$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e438c12c-eed9-3eda-a4d5-4ad96749be1a.roa File: e438c12c-eed9-3eda-a4d5-4ad96749be1a.roa (raw, json) Hash identifier: 9oU8GcvZ8CdrPI4ZngOqdjdt897xabXgmbJBTHGtHD4= Subject key identifier: E8:42:FC:71:FE:22:25:7B:15:FD:12:E1:98:3A:4B:BB:FA:C0:DC:99 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC5AB88C7F05E340960A2EF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e438c12c-eed9-3eda-a4d5-4ad96749be1a.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.1.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:88:c7:f0:5e:34:09:60:a2:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=811bc998-7332-4d88-80a6-0a697935a33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9a:28:2a:e9:ca:12:46:58:ed:ac:b9:d2:c2: 43:7f:9a:f9:38:a7:56:58:cc:fb:e8:b2:63:9f:b2: 96:aa:1a:5b:33:36:d5:a0:05:5b:f4:07:ba:11:d6: be:f8:5b:23:7c:5c:cb:21:a6:dd:97:12:24:25:62: 75:ec:ba:d5:09:3d:76:e6:8c:4f:2f:9d:ee:a9:76: a7:43:de:21:96:2f:1a:84:6f:1c:3e:56:85:49:c4: 24:5a:ae:17:d5:a6:2f:14:95:93:08:6a:ff:a5:07: c2:00:ee:0d:62:be:2e:4c:ff:57:41:b6:a1:c4:c7: 5b:f3:4d:01:39:d5:3c:5d:11:85:f7:cc:ed:8a:16: 72:b3:fc:ef:9d:bd:01:39:4d:58:39:49:ca:07:f4: 70:d9:d3:31:52:30:fe:26:53:5c:20:69:7f:78:81: 3e:e5:e1:13:ce:a1:4a:9f:06:15:6b:eb:44:dc:09: 27:20:00:1a:fe:72:80:91:9a:cc:71:3e:29:e9:2f: c6:81:04:eb:cf:81:bf:e0:f4:16:71:11:49:bb:06: 7a:c8:28:2e:33:30:de:7f:96:60:22:41:a0:2b:e6: b9:04:c0:6c:b8:50:25:a8:70:1f:d0:a3:2c:1a:2a: 2b:8d:77:1a:69:32:6e:9d:42:b9:5a:1e:5e:d4:4c: 2b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:42:FC:71:FE:22:25:7B:15:FD:12:E1:98:3A:4B:BB:FA:C0:DC:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e438c12c-eed9-3eda-a4d5-4ad96749be1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:3e:b9:2c:0b:31:c0:ff:64:a5:7f:7e:ba:42:d7:f1:e1:95: 5c:fa:f6:48:9c:b7:60:f9:ba:b6:35:6d:a7:d8:4e:aa:69:8e: 7a:02:dd:59:d6:1e:1e:2f:e6:95:17:04:a6:70:77:04:b1:17: cc:7b:77:3a:4a:9e:b9:a8:12:c8:c7:d8:56:e1:90:17:cf:25: 1d:43:a9:30:48:f8:43:51:cf:e2:65:a2:5c:a6:0b:2a:2e:68: d6:b7:55:eb:d2:62:14:1c:47:1c:5a:bc:4c:d6:cc:87:84:71: 93:4d:a6:81:fa:60:67:8e:23:c2:87:db:2e:f2:80:9d:b4:f7: 16:c8:cc:be:16:45:4d:0c:02:28:0f:1b:5c:e8:41:d9:e6:54: 96:9e:06:79:a6:fa:55:da:7b:51:6b:b2:fc:8d:8c:18:f9:67: b2:ee:76:2a:8b:b7:fe:d3:e7:34:63:9d:27:4c:3a:a7:59:fd: c2:9e:a1:63:ed:a1:e7:d9:96:b6:2d:c5:0b:bf:8d:6a:63:c5: 90:a8:01:36:ae:e0:0f:d1:97:66:cb:c7:d9:24:15:cf:c3:4b: c0:5a:de:3f:b7:01:bd:7c:37:66:11:28:ef:94:ed:43:48:70: 9b:0b:24:c0:78:7e:19:c6:83:a2:79:fd:01:d7:a0:57:8d:b0: f4:33:d0:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq4jH8F40CWCi74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk ODExYmM5OTgtNzMzMi00ZDg4LTgwYTYtMGE2OTc5MzVhMzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5ooKunKEkZY7ay50sJDf5r5OKdWWMz76LJj n7KWqhpbMzbVoAVb9Ae6Eda++FsjfFzLIabdlxIkJWJ17LrVCT125oxPL53uqXan Q94hli8ahG8cPlaFScQkWq4X1aYvFJWTCGr/pQfCAO4NYr4uTP9XQbahxMdb800B OdU8XRGF98ztihZys/zvnb0BOU1YOUnKB/Rw2dMxUjD+JlNcIGl/eIE+5eETzqFK nwYVa+tE3AknIAAa/nKAkZrMcT4p6S/GgQTrz4G/4PQWcRFJuwZ6yCguMzDef5Zg IkGgK+a5BMBsuFAlqHAf0KMsGiorjXcaaTJunUK5Wh5e1EwrKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhC/HH+IiV7Ff0S4Zg6S7v6wNyZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTQzOGMxMmMtZWVkOS0z ZWRhLWE0ZDUtNGFkOTY3NDliZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwHkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8+uSwLMcD/ZKV/frpC1/HhlVz69kict2D5urY1bafYTqppjnoC3VnW Hh4v5pUXBKZwdwSxF8x7dzpKnrmoEsjH2FbhkBfPJR1DqTBI+ENRz+JlolymCyou aNa3VevSYhQcRxxavEzWzIeEcZNNpoH6YGeOI8KH2y7ygJ209xbIzL4WRU0MAigP G1zoQdnmVJaeBnmm+lXae1FrsvyNjBj5Z7LudiqLt/7T5zRjnSdMOqdZ/cKeoWPt oefZlrYtxQu/jWpjxZCoATau4A/Rl2bLx9kkFc/DS8Ba3j+3Ab18N2YRKO+U7UNI cJsLJMB4fhnGg6J5/QHXoFeNsPQz0NE= -----END CERTIFICATE-----Generated at Sat Aug 23 12:53:28 2025 by rpki-client