$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd4bc370-06d1-3d53-9355-ee571dbfd2dd.roa File: cd4bc370-06d1-3d53-9355-ee571dbfd2dd.roa (raw, json) Hash identifier: p/3KfzxUMp4Hf3AOFWWOso86brmin+Shn3lOOlyutg0= Subject key identifier: 31:27:6C:09:CD:71:87:FA:65:4F:49:97:80:A5:0E:9B:16:47:0B:9D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ADD6698D810AB43354F1B0900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd4bc370-06d1-3d53-9355-ee571dbfd2dd.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.206.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:98:d8:10:ab:43:35:4f:1b:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=9f01b923-6784-4a31-997e-4813bcbd0c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fe:13:bf:ef:65:12:2a:c4:c9:7b:6a:16:b4: 88:09:6c:7c:1f:95:61:4b:26:62:3e:83:27:ce:cf: 39:7c:34:82:fe:d6:f8:e4:3e:0f:24:28:2d:54:f4: e6:f3:5f:ad:9a:2a:bd:ec:78:18:c8:30:0d:57:77: c7:4e:3c:fb:4f:2b:41:e2:30:2a:3c:8d:ad:f1:24: e4:08:42:9e:c9:99:c8:19:e4:3c:57:dc:95:41:9c: 97:2f:e9:99:46:67:25:ff:6a:d1:04:04:ae:9e:17: 46:ba:b7:86:96:d6:15:45:06:b2:0e:b7:39:10:65: 4b:0b:2f:2f:27:06:f6:c3:1c:93:15:ce:54:82:b2: 6f:4c:c8:27:9e:e8:f1:b6:b6:ad:9e:3a:01:be:bd: 1d:5e:3c:74:a9:8b:cb:8a:16:8a:74:57:aa:66:67: dd:91:c0:da:b0:3b:c1:14:73:2a:bf:78:8e:37:b6: 5b:15:6f:f0:44:9e:ab:2b:e1:dc:1d:62:7f:a4:7c: 6b:67:df:7a:bb:20:41:1a:61:3f:eb:ee:76:1f:02: 53:76:3a:ed:d3:5d:7b:2b:14:c2:a2:22:fb:e1:c3: 9a:08:af:57:f2:ad:e1:53:5d:c4:89:c1:28:8d:e9: 65:30:a0:76:ef:35:cf:b0:d7:81:8e:83:fa:4d:84: d5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:27:6C:09:CD:71:87:FA:65:4F:49:97:80:A5:0E:9B:16:47:0B:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd4bc370-06d1-3d53-9355-ee571dbfd2dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:5f:b5:bb:e4:af:10:8b:02:9d:fe:a4:28:35:4b:e7:c6:18: bd:45:75:7e:0e:05:a5:63:d8:51:ba:d9:54:61:f9:5e:e5:30: f3:72:24:5f:ac:b2:b8:5f:bb:35:57:bc:cd:dc:c3:5a:2e:b9: 4f:36:d1:a9:61:9c:40:79:23:c6:08:2f:f0:4f:0c:56:bd:8c: c3:96:ce:7b:a0:8c:6b:40:2e:1e:33:57:b1:30:85:c8:fa:6e: 66:cd:f9:82:6a:0e:f8:75:0e:c1:19:32:31:42:f9:7c:07:c6: 36:e4:76:fb:e1:5c:cd:d3:ea:7c:4a:11:d9:cb:3e:dc:0b:c6: 9e:73:fc:cf:7d:c3:c4:74:60:35:3d:6c:47:db:52:74:45:97: 13:dc:22:0f:bc:a6:9a:6c:6a:3e:9d:b1:0f:8b:0f:5a:26:32: d9:b2:f0:10:15:96:5a:31:46:e6:c2:68:82:9f:d3:0c:b3:96: 0b:d9:b1:23:c1:df:d6:56:80:c4:9d:8d:c6:90:56:12:1c:a0: 8d:71:b4:8c:5b:fd:6e:18:f1:da:75:40:9f:3c:17:ed:01:3d: 52:50:3e:5a:35:a1:bc:6a:22:d0:32:d7:40:55:3c:fe:28:ad: 4a:46:36:a2:ed:83:aa:27:b4:e3:fc:50:6f:bd:e3:30:39:04: 75:82:d7:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZpjYEKtDNU8bCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk OWYwMWI5MjMtNjc4NC00YTMxLTk5N2UtNDgxM2JjYmQwYzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf4Tv+9lEirEyXtqFrSICWx8H5VhSyZiPoMn zs85fDSC/tb45D4PJCgtVPTm81+tmiq97HgYyDANV3fHTjz7TytB4jAqPI2t8STk CEKeyZnIGeQ8V9yVQZyXL+mZRmcl/2rRBASunhdGureGltYVRQayDrc5EGVLCy8v Jwb2wxyTFc5UgrJvTMgnnujxtratnjoBvr0dXjx0qYvLihaKdFeqZmfdkcDasDvB FHMqv3iON7ZbFW/wRJ6rK+HcHWJ/pHxrZ996uyBBGmE/6+52HwJTdjrt0117KxTC oiL74cOaCK9X8q3hU13EicEojellMKB27zXPsNeBjoP6TYTVKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEnbAnNcYf6ZU9Jl4ClDpsWRwudMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2Q0YmMzNzAtMDZkMS0z ZDUzLTkzNTUtZWU1NzFkYmZkMmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF87oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChftbvkrxCLAp3+pCg1S+fGGL1FdX4OBaVj2FG62VRh+V7lMPNyJF+s srhfuzVXvM3cw1ouuU820alhnEB5I8YIL/BPDFa9jMOWznugjGtALh4zV7Ewhcj6 bmbN+YJqDvh1DsEZMjFC+XwHxjbkdvvhXM3T6nxKEdnLPtwLxp5z/M99w8R0YDU9 bEfbUnRFlxPcIg+8pppsaj6dsQ+LD1omMtmy8BAVlloxRubCaIKf0wyzlgvZsSPB 39ZWgMSdjcaQVhIcoI1xtIxb/W4Y8dp1QJ88F+0BPVJQPlo1obxqItAy10BVPP4o rUpGNqLtg6ontOP8UG+94zA5BHWC1wc= -----END CERTIFICATE-----Generated at Sat Aug 23 13:11:18 2025 by rpki-client