$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5c2c971-894e-38ce-b882-4e65e2ed0a7c.roa File: d5c2c971-894e-38ce-b882-4e65e2ed0a7c.roa (raw, json) Hash identifier: YMscv9px9R72svgDJsZNbixKFlZ0VO2e4KFan8IOEAY= Subject key identifier: D4:CA:D0:A3:20:12:3C:1A:4B:7C:3E:96:20:23:FF:70:DC:92:38:A7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AD3A11B968102D6DF42A6DC40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5c2c971-894e-38ce-b882-4e65e2ed0a7c.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.67.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:1b:96:81:02:d6:df:42:a6:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=fa68c400-96f1-4303-8762-bfd38c21de0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:62:3e:25:61:e0:92:8f:0b:73:f0:1b:e0:c0: e1:2d:c3:09:57:7c:a6:b3:92:de:26:58:29:de:e6: 77:83:5d:72:d8:b4:44:51:17:3a:63:23:27:47:d1: 07:78:68:61:a7:b0:bd:2d:d9:b0:77:84:24:a7:02: c8:0d:28:65:dc:c2:39:99:96:21:8c:69:d9:55:72: 0a:c0:f5:96:8b:a9:a5:bc:b3:c9:9d:70:6a:33:b3: 1a:c4:fe:a2:fe:79:30:76:fd:70:33:bf:9a:1f:40: b6:d7:cc:0d:b4:0d:1b:ca:93:19:e8:8e:35:f7:08: 64:ee:90:62:24:22:cc:5b:72:48:8f:48:90:86:a7: c6:b4:36:34:99:80:50:c7:b5:e1:21:09:e1:e0:8a: c9:50:c0:38:2d:05:bd:4c:e7:cb:11:56:50:af:f1: ca:8d:d6:9a:de:e8:1c:21:ab:3b:78:53:66:83:a9: 8b:97:f0:93:ee:89:51:84:00:dc:ac:2f:4c:35:84: 6d:98:73:2a:30:25:28:41:ab:b4:26:3c:79:67:53: 52:d0:d0:50:e2:2e:27:4b:da:c6:41:5c:27:d1:50: 66:1a:5f:36:7c:9c:f0:8e:ea:b2:72:26:00:3e:1f: 81:4c:7a:dd:75:9d:20:cb:9f:0d:81:61:2f:3a:09: 6f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CA:D0:A3:20:12:3C:1A:4B:7C:3E:96:20:23:FF:70:DC:92:38:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5c2c971-894e-38ce-b882-4e65e2ed0a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.67.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:c4:fc:02:46:0c:d0:3c:be:17:73:be:a0:2a:e8:2e:94:f1: 65:34:2d:17:3e:92:df:e8:a7:69:1e:3c:7b:d2:cd:b3:6f:51: 39:fc:ce:44:49:14:a1:7c:f8:92:45:01:61:5d:b0:3c:29:94: 0a:af:9b:1f:fb:7d:81:87:13:a8:11:c8:e4:b7:94:c5:f5:c4: 6e:9e:b4:5a:6d:0d:5d:94:e4:07:00:15:79:85:cd:0f:52:40: 2c:be:87:5b:ab:d6:d6:ef:58:57:31:b1:9c:60:2c:e1:ec:bc: 55:9f:ae:47:37:85:69:ea:6f:dc:a9:e8:0f:33:23:26:ac:ed: c6:01:08:2d:69:06:83:ae:b0:8b:b1:fa:81:9c:44:11:47:81: f2:22:58:c3:74:33:3f:ae:d1:19:0f:e0:47:d9:19:e8:34:92: 67:63:41:dc:1c:79:06:37:3d:a1:33:3b:45:c7:12:17:28:29: 1a:99:7e:45:e1:34:61:3c:29:9a:2b:e8:1c:aa:38:19:6d:0c: e6:f7:84:73:20:2c:a7:06:32:cb:c7:93:e1:8b:2d:ab:b8:54: 99:11:c3:d2:1c:5c:af:56:ab:c0:c1:63:0c:32:12:ed:23:e6: e8:26:b1:01:90:af:4c:5d:33:81:85:8e:b2:2a:fa:79:85:9c: 07:f4:1f:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToRuWgQLW30Km3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk ZmE2OGM0MDAtOTZmMS00MzAzLTg3NjItYmZkMzhjMjFkZTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWI+JWHgko8Lc/Ab4MDhLcMJV3yms5LeJlgp 3uZ3g11y2LREURc6YyMnR9EHeGhhp7C9Ldmwd4QkpwLIDShl3MI5mZYhjGnZVXIK wPWWi6mlvLPJnXBqM7MaxP6i/nkwdv1wM7+aH0C218wNtA0bypMZ6I419whk7pBi JCLMW3JIj0iQhqfGtDY0mYBQx7XhIQnh4IrJUMA4LQW9TOfLEVZQr/HKjdaa3ugc Ias7eFNmg6mLl/CT7olRhADcrC9MNYRtmHMqMCUoQau0Jjx5Z1NS0NBQ4i4nS9rG QVwn0VBmGl82fJzwjuqyciYAPh+BTHrddZ0gy58NgWEvOglvqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTK0KMgEjwaS3w+liAj/3DckjinMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDVjMmM5NzEtODk0ZS0z OGNlLWI4ODItNGU2NWUyZWQwYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0MvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDE/AJGDNA8vhdzvqAq6C6U8WU0LRc+kt/op2kePHvSzbNvUTn8zkRJ FKF8+JJFAWFdsDwplAqvmx/7fYGHE6gRyOS3lMX1xG6etFptDV2U5AcAFXmFzQ9S QCy+h1ur1tbvWFcxsZxgLOHsvFWfrkc3hWnqb9yp6A8zIyas7cYBCC1pBoOusIux +oGcRBFHgfIiWMN0Mz+u0RkP4EfZGeg0kmdjQdwceQY3PaEzO0XHEhcoKRqZfkXh NGE8KZor6ByqOBltDOb3hHMgLKcGMsvHk+GLLau4VJkRw9IcXK9Wq8DBYwwyEu0j 5ugmsQGQr0xdM4GFjrIq+nmFnAf0H+U= -----END CERTIFICATE-----Generated at Sat Aug 23 14:49:55 2025 by rpki-client