$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e87a03bc-5878-380d-a2e8-e3c2ef977a07.roa File: e87a03bc-5878-380d-a2e8-e3c2ef977a07.roa (raw, json) Hash identifier: jNAtZteYBD0YDQvdQl+QdpgMTIw10FrhSp9rFN7UaUo= Subject key identifier: C3:1B:DA:8F:01:EB:F6:91:BC:FB:25:BC:73:07:25:DF:AF:4F:D4:3A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8840A5DA8AF9E4593C55CB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e87a03bc-5878-380d-a2e8-e3c2ef977a07.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 17639 IP address blocks: 23.8.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:a5:da:8a:f9:e4:59:3c:55:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=2864daa7-65a1-4616-a28e-a379460a2bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e1:d9:a2:ce:45:3c:0d:d5:3c:a3:32:78:3f: f8:36:f6:f7:81:bf:1c:09:c4:ef:e9:5e:9a:14:57: a2:76:1d:05:75:87:aa:d5:1b:5d:40:d4:1d:04:a9: fa:7d:f1:e9:37:d7:64:c3:6d:98:6c:99:ed:d7:ff: 71:ad:4c:1e:b4:51:fa:8c:c8:ea:3b:d8:2f:be:9f: 9e:5f:2b:86:63:86:ed:35:de:4f:7b:c1:bd:c6:27: bf:35:2e:dd:4d:da:90:3e:4f:7e:8d:41:55:7c:72: 19:cf:1e:5e:47:f8:05:3f:fc:3d:de:41:1f:dc:72: 13:a7:50:af:47:ee:0a:5d:85:66:2f:ad:aa:00:ab: fa:9d:20:eb:40:c2:49:cb:2f:6b:90:53:8a:e8:c0: 0f:ed:f2:bf:eb:ac:01:fe:67:e1:04:6e:5a:83:d7: a6:7d:b6:ad:26:2e:d0:9c:d6:23:6e:a0:e2:25:c5: 78:67:4d:19:b8:f5:54:5d:96:40:41:b4:9d:3c:16: 54:38:32:dc:20:18:1d:55:bc:50:d2:78:2b:c6:1b: fd:10:0e:9f:ff:df:c3:1b:d5:83:b4:c4:7a:2d:20: 82:61:0e:8b:0b:fa:0b:ff:09:b6:eb:8c:f8:c0:53: e3:b1:b7:e0:ef:c9:f5:92:82:40:8b:da:41:9e:6a: 49:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:1B:DA:8F:01:EB:F6:91:BC:FB:25:BC:73:07:25:DF:AF:4F:D4:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e87a03bc-5878-380d-a2e8-e3c2ef977a07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.8.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:d8:99:b9:52:38:0b:e2:20:b3:10:2d:7c:e6:ea:f2:b7:de: 5f:54:e3:b9:6e:5b:cc:68:bd:fe:ed:4c:db:13:24:5d:dc:1c: 60:46:40:d5:21:ae:66:41:34:dc:d7:cb:42:d3:19:c4:4e:35: b1:91:67:19:e3:f0:a0:5c:2a:11:95:10:c2:65:f3:b4:56:5f: b0:f1:f1:3f:5d:68:fe:83:80:b9:e1:8c:05:af:0c:06:8e:db: 00:74:ca:d0:71:ee:a7:8d:25:2f:da:6a:0f:f8:d0:f9:ee:c7: cb:cb:14:65:4b:30:d5:6b:2f:63:97:78:f8:c9:6a:ee:89:e5: e6:74:ae:48:ec:ab:ea:07:7a:84:ef:b4:50:4b:de:e0:5b:d1: d5:21:e4:fa:bc:d3:de:22:d3:30:2b:d4:d4:fe:6f:e3:f5:b6: 6d:2e:4b:e2:cd:a5:e2:28:2b:77:00:22:74:3b:88:fd:71:5d: 0c:13:4c:77:38:7a:97:e1:f6:6a:a9:32:d7:5e:b9:06:53:5d: 3d:f8:e8:85:a0:19:bd:03:92:55:70:fe:fb:34:de:cd:79:ca: 28:99:84:55:71:aa:75:cf:d1:4d:72:20:ee:81:65:44:e6:06: 2f:6f:95:b9:5d:5a:27:8f:ed:12:a0:d3:d5:a7:c5:39:b2:e6: 38:2b:13:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQKXaivnkWTxVy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk Mjg2NGRhYTctNjVhMS00NjE2LWEyOGUtYTM3OTQ2MGEyYmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOHZos5FPA3VPKMyeD/4Nvb3gb8cCcTv6V6a FFeidh0FdYeq1RtdQNQdBKn6ffHpN9dkw22YbJnt1/9xrUwetFH6jMjqO9gvvp+e XyuGY4btNd5Pe8G9xie/NS7dTdqQPk9+jUFVfHIZzx5eR/gFP/w93kEf3HITp1Cv R+4KXYVmL62qAKv6nSDrQMJJyy9rkFOK6MAP7fK/66wB/mfhBG5ag9emfbatJi7Q nNYjbqDiJcV4Z00ZuPVUXZZAQbSdPBZUODLcIBgdVbxQ0ngrxhv9EA6f/9/DG9WD tMR6LSCCYQ6LC/oL/wm264z4wFPjsbfg78n1koJAi9pBnmpJ5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMb2o8B6/aRvPslvHMHJd+vT9Q6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTg3YTAzYmMtNTg3OC0z ODBkLWEyZTgtZTNjMmVmOTc3YTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwiQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPYmblSOAviILMQLXzm6vK33l9U47luW8xovf7tTNsTJF3cHGBGQNUh rmZBNNzXy0LTGcRONbGRZxnj8KBcKhGVEMJl87RWX7Dx8T9daP6DgLnhjAWvDAaO 2wB0ytBx7qeNJS/aag/40Pnux8vLFGVLMNVrL2OXePjJau6J5eZ0rkjsq+oHeoTv tFBL3uBb0dUh5Pq8094i0zAr1NT+b+P1tm0uS+LNpeIoK3cAInQ7iP1xXQwTTHc4 epfh9mqpMtdeuQZTXT346IWgGb0DklVw/vs03s15yiiZhFVxqnXP0U1yIO6BZUTm Bi9vlbldWieP7RKg09WnxTmy5jgrEyo= -----END CERTIFICATE-----Generated at Tue Jul 22 19:40:21 2025 by rpki-client