$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f68b3634-f1fc-3058-add1-656f80c7176c.roa File: f68b3634-f1fc-3058-add1-656f80c7176c.roa (raw, json) Hash identifier: z8TxOdkOUVcbNWdsazQZHGQva9Dp5Mmf5dl8Ntxf4fc= Subject key identifier: DE:9E:4E:17:A0:B2:8C:A1:6E:BC:17:73:A5:0A:B5:B7:C4:B1:BF:18 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A90A10C2BEC841094217EF600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f68b3634-f1fc-3058-add1-656f80c7176c.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 20940 IP address blocks: 23.32.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:0c:2b:ec:84:10:94:21:7e:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=b750157a-957d-46f5-8029-30c0765743d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ba:e9:87:02:16:94:6c:aa:dd:ef:dc:9e:1f: b9:c4:18:6e:4f:72:32:b1:24:0d:56:e3:de:3f:78: 90:89:dc:08:5a:a9:d0:da:2a:ab:8c:70:91:44:2f: aa:ec:bc:f8:33:4a:94:c0:85:e7:c6:45:1f:03:25: f5:d6:86:09:59:37:db:63:a5:02:e0:62:15:db:f3: 7b:dd:f0:9c:90:d7:8c:0f:9f:7f:fa:7d:3c:58:ce: 3b:78:ee:e3:80:19:bd:e2:78:6a:37:11:5a:3e:d8: ca:c3:e3:cb:05:56:19:7a:3f:95:94:c2:aa:a2:69: fc:98:2b:d5:48:cb:72:58:d5:f5:f8:a7:0b:88:1f: c6:0a:b5:74:cf:2c:b8:c8:0a:c4:16:00:44:64:0b: 78:1c:04:8f:65:52:7f:f5:bf:ba:a6:8c:1f:43:56: 22:28:a8:a7:54:43:91:74:0d:74:22:1a:e0:f5:b1: f9:4d:54:7a:d9:c8:3b:bd:5a:cf:d7:a7:67:ee:26: a2:99:8d:8d:aa:bc:f1:4a:86:27:30:ad:09:d6:98: 81:f7:56:d9:16:7d:dc:2f:fc:5a:06:e0:09:01:19: 68:60:d7:0e:90:5f:df:76:ac:37:e1:ae:08:c0:0a: d9:db:f9:7f:02:96:98:cf:a0:7f:13:77:7c:91:d3: ed:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9E:4E:17:A0:B2:8C:A1:6E:BC:17:73:A5:0A:B5:B7:C4:B1:BF:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f68b3634-f1fc-3058-add1-656f80c7176c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:94:9a:24:e7:fb:9f:43:fb:c7:88:b7:ce:19:58:07:86:4a: 4a:c8:b1:82:b2:93:3d:c6:46:df:2f:4a:fc:1a:2a:de:08:42: fb:48:e2:ce:d8:87:2e:95:66:11:ad:63:dd:a4:e3:d1:2a:be: d5:3b:69:27:5b:4f:12:40:52:a3:6d:7e:73:52:d8:3d:ff:eb: 85:d1:eb:f9:82:67:ca:1b:c8:43:5a:e5:08:98:15:24:f0:e1: 81:ba:1d:3b:77:c2:2d:37:c8:c4:74:7f:a8:da:cc:fb:19:af: ca:db:f3:45:d1:c6:77:b8:06:50:6b:96:90:d7:00:b1:7e:ae: db:60:52:33:51:13:4e:51:6c:03:f1:33:9d:80:28:b9:7a:d1: aa:49:f9:f8:e8:85:45:60:2c:15:96:ba:fe:e3:1d:72:e0:0b: 1e:06:7f:99:8b:c7:5b:bc:ab:eb:61:e0:89:1f:21:5f:7b:b8: 4d:a0:1f:e8:c5:20:af:fd:26:ef:35:ed:48:72:1a:c3:5d:39: ad:73:80:46:51:ac:8a:df:61:15:d1:43:27:65:67:ae:49:08: f7:3d:d5:8b:6b:ad:2f:54:46:8c:8a:f6:a5:59:46:f1:60:a0: 77:68:4e:fe:12:e5:83:5e:80:29:42:ad:27:fd:39:2c:4c:c8: b1:50:a5:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoQwr7IQQlCF+9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk Yjc1MDE1N2EtOTU3ZC00NmY1LTgwMjktMzBjMDc2NTc0M2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07rphwIWlGyq3e/cnh+5xBhuT3IysSQNVuPe P3iQidwIWqnQ2iqrjHCRRC+q7Lz4M0qUwIXnxkUfAyX11oYJWTfbY6UC4GIV2/N7 3fCckNeMD59/+n08WM47eO7jgBm94nhqNxFaPtjKw+PLBVYZej+VlMKqomn8mCvV SMtyWNX1+KcLiB/GCrV0zyy4yArEFgBEZAt4HASPZVJ/9b+6powfQ1YiKKinVEOR dA10Ihrg9bH5TVR62cg7vVrP16dn7iaimY2NqrzxSoYnMK0J1piB91bZFn3cL/xa BuAJARloYNcOkF/fdqw34a4IwArZ2/l/ApaYz6B/E3d8kdPtdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6eThegsoyhbrwXc6UKtbfEsb8YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjY4YjM2MzQtZjFmYy0z MDU4LWFkZDEtNjU2ZjgwYzcxNzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeUmiTn+59D+8eIt84ZWAeGSkrIsYKykz3GRt8vSvwaKt4IQvtI4s7Y hy6VZhGtY92k49EqvtU7aSdbTxJAUqNtfnNS2D3/64XR6/mCZ8obyENa5QiYFSTw 4YG6HTt3wi03yMR0f6jazPsZr8rb80XRxne4BlBrlpDXALF+rttgUjNRE05RbAPx M52AKLl60apJ+fjohUVgLBWWuv7jHXLgCx4Gf5mLx1u8q+th4IkfIV97uE2gH+jF IK/9Ju817UhyGsNdOa1zgEZRrIrfYRXRQydlZ65JCPc91YtrrS9URoyK9qVZRvFg oHdoTv4S5YNegClCrSf9OSxMyLFQpaY= -----END CERTIFICATE-----Generated at Tue Jul 22 19:31:06 2025 by rpki-client