$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de4c7eec-aa3b-32bd-8259-ce3615d29dae.roa File: de4c7eec-aa3b-32bd-8259-ce3615d29dae.roa (raw, json) Hash identifier: kSLiBU7mQVy6DG3Y1rFTvAEgS+17SL3AwbiCCfqJDmg= Subject key identifier: 11:60:DB:76:DE:99:0E:5F:48:CC:88:4B:67:D1:A9:BA:3C:96:7E:76 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE4613037691A1BB3323F1840 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de4c7eec-aa3b-32bd-8259-ce3615d29dae.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.9.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:30:37:69:1a:1b:b3:32:3f:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=9df12119-b167-4c61-a405-44ce43bbbbed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7e:c0:f1:9c:d7:38:03:4f:a3:81:bc:a4:bb: b5:79:a9:99:ed:83:fa:d1:93:43:72:9e:e2:77:34: c5:e3:48:2b:a1:73:48:b7:51:3c:d5:7f:81:f6:74: 38:d2:17:f1:31:b8:4d:f4:23:df:d9:7c:e2:17:4c: c6:15:d7:2d:0a:fd:20:4c:16:7c:ec:37:9e:7d:c0: 33:76:18:ba:0b:ef:2d:71:4e:b4:4a:13:64:72:02: f2:81:36:9b:5b:fc:29:3d:c6:0b:c6:72:d8:c7:5b: eb:54:47:e9:a9:67:29:7a:80:f7:ab:29:a5:28:92: a4:ce:48:d2:01:27:0f:d9:32:1e:08:3a:cb:b1:90: a4:79:77:2f:2e:0d:1b:2f:96:4e:b4:ad:1b:bb:a7: c1:ff:2e:db:c7:c1:29:3e:80:6f:14:5e:cf:e6:df: 80:b6:5b:5e:eb:01:84:75:45:0b:02:df:a1:64:01: 97:d6:9e:28:1d:1a:ad:99:d6:98:f5:d1:88:be:d4: 25:ac:1e:50:d9:ca:24:54:3a:65:6b:e8:07:dd:ab: d4:88:61:58:80:f6:30:e3:c0:fb:0f:e9:cd:26:cb: 4b:29:c3:c4:61:36:87:c5:16:56:aa:8a:a1:cd:c6: 5a:c2:67:dd:fb:cc:b9:38:f4:e6:c8:fd:a4:19:ac: e6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:60:DB:76:DE:99:0E:5F:48:CC:88:4B:67:D1:A9:BA:3C:96:7E:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de4c7eec-aa3b-32bd-8259-ce3615d29dae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.9.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:bf:b2:35:aa:43:96:53:74:c8:0e:70:f8:31:00:a8:26:ad: 8a:4e:9e:39:5e:be:3a:7e:75:fc:ba:08:f4:d6:40:50:da:65: 9f:df:07:92:a0:d9:f2:09:86:9d:56:8c:5b:8c:04:79:e5:4a: 99:39:9b:d3:9e:cb:dd:57:aa:a5:6d:9a:75:50:22:cb:bf:63: e0:ae:24:fa:4b:f2:5b:5b:d1:d0:5a:f7:ac:87:7b:a0:e9:8a: 9a:a5:c5:fb:ce:e8:58:64:72:5d:41:1e:f4:92:34:16:8f:e7: 6a:9d:49:04:47:94:25:c3:e4:cd:8a:f7:39:44:f6:f5:6c:98: 0e:65:97:31:1f:4d:bd:2b:cc:a4:ca:64:c8:29:95:72:df:f3: 0e:23:98:5d:33:75:a9:39:0c:99:ef:29:05:8e:3c:3b:8a:74: f4:06:9a:10:5c:31:4e:04:ab:c7:8d:de:68:b8:14:99:b0:4d: c1:5a:2a:71:44:49:7e:7e:fb:a3:45:9f:a4:f6:3d:98:b9:84: ad:39:4a:fa:76:6b:9d:84:f8:13:b7:dd:6c:62:7d:b6:d1:ac: 36:ea:9c:23:59:5d:05:c3:92:25:11:30:90:eb:29:2a:95:7b: 3a:7a:17:fd:85:2b:f0:dc:f8:98:dd:18:dc:11:0f:74:c8:d3: d4:04:a9:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYTA3aRobszI/GEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk OWRmMTIxMTktYjE2Ny00YzYxLWE0MDUtNDRjZTQzYmJiYmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX7A8ZzXOANPo4G8pLu1eamZ7YP60ZNDcp7i dzTF40groXNIt1E81X+B9nQ40hfxMbhN9CPf2XziF0zGFdctCv0gTBZ87DeefcAz dhi6C+8tcU60ShNkcgLygTabW/wpPcYLxnLYx1vrVEfpqWcpeoD3qymlKJKkzkjS AScP2TIeCDrLsZCkeXcvLg0bL5ZOtK0bu6fB/y7bx8EpPoBvFF7P5t+Atlte6wGE dUULAt+hZAGX1p4oHRqtmdaY9dGIvtQlrB5Q2cokVDpla+gH3avUiGFYgPYw48D7 D+nNJstLKcPEYTaHxRZWqoqhzcZawmfd+8y5OPTmyP2kGazmkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFg23bemQ5fSMyIS2fRqbo8ln52MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGU0YzdlZWMtYWEzYi0z MmJkLTgyNTktY2UzNjE1ZDI5ZGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6/sjWqQ5ZTdMgOcPgxAKgmrYpOnjlevjp+dfy6CPTWQFDaZZ/fB5Kg 2fIJhp1WjFuMBHnlSpk5m9Oey91XqqVtmnVQIsu/Y+CuJPpL8ltb0dBa96yHe6Dp ipqlxfvO6Fhkcl1BHvSSNBaP52qdSQRHlCXD5M2K9zlE9vVsmA5llzEfTb0rzKTK ZMgplXLf8w4jmF0zdak5DJnvKQWOPDuKdPQGmhBcMU4Eq8eN3mi4FJmwTcFaKnFE SX5++6NFn6T2PZi5hK05Svp2a52E+BO33WxifbbRrDbqnCNZXQXDkiURMJDrKSqV ezp6F/2FK/Dc+JjdGNwRD3TI09QEqV8= -----END CERTIFICATE-----Generated at Sat Aug 23 18:09:14 2025 by rpki-client