c:7f:41:a5:e5:9f:d2:66:2b:bc:4f:cb:f1: 97:c2:cf:87:ea:35:d7:00:40:99:b1:da:a7:95:a5: 3f:0d:00:92:31:29:9b:b0:cb:25:3c:d3:3d:d2:45: 47:0e:3d:2c:8c:07:a8:8f:c4:14:e6:8d:6b:12:7a: f8:97:45:3a:51:9b:a8:34:b7:4a:3b:08:03:0d:4e: f2:42:f3:eb:22:15:89:aa:bb:f5:10:39:c5:30:bd: 70:37:fa:f7:cc:7e:d1:b5:ec:f8:52:8a:26:31:8d: 61:f2:12:c1:b6:c3:ab:c4:1c:39:d1:48:20:e1:0d: 17:9b:da:c9:f9:53:50:1a:33:bb:68:e4:51:e4:ca: a3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5C:D9:11:C9:14:DF:B0:20:37:18:DC:17:29:ED:9B:3C:6A:20:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf9a01c4-df8e-3ac4-aee6-c476a8e0f71e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.64.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:6e:79:de:fc:a7:cb:31:12:ee:ab:99:41:d3:5e:c5:76:f3: 93:69:8e:5d:a2:82:cf:e7:8c:f1:cc:66:db:ca:d9:ed:26:2b: 46:c4:6e:1a:58:9c:be:da:4e:c1:e9:94:2b:91:79:56:f1:8c: 9b:d9:96:68:91:3b:8e:c3:e0:75:9b:bf:b7:27:c5:3a:c7:c1: f0:a2:4a:ef:30:25:0b:67:40:41:1a:f9:c3:49:92:a8:d1:7c: cf:62:8c:8b:8e:fa:63:fa:09:ba:1e:e2:43:d6:d4:bf:61:bf: b9:0e:eb:a2:a7:47:1a:31:0e:2b:33:0c:ea:e1:db:41:59:f0: 25:3c:a0:8e:a0:01:90:7e:fc:0b:cc:2d:e5:04:26:c0:71:4f: 2d:00:82:0e:64:1c:dd:19:b4:55:0e:a6:86:b6:44:73:90:65: f8:8c:6f:95:61:5b:1f:e2:24:42:57:6a:7e:2f:f7:ea:ad:5b: b0:12:b2:96:1f:f7:06:00:ae:dd:33:79:ce:76:59:d5:18:6a: 54:8b:bd:14:08:b0:4c:72:9e:58:fc:09:be:65:c2:f8:1a:c4: d2:7e:85:f5:42:13:af:6f:65:3c:06:a1:2e:4a:70:46:f0:f5: 49:2a:1d:7d:2c:f9:58:a0:8c:94:9c:75:b2:d0:b8:e5:bc:14: a4:65:1c:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToR+XnWGjwg6HZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk OTFiZWYzZDgtOTU2OS00ZDNlLWI2ODgtZWY1ODhjMWViZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAuD5tYYKnrnqUyQFTyhjVHZ94w9Fw4KTwaw jCJOAxgfuP0h5xPGFcP0QVj9bsVSPBhqHXNJpkp1lKZf0gTeGNoAjCUccbQhgE1z 9Iq4/1To4ASBRTcN1uS6pYOJJ016Xh7X0gdofSCWxPOmx88u/V2x3vNgI1GLhZx/ QaXln9JmK7xPy/GXws+H6jXXAECZsdqnlaU/DQCSMSmbsMslPNM90kVHDj0sjAeo j8QU5o1rEnr4l0U6UZuoNLdKOwgDDU7yQvPrIhWJqrv1EDnFML1wN/r3zH7Rtez4 UoomMY1h8hLBtsOrxBw50Ugg4Q0Xm9rJ+VNQGjO7aORR5MqjmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlc2RHJFN+wIDcY3Bcp7Zs8aiARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmY5YTAxYzQtZGY4ZS0z YWM0LWFlZTYtYzQ3NmE4ZTBmNzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0B6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANued78p8sxEu6rmUHTXsV285Npjl2igs/njPHMZtvK2e0mK0bEbhpY nL7aTsHplCuReVbxjJvZlmiRO47D4HWbv7cnxTrHwfCiSu8wJQtnQEEa+cNJkqjR fM9ijIuO+mP6Cboe4kPW1L9hv7kO66KnRxoxDiszDOrh20FZ8CU8oI6gAZB+/AvM LeUEJsBxTy0Agg5kHN0ZtFUOpoa2RHOQZfiMb5VhWx/iJEJXan4v9+qtW7ASspYf 9wYArt0zec52WdUYalSLvRQIsExynlj8Cb5lwvgaxNJ+hfVCE69vZTwGoS5KcEbw 9UkqHX0s+VigjJScdbLQuOW8FKRlHK8= -----END CERTIFICATE-----Generated at Sat Aug 23 14:42:00 2025 by rpki-client