$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f74e04ed-4ab3-3f08-bf53-ee5e828a365b.roa File: f74e04ed-4ab3-3f08-bf53-ee5e828a365b.roa (raw, json) Hash identifier: /zNuhnSd/cmEV9ujSRCSygWsF9JorqvT4qJTmn99R6c= Subject key identifier: 0B:00:A0:DF:78:9C:4D:41:F2:EB:8D:5D:C7:92:4B:6A:F9:36:D9:36 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE46130A1AF8171006D16C000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f74e04ed-4ab3-3f08-bf53-ee5e828a365b.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 38266 IP address blocks: 23.11.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:30:a1:af:81:71:00:6d:16:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=aa8b597d-2f94-4df3-9d70-a17ff2cc0578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3e:9e:96:9e:b4:b7:4f:c1:c1:b4:f9:56:44: 0a:db:db:c3:6a:2d:4b:f9:dd:22:a1:54:0c:51:9b: bb:2f:a4:7c:e2:df:b7:d4:c7:f5:74:ed:10:40:b0: d1:c8:05:88:7b:2e:a5:ae:6d:7b:d9:39:ae:f2:d6: f0:f7:32:3c:c7:4f:87:40:8a:17:c2:41:b8:ce:fa: 5a:9a:77:58:30:d1:a0:e8:5c:d5:c9:dc:0d:1c:f4: 62:fa:62:d5:17:51:32:c0:c7:55:41:74:39:77:56: d0:80:e7:de:9b:6c:6d:3b:e9:f9:e2:9f:d5:7e:f0: 2f:e6:83:d4:8f:ab:93:3c:31:40:ac:48:c3:e7:13: 71:87:2a:77:15:15:40:ef:41:d3:a1:b4:65:38:80: 8d:6f:04:a2:9c:29:f1:22:14:f4:ac:79:48:b3:9a: 85:1b:6e:3a:e8:c7:da:87:04:5d:0f:67:be:02:91: d8:22:19:55:80:67:96:63:b6:9c:c3:85:d6:cf:27: b4:8a:70:07:12:e5:a7:49:71:66:cf:4c:79:9a:7c: 29:72:45:55:5e:8c:3d:9a:e7:71:66:ed:2f:e8:c6: e7:a9:97:0f:a3:75:d4:ce:02:75:68:d7:ac:b7:80: 15:be:dc:d3:ae:af:43:a6:a4:86:fc:88:ed:1e:dc: c7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:00:A0:DF:78:9C:4D:41:F2:EB:8D:5D:C7:92:4B:6A:F9:36:D9:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f74e04ed-4ab3-3f08-bf53-ee5e828a365b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.11.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:fe:61:d8:3d:e8:3c:b7:4b:31:6a:19:a7:5d:15:2f:8f:ab: 49:a7:14:23:7f:8d:2d:06:d7:ab:f5:a8:f9:ab:35:1b:75:ff: 4f:79:5d:75:6e:31:b8:0f:15:04:03:48:74:bc:5f:ba:34:45: ab:82:dd:84:a8:72:c9:f5:8b:30:c0:9a:97:0f:f3:7b:23:f6: d4:c6:d1:b6:3f:49:86:47:91:42:91:51:4f:41:c3:a1:b3:b0: 09:8b:c0:69:51:96:ee:db:af:5f:df:82:85:e6:94:c1:6c:8c: 23:e1:d5:9c:fe:59:97:88:30:37:e0:7c:94:0a:81:66:ba:05: 48:37:7f:6f:98:ff:8a:65:a0:06:62:52:34:b5:2f:4f:a9:14: 37:36:ba:49:6c:3d:5d:6f:1a:93:9d:35:04:f7:ce:7b:c0:94: 26:27:8f:fe:9f:e2:8a:d1:9b:25:9e:2d:45:3d:9a:ab:6c:20: de:56:bc:15:49:98:7e:5e:5a:4f:27:f5:4e:98:b0:ce:08:58: af:0d:01:91:53:44:6d:90:75:ce:d7:69:60:d2:d1:bf:df:85: 4a:b6:ee:ae:a5:11:d1:56:f3:38:82:8e:bd:22:54:be:1f:c6: cc:ab:2a:c8:c7:1e:9c:b0:c6:21:37:f1:b9:b6:20:97:d6:49: a2:0f:56:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYTChr4FxAG0WwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk YWE4YjU5N2QtMmY5NC00ZGYzLTlkNzAtYTE3ZmYyY2MwNTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz6elp60t0/BwbT5VkQK29vDai1L+d0ioVQM UZu7L6R84t+31Mf1dO0QQLDRyAWIey6lrm172Tmu8tbw9zI8x0+HQIoXwkG4zvpa mndYMNGg6FzVydwNHPRi+mLVF1EywMdVQXQ5d1bQgOfem2xtO+n54p/VfvAv5oPU j6uTPDFArEjD5xNxhyp3FRVA70HTobRlOICNbwSinCnxIhT0rHlIs5qFG2466Mfa hwRdD2e+ApHYIhlVgGeWY7acw4XWzye0inAHEuWnSXFmz0x5mnwpckVVXow9mudx Zu0v6MbnqZcPo3XUzgJ1aNest4AVvtzTrq9DpqSG/IjtHtzHWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsAoN94nE1B8uuNXceSS2r5Ntk2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjc0ZTA0ZWQtNGFiMy0z ZjA4LWJmNTMtZWU1ZTgyOGEzNjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwvWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGn+Ydg96Dy3SzFqGaddFS+Pq0mnFCN/jS0G16v1qPmrNRt1/095XXVu MbgPFQQDSHS8X7o0RauC3YSocsn1izDAmpcP83sj9tTG0bY/SYZHkUKRUU9Bw6Gz sAmLwGlRlu7br1/fgoXmlMFsjCPh1Zz+WZeIMDfgfJQKgWa6BUg3f2+Y/4ploAZi UjS1L0+pFDc2uklsPV1vGpOdNQT3znvAlCYnj/6f4orRmyWeLUU9mqtsIN5WvBVJ mH5eWk8n9U6YsM4IWK8NAZFTRG2Qdc7XaWDS0b/fhUq27q6lEdFW8ziCjr0iVL4f xsyrKsjHHpywxiE38bm2IJfWSaIPVtU= -----END CERTIFICATE-----Generated at Sat Aug 23 14:39:45 2025 by rpki-client