$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f7e226fb-4d94-3697-9b7b-7d2ba0f50d04.roa File: f7e226fb-4d94-3697-9b7b-7d2ba0f50d04.roa (raw, json) Hash identifier: RiOwmdDdg6T1VtXSo9yKJ9MWYeqjTy3Iet85WaFkbFc= Subject key identifier: 32:AB:62:42:1F:46:C0:34:3A:70:C9:86:ED:C9:B2:E8:AF:C9:BC:7A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE4612FEFDC7E2946F50D3E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f7e226fb-4d94-3697-9b7b-7d2ba0f50d04.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.7.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:2f:ef:dc:7e:29:46:f5:0d:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=561ff728-a04a-4e18-94ca-c630098745a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2f:4a:76:58:a9:e1:4e:b4:00:f9:cd:79:45: 61:12:c5:83:2b:df:28:79:6a:4b:d1:6b:be:77:85: 52:cc:bf:bb:c2:c9:1a:e3:b7:03:53:80:45:f2:d7: 5b:c3:04:ed:44:c9:18:51:0d:ad:34:1c:37:9a:33: fe:ae:68:76:00:ef:fb:37:74:f9:b8:c8:3d:26:26: 8c:11:fd:fc:86:b2:a0:58:98:b2:49:06:28:fb:8e: ad:5c:6d:86:21:ee:c1:1e:76:16:af:82:59:f3:ce: 9c:fb:36:d0:e3:37:e4:a5:6c:e1:1e:d2:43:bb:43: 6c:5a:97:b1:54:4c:64:8a:f4:69:79:03:cf:c6:b7: d4:f7:28:f9:a3:42:69:c1:12:3d:81:42:46:bb:36: 13:d3:42:63:c1:65:72:34:2c:c9:8c:14:a3:b2:e1: cd:03:4e:73:c9:40:73:da:18:2a:d4:9d:b6:bb:0d: 6e:21:ca:2c:19:49:b7:4e:29:53:97:c5:de:16:62: e9:a1:7f:e9:ee:b1:ab:80:7f:1e:f1:2f:eb:2b:62: 7f:34:58:8b:68:14:07:40:b1:26:d1:b7:1f:b6:dc: 9e:3e:ab:3a:82:b2:ca:74:d2:07:cb:0f:c1:4a:58: 9f:0b:2a:95:c3:12:9e:ea:5b:6b:a3:c8:ec:af:72: 75:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AB:62:42:1F:46:C0:34:3A:70:C9:86:ED:C9:B2:E8:AF:C9:BC:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f7e226fb-4d94-3697-9b7b-7d2ba0f50d04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.7.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:9d:db:be:91:b7:a7:eb:ff:5a:c8:53:61:5a:b6:c2:45:cc: 30:32:69:f0:fd:33:ba:01:ad:75:58:69:2a:85:8e:dc:39:36: a6:13:10:04:ab:d9:ba:19:9d:63:7d:2c:06:2c:2c:be:2d:90: 54:3d:89:bc:b6:a2:9a:f4:cf:bb:21:45:74:45:76:af:e5:b8: 42:f7:f0:13:07:72:de:85:be:e6:02:14:73:8f:06:ae:32:9b: 48:79:56:a0:39:15:3e:71:0d:bf:49:5d:d9:c0:91:df:b4:dd: a6:f1:b0:29:fb:f0:e3:5e:53:c4:1d:9f:95:92:99:de:c1:be: 2d:12:7c:4f:bc:93:93:fd:0c:33:f3:e6:14:62:d6:53:6e:5b: 51:f7:fb:35:35:de:1b:54:cf:ce:1a:94:88:a4:77:f6:c2:c6: 5a:ce:ba:92:37:1c:fb:79:a3:3c:ae:88:6b:49:aa:ac:a9:ee: 65:da:3d:01:24:73:39:e3:5c:21:0d:cc:c4:bf:1a:bc:ab:2c: a9:c4:95:68:6f:eb:bc:55:4e:99:1c:3b:7b:eb:d2:5b:e6:e4: e0:74:d2:d9:c9:13:73:d9:f6:55:1f:d9:23:a3:35:fd:fc:ee: 41:2e:10:c7:7f:89:cb:19:88:d7:dc:d5:3f:4e:73:5c:a6:8f: 6d:09:bd:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYS/v3H4pRvUNPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk NTYxZmY3MjgtYTA0YS00ZTE4LTk0Y2EtYzYzMDA5ODc0NWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC9Kdlip4U60APnNeUVhEsWDK98oeWpL0Wu+ d4VSzL+7wska47cDU4BF8tdbwwTtRMkYUQ2tNBw3mjP+rmh2AO/7N3T5uMg9JiaM Ef38hrKgWJiySQYo+46tXG2GIe7BHnYWr4JZ886c+zbQ4zfkpWzhHtJDu0NsWpex VExkivRpeQPPxrfU9yj5o0JpwRI9gUJGuzYT00JjwWVyNCzJjBSjsuHNA05zyUBz 2hgq1J22uw1uIcosGUm3TilTl8XeFmLpoX/p7rGrgH8e8S/rK2J/NFiLaBQHQLEm 0bcfttyePqs6grLKdNIHyw/BSlifCyqVwxKe6ltro8jsr3J1BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKrYkIfRsA0OnDJhu3Jsuivybx6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjdlMjI2ZmItNGQ5NC0z Njk3LTliN2ItN2QyYmEwZjUwZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFwcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACd276Rt6fr/1rIU2FatsJFzDAyafD9M7oBrXVYaSqFjtw5NqYTEASr 2boZnWN9LAYsLL4tkFQ9iby2opr0z7shRXRFdq/luEL38BMHct6FvuYCFHOPBq4y m0h5VqA5FT5xDb9JXdnAkd+03abxsCn78ONeU8Qdn5WSmd7Bvi0SfE+8k5P9DDPz 5hRi1lNuW1H3+zU13htUz84alIikd/bCxlrOupI3HPt5ozyuiGtJqqyp7mXaPQEk cznjXCENzMS/GryrLKnElWhv67xVTpkcO3vr0lvm5OB00tnJE3PZ9lUf2SOjNf38 7kEuEMd/icsZiNfc1T9Oc1ymj20JvT0= -----END CERTIFICATE-----Generated at Sat Aug 23 12:58:57 2025 by rpki-client