$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe98cb5a-e989-3e55-8072-bee97422c9b5.roa File: fe98cb5a-e989-3e55-8072-bee97422c9b5.roa (raw, json) Hash identifier: jRnvXLkb6NSX8frcQCOOOARKIs1XR9O4fWwyaMJmOVo= Subject key identifier: A1:6D:C3:9F:67:B2:6A:A4:89:4C:AF:DE:B1:7E:6C:8E:DF:8A:8A:64 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE4614056F4BCB02318BF6E20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe98cb5a-e989-3e55-8072-bee97422c9b5.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.3.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:40:56:f4:bc:b0:23:18:bf:6e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=3cef3e93-cd78-4fc8-9fbf-b4357efd204a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0f:1d:05:35:e9:14:7e:08:e9:a3:ca:58:7a: e2:bd:e2:d7:89:3d:b4:81:af:66:e1:d3:fa:ea:23: b0:b3:6b:5a:20:e5:40:1b:7f:4d:51:f1:95:4b:26: 2f:de:18:60:79:72:eb:e0:cb:64:47:73:9c:77:b8: 5f:28:08:63:a5:38:40:77:95:9d:5d:45:70:46:e1: b2:2a:12:c9:99:d7:20:c9:9b:4f:96:95:78:fb:fe: e2:db:8f:20:0b:c8:29:f1:33:71:f0:ac:e5:31:79: 0a:13:80:ac:14:f8:48:59:47:9c:ea:b5:09:bf:2d: 29:25:d3:51:f7:a2:e3:69:ac:dc:01:d2:22:c6:57: 36:11:fa:18:23:e0:b6:cd:3c:86:c8:55:e0:7b:f1: 5a:4d:59:41:93:ec:2c:3e:f0:69:00:61:d8:4f:69: 64:3b:90:c2:0f:06:d4:46:f4:ed:9e:6b:ce:20:71: 62:5d:08:c9:18:34:10:6d:8d:4e:8e:74:9e:6a:c4: 26:27:4b:04:45:35:bf:d9:bd:f8:d8:4a:ac:6c:be: 33:84:99:d0:6a:72:57:3a:9e:2e:6f:81:8f:10:46: 4b:bd:44:8c:69:ca:f3:3d:89:a6:58:32:c6:14:0b: 58:11:3b:5d:e7:87:be:36:db:09:80:cc:91:a7:32: da:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6D:C3:9F:67:B2:6A:A4:89:4C:AF:DE:B1:7E:6C:8E:DF:8A:8A:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe98cb5a-e989-3e55-8072-bee97422c9b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:a8:41:09:d2:72:1a:fc:0f:10:a0:1f:32:11:34:b3:c2:7a: 55:00:28:2e:30:59:52:f2:fc:46:35:7b:50:51:c0:5e:86:1c: cf:2d:3f:b5:1f:d6:e3:4e:67:f4:08:55:10:8e:89:96:e0:2a: f9:4c:e4:98:a3:4d:8c:3b:2e:ba:df:b7:4f:87:0b:95:87:90: ce:b9:20:8c:e2:31:4a:32:55:a9:22:10:6e:1e:59:b0:4d:e5: 5b:bd:21:08:0c:d0:15:ec:af:15:82:8f:6f:14:7b:06:39:ca: da:26:49:c0:8a:fe:d4:84:c4:c9:5d:62:74:4c:d4:df:8a:0f: d9:8b:c5:a5:06:5a:f6:27:43:1e:ef:fb:b5:bf:3a:e7:74:d7: 65:3a:3f:c9:d5:8b:78:57:d4:fc:72:8f:2c:53:51:20:04:9b: 57:5e:13:05:7c:e5:f7:49:90:f7:82:16:18:38:05:f4:e1:02: 0c:fb:14:eb:ff:86:3d:5c:48:92:95:5f:95:e9:c5:ab:31:05: 6c:84:c0:29:0e:a8:d6:f4:09:45:06:80:ed:5c:32:fc:09:a8: 6e:16:6f:6f:3e:b9:ea:01:9a:d7:33:61:d1:a3:27:86:68:91: da:ce:6e:9e:e5:11:ec:e3:41:42:35:27:79:32:e5:51:65:b3: 9a:32:38:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYUBW9LywIxi/biAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk M2NlZjNlOTMtY2Q3OC00ZmM4LTlmYmYtYjQzNTdlZmQyMDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgA8dBTXpFH4I6aPKWHriveLXiT20ga9m4dP6 6iOws2taIOVAG39NUfGVSyYv3hhgeXLr4MtkR3Ocd7hfKAhjpThAd5WdXUVwRuGy KhLJmdcgyZtPlpV4+/7i248gC8gp8TNx8KzlMXkKE4CsFPhIWUec6rUJvy0pJdNR 96LjaazcAdIixlc2EfoYI+C2zTyGyFXge/FaTVlBk+wsPvBpAGHYT2lkO5DCDwbU RvTtnmvOIHFiXQjJGDQQbY1OjnSeasQmJ0sERTW/2b342EqsbL4zhJnQanJXOp4u b4GPEEZLvUSMacrzPYmmWDLGFAtYETtd54e+NtsJgMyRpzLaIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFtw59nsmqkiUyv3rF+bI7fiopkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmU5OGNiNWEtZTk4OS0z ZTU1LTgwNzItYmVlOTc0MjJjOWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwMOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeoQQnSchr8DxCgHzIRNLPCelUAKC4wWVLy/EY1e1BRwF6GHM8tP7Uf 1uNOZ/QIVRCOiZbgKvlM5JijTYw7Lrrft0+HC5WHkM65IIziMUoyVakiEG4eWbBN 5Vu9IQgM0BXsrxWCj28UewY5ytomScCK/tSExMldYnRM1N+KD9mLxaUGWvYnQx7v +7W/Oud012U6P8nVi3hX1PxyjyxTUSAEm1deEwV85fdJkPeCFhg4BfThAgz7FOv/ hj1cSJKVX5XpxasxBWyEwCkOqNb0CUUGgO1cMvwJqG4Wb28+ueoBmtczYdGjJ4Zo kdrObp7lEezjQUI1J3ky5VFls5oyOG8= -----END CERTIFICATE-----Generated at Sat Aug 23 13:04:44 2025 by rpki-client