$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/60b15d2e-704c-3568-abdb-f630f5163896.roa File: 60b15d2e-704c-3568-abdb-f630f5163896.roa (raw, json) Hash identifier: QRdp2Uo5jTe6HiU6odCuMYI5CKuyOk8cwiGnxx4uDOg= Subject key identifier: 18:05:B0:5C:9C:AE:3F:48:8D:22:0B:4E:0E:90:2E:EE:8C:F4:99:9F Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584B1806CA55789F9687C7D08FC0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/60b15d2e-704c-3568-abdb-f630f5163896.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 22898 IP address blocks: 8.28.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:ca:55:78:9f:96:87:c7:d0:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=d0e4c705-faca-42b9-8f4e-37a1bd8fa413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:51:a2:7d:3e:71:4d:94:fa:f9:18:31:97:7d: 2d:62:02:b4:e6:31:56:7d:f2:46:cc:11:a0:3c:fb: c0:ba:18:f5:8a:64:13:3b:93:10:fb:92:88:b6:f6: ea:35:c3:5b:66:6b:f3:ff:ec:21:e7:4a:0c:f7:21: 0a:0f:98:91:06:fc:8c:53:ac:78:43:10:8e:d9:4d: f1:fa:ba:58:bd:ba:d3:48:4a:6c:9c:2d:04:2d:9c: 36:fe:f7:12:04:6f:b9:e6:5d:55:66:ac:26:66:eb: 54:59:85:af:b3:d7:c2:9f:24:95:0e:60:4d:74:48: 39:7e:17:53:97:4c:8f:a7:6c:7d:bc:1f:34:1d:35: 18:ae:26:b9:30:e5:47:80:51:1d:4c:19:5a:d0:87: 6c:dc:29:5b:fa:2c:88:fb:12:f2:df:6f:d9:a2:69: d1:6f:62:f0:ec:90:e2:d3:01:bc:41:72:89:6b:b6: 2d:67:81:e8:17:9e:c6:c8:9c:76:c1:bf:01:60:3f: e9:7c:2a:5d:5d:1b:93:73:62:d2:93:ce:a7:48:90: ce:71:98:0e:71:1d:37:7d:b7:43:3a:d3:d4:ad:ab: a8:fa:7e:fa:0a:83:cc:8c:8a:7d:07:29:34:52:85: 51:74:95:b3:5a:26:f4:93:8b:d7:9e:de:85:1c:ad: 23:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:05:B0:5C:9C:AE:3F:48:8D:22:0B:4E:0E:90:2E:EE:8C:F4:99:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/60b15d2e-704c-3568-abdb-f630f5163896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.28.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:7b:33:e4:d1:c6:50:61:fb:c0:b3:29:5f:4b:e1:3c:d3:ca: fa:12:d1:be:91:d4:a4:37:f0:0b:d7:3b:dc:96:5d:64:0f:24: 5f:ae:0b:c9:49:1e:d6:e0:53:68:0e:32:14:45:00:72:bf:f7: 39:2a:ac:39:2d:36:fd:50:b5:19:09:b3:c7:c7:3e:9a:3e:c2: e7:b3:6e:ab:42:19:0e:37:c2:32:01:31:76:ea:99:1b:ca:59: 76:c5:90:4e:d0:10:8e:28:8e:49:b8:50:ff:16:73:62:3c:df: 87:43:a5:86:a8:8b:48:9f:dc:31:ab:52:d9:85:62:5f:cb:0c: d2:0e:40:0e:2d:b8:b7:a7:de:49:07:5a:bd:86:48:7c:9f:06: 7d:93:21:46:1a:ae:8b:e6:bb:11:05:e3:65:ef:65:95:88:d9: b8:82:37:54:c0:04:ce:a6:0a:1d:74:39:39:a8:df:29:2a:83: 4f:96:cf:a9:c6:e0:aa:d5:0f:60:29:9d:92:31:0e:f7:b4:de: 62:f2:e7:f1:ba:5e:eb:1e:e4:28:f3:f2:65:a5:45:d5:a7:b1: 0b:36:b2:df:05:c2:0c:58:a8:3e:7d:a3:0d:fa:fa:0e:bc:12: 73:44:5c:7d:32:91:a7:dc:24:0b:dd:b1:cf:48:b3:94:ca:4d: 92:72:0d:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBspVeJ+Wh8fQj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZDBlNGM3MDUtZmFjYS00MmI5LThmNGUtMzdhMWJkOGZhNDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21GifT5xTZT6+Rgxl30tYgK05jFWffJGzBGg PPvAuhj1imQTO5MQ+5KItvbqNcNbZmvz/+wh50oM9yEKD5iRBvyMU6x4QxCO2U3x +rpYvbrTSEpsnC0ELZw2/vcSBG+55l1VZqwmZutUWYWvs9fCnySVDmBNdEg5fhdT l0yPp2x9vB80HTUYria5MOVHgFEdTBla0Ids3Clb+iyI+xLy32/ZomnRb2Lw7JDi 0wG8QXKJa7YtZ4HoF57GyJx2wb8BYD/pfCpdXRuTc2LSk86nSJDOcZgOcR03fbdD OtPUrauo+n76CoPMjIp9Byk0UoVRdJWzWib0k4vXnt6FHK0jgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgFsFycrj9IjSILTg6QLu6M9JmfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNjBiMTVkMmUtNzA0Yy0z NTY4LWFiZGItZjYzMGY1MTYzODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQECBzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACd7M+TRxlBh+8CzKV9L4TzTyvoS0b6R1KQ38AvXO9yWXWQPJF+uC8lJ HtbgU2gOMhRFAHK/9zkqrDktNv1QtRkJs8fHPpo+wuezbqtCGQ43wjIBMXbqmRvK WXbFkE7QEI4ojkm4UP8Wc2I834dDpYaoi0if3DGrUtmFYl/LDNIOQA4tuLen3kkH Wr2GSHyfBn2TIUYarovmuxEF42XvZZWI2biCN1TABM6mCh10OTmo3ykqg0+Wz6nG 4KrVD2ApnZIxDve03mLy5/G6Xuse5Cjz8mWlRdWnsQs2st8FwgxYqD59ow36+g68 EnNEXH0ykafcJAvdsc9Is5TKTZJyDeE= -----END CERTIFICATE-----Generated at Sat Oct 11 14:58:06 2025 by rpki-client