$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/436f5959-9fd9-3733-9c65-ba6e17e35dd0.roa File: 436f5959-9fd9-3733-9c65-ba6e17e35dd0.roa (raw, json) Hash identifier: s9U61N4diohL354eNLKbeoh/IZbIZtrG8r6/mb1A1+Q= Subject key identifier: 34:81:9D:EE:B4:A1:38:CA:D9:01:88:1A:70:2B:75:02:76:26:7C:10 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584AD7D10A0896D9B26BB5CCC500 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/436f5959-9fd9-3733-9c65-ba6e17e35dd0.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 16815 IP address blocks: 23.239.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:0a:08:96:d9:b2:6b:b5:cc:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=ec7aeec2-989e-45df-aaa2-01a4ad6a3c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:95:0a:09:78:8e:6a:c0:da:10:54:7a:b7:b6: 39:d0:5d:ab:52:8e:aa:13:bf:54:38:e4:ca:67:73: 78:c6:46:0c:dc:57:a9:10:2e:33:9d:c3:cd:43:df: 91:96:38:ee:06:18:69:d6:16:a6:cc:b4:60:ac:af: b6:63:b8:78:76:c4:5b:e2:78:71:92:3e:af:fc:0f: a7:9b:88:16:2e:ee:8d:5f:31:62:99:98:12:c5:04: e4:d3:29:e0:80:13:52:1c:55:87:c4:bb:9e:8f:ea: 63:83:39:56:ed:3f:62:4c:66:92:c7:8e:42:3a:91: 4f:9c:6e:10:5f:14:4f:03:a6:72:bc:44:3c:af:f4: ad:f6:0f:de:8b:0d:89:07:bf:97:a2:74:ee:d6:b6: 0e:4c:34:8f:21:19:55:4d:b2:33:61:fb:34:e9:1f: 8f:48:79:29:e1:01:07:d8:96:b2:4e:61:af:f8:13: 93:17:5f:67:a3:49:8c:59:7d:1b:4d:04:03:b8:b4: 96:3c:22:22:f5:2a:85:0b:ee:58:b4:f1:48:78:82: f3:7a:79:ff:3b:37:aa:8c:6e:be:a4:54:bb:cf:d2: b8:ee:75:76:d7:58:f3:34:fb:0c:42:ee:ea:24:61: ad:73:70:a9:b7:89:c8:ae:f2:6f:88:28:8a:0b:74: a3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:81:9D:EE:B4:A1:38:CA:D9:01:88:1A:70:2B:75:02:76:26:7C:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/436f5959-9fd9-3733-9c65-ba6e17e35dd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:36:e9:86:37:e3:60:78:0f:4b:77:62:dc:46:05:2f:8c:aa: 82:0b:9f:f8:4c:de:1b:4d:7c:89:f1:ea:a6:11:ea:93:1d:f8: b6:dc:63:64:05:cd:32:db:25:11:bd:f6:96:0e:9a:5a:a9:91: ad:79:e2:52:e3:30:e2:3b:d4:1c:34:c5:bb:4e:39:cb:a6:5f: c2:8c:e0:e1:65:55:1b:c4:62:d2:f0:89:66:13:53:f6:58:77: b7:44:72:44:80:d0:4c:12:2c:4a:9d:55:01:30:08:ff:28:7c: 07:ac:56:54:08:f4:a4:10:5e:3a:ab:39:b4:9b:d9:9b:da:bc: 91:dd:d7:4d:81:dc:d6:01:ec:9e:2c:f6:ee:ce:70:05:50:f2: 32:9b:eb:b3:1e:1a:3e:f8:7b:e5:c7:4f:f1:50:21:8f:91:06: be:1c:1b:12:43:0d:d1:22:1e:e0:44:44:7d:95:85:43:a1:98: 98:bf:56:ef:27:03:5c:63:32:61:28:dc:cf:14:f5:04:b7:b6: d3:a3:78:89:29:2a:fb:63:76:df:73:a4:93:7c:fa:ac:ab:6d: cb:70:f0:7a:da:2f:c3:9f:10:c2:47:dc:64:0c:d0:7c:ba:53: 39:1c:62:f1:e3:3b:35:f7:13:a0:f0:45:95:bc:61:e0:ad:f1: e9:49:7c:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0QoIltmya7XMxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk ZWM3YWVlYzItOTg5ZS00NWRmLWFhYTItMDFhNGFkNmEzYzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZUKCXiOasDaEFR6t7Y50F2rUo6qE79UOOTK Z3N4xkYM3FepEC4zncPNQ9+RljjuBhhp1hamzLRgrK+2Y7h4dsRb4nhxkj6v/A+n m4gWLu6NXzFimZgSxQTk0ynggBNSHFWHxLuej+pjgzlW7T9iTGaSx45COpFPnG4Q XxRPA6ZyvEQ8r/St9g/eiw2JB7+XonTu1rYOTDSPIRlVTbIzYfs06R+PSHkp4QEH 2JayTmGv+BOTF19no0mMWX0bTQQDuLSWPCIi9SqFC+5YtPFIeILzenn/OzeqjG6+ pFS7z9K47nV211jzNPsMQu7qJGGtc3Cpt4nIrvJviCiKC3SjqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSBne60oTjK2QGIGnArdQJ2JnwQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNDM2ZjU5NTktOWZkOS0z NzMzLTljNjUtYmE2ZTE3ZTM1ZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF+/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG426YY342B4D0t3YtxGBS+MqoILn/hM3htNfInx6qYR6pMd+LbcY2QF zTLbJRG99pYOmlqpka154lLjMOI71Bw0xbtOOcumX8KM4OFlVRvEYtLwiWYTU/ZY d7dEckSA0EwSLEqdVQEwCP8ofAesVlQI9KQQXjqrObSb2ZvavJHd102B3NYB7J4s 9u7OcAVQ8jKb67MeGj74e+XHT/FQIY+RBr4cGxJDDdEiHuBERH2VhUOhmJi/Vu8n A1xjMmEo3M8U9QS3ttOjeIkpKvtjdt9zpJN8+qyrbctw8HraL8OfEMJH3GQM0Hy6 UzkcYvHjOzX3E6DwRZW8YeCt8elJfNs= -----END CERTIFICATE-----Generated at Sat Aug 23 17:00:55 2025 by rpki-client