$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e307d7a0-7e98-3ec8-a251-95d259b32fda.roa File: e307d7a0-7e98-3ec8-a251-95d259b32fda.roa (raw, json) Hash identifier: D7Mc7y7UNwZfpI8lu2rCs23VKMhZ3h5Ux/ntpYi0DQs= Subject key identifier: 9D:4F:27:57:08:C1:90:8E:17:07:D9:C3:31:D7:97:BE:80:C7:D5:66 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AD3A11FF342813361DCB5C600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e307d7a0-7e98-3ec8-a251-95d259b32fda.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 16625 IP address blocks: 23.64.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:1f:f3:42:81:33:61:dc:b5:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=569ffe3a-99cd-407b-b861-261187764559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:12:7f:b6:a8:e5:76:8f:29:f2:90:4f:82:e9: 49:09:96:c0:b0:f7:b6:0e:21:62:46:4e:2b:ad:dc: 14:d9:ba:31:ae:53:55:bc:f5:91:db:73:2f:ad:3b: e3:e0:41:c9:85:72:56:37:22:be:9d:92:73:8f:38: 0b:fa:84:1d:48:79:ab:e2:f9:17:e2:38:ee:ed:a6: 8f:42:24:70:2f:a4:05:31:c2:1a:1e:80:00:6b:31: 3e:0e:e3:10:40:b2:5e:d4:de:06:4a:ea:5f:7c:72: 0f:ac:2f:bb:b3:03:3b:67:47:2f:0b:fc:21:71:7e: 63:ac:de:b2:b4:16:fd:35:93:91:84:dd:99:9c:23: 0d:30:5d:a5:7b:42:08:1f:3b:c5:b3:db:24:e0:ac: a8:72:fe:62:d8:e2:2a:a2:cf:24:69:fe:bc:3a:7b: c8:7a:02:d2:3b:00:a2:ae:6f:e8:53:d8:00:96:5c: f2:69:45:df:58:b9:33:6f:73:10:af:5c:98:dd:21: 2e:0b:c7:14:66:c3:f1:6f:f9:56:8f:0f:5c:a0:1d: 51:90:47:5c:61:d0:6d:0e:03:4c:38:5c:81:5e:31: 43:e9:bd:07:ea:21:64:db:a4:84:13:a2:b6:29:69: 38:ed:33:e8:ea:16:2a:fa:b2:53:be:bf:24:8b:3b: 0b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4F:27:57:08:C1:90:8E:17:07:D9:C3:31:D7:97:BE:80:C7:D5:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e307d7a0-7e98-3ec8-a251-95d259b32fda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.64.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:37:d5:01:e7:3a:d3:5e:67:75:f0:98:18:2d:31:40:20:e5: ac:e5:e6:ef:51:df:0d:65:44:22:b0:8d:65:67:d7:dd:71:ee: 09:7a:ee:44:29:97:ab:ce:1c:e0:0a:ed:f2:26:15:f0:64:fd: 9c:78:12:4f:3f:e5:20:6e:84:c3:49:ee:d4:f7:cf:a1:fa:66: e9:6c:ee:39:1e:3e:91:6c:44:3e:60:c9:7a:20:86:2c:5a:4a: 06:26:28:85:ff:19:86:a9:46:bb:d5:70:6e:03:54:ad:bf:71: 2a:84:07:25:86:32:25:42:91:5f:39:44:b8:c4:b7:8b:d3:1b: 74:67:84:9d:7d:5e:28:c0:ea:61:67:db:60:cf:ee:9e:1a:97: 3d:50:8a:5a:0b:6a:f1:98:d6:d7:a7:77:f1:0f:ac:ce:fe:85: c2:9e:ab:5a:72:e0:d2:5d:7f:7f:1f:7f:fc:f6:56:16:44:bc: c6:39:b3:e9:65:96:90:b7:a7:78:24:ba:2a:35:47:8a:60:5a: e9:33:4f:f0:ec:e2:4a:cc:68:24:49:7f:8e:33:ba:87:a0:dd: fc:4e:0d:87:96:48:d1:4a:1a:16:22:bd:67:09:87:02:67:25: 2d:de:47:71:56:b3:c7:23:3d:c2:41:4b:dd:25:56:b2:88:7e: 76:e2:ef:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToR/zQoEzYdy1xgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk NTY5ZmZlM2EtOTljZC00MDdiLWI4NjEtMjYxMTg3NzY0NTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxJ/tqjldo8p8pBPgulJCZbAsPe2DiFiRk4r rdwU2boxrlNVvPWR23MvrTvj4EHJhXJWNyK+nZJzjzgL+oQdSHmr4vkX4jju7aaP QiRwL6QFMcIaHoAAazE+DuMQQLJe1N4GSupffHIPrC+7swM7Z0cvC/whcX5jrN6y tBb9NZORhN2ZnCMNMF2le0IIHzvFs9sk4Kyocv5i2OIqos8kaf68OnvIegLSOwCi rm/oU9gAllzyaUXfWLkzb3MQr1yY3SEuC8cUZsPxb/lWjw9coB1RkEdcYdBtDgNM OFyBXjFD6b0H6iFk26SEE6K2KWk47TPo6hYq+rJTvr8kizsL1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1PJ1cIwZCOFwfZwzHXl76Ax9VmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTMwN2Q3YTAtN2U5OC0z ZWM4LWEyNTEtOTVkMjU5YjMyZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF0CgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGU31QHnOtNeZ3XwmBgtMUAg5azl5u9R3w1lRCKwjWVn191x7gl67kQp l6vOHOAK7fImFfBk/Zx4Ek8/5SBuhMNJ7tT3z6H6Zuls7jkePpFsRD5gyXoghixa SgYmKIX/GYapRrvVcG4DVK2/cSqEByWGMiVCkV85RLjEt4vTG3RnhJ19XijA6mFn 22DP7p4alz1QiloLavGY1tend/EPrM7+hcKeq1py4NJdf38ff/z2VhZEvMY5s+ll lpC3p3gkuio1R4pgWukzT/Ds4krMaCRJf44zuoeg3fxODYeWSNFKGhYivWcJhwJn JS3eR3FWs8cjPcJBS90lVrKIfnbi704= -----END CERTIFICATE-----Generated at Sat Aug 23 20:55:45 2025 by rpki-client