$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0970f64a-52b7-3f4d-a76d-0b87fa5cb7dd.roa File: 0970f64a-52b7-3f4d-a76d-0b87fa5cb7dd.roa (raw, json) Hash identifier: Gi+U8O4h0j7aBYX2nkEktRYlVfFb6p0xr+t10wuSOFo= Subject key identifier: 8F:69:5E:5F:E2:61:B3:B2:25:D7:20:8E:C4:95:C2:23:77:E0:33:51 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0CDC2619DC3860F079DD0740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0970f64a-52b7-3f4d-a76d-0b87fa5cb7dd.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.32.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:26:19:dc:38:60:f0:79:dd:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=1a3f2a55-1c7d-4b89-86a1-60ad59a357dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:67:a0:d4:e7:75:6f:04:12:d8:8b:ef:5c:75: d8:3e:4a:8c:ce:80:d6:ae:33:04:31:e2:c4:27:e7: e6:c1:bb:38:4a:9a:1d:88:d9:fb:27:17:9c:f6:ee: 3b:c3:64:73:9b:9d:64:13:6d:ec:c6:d4:e7:fd:08: 65:31:49:20:d0:84:2f:0b:93:39:9d:a7:b8:a5:f4: 32:28:b1:6f:a2:3a:54:54:ea:9f:13:f9:69:45:38: f3:a5:1e:a8:01:70:e3:49:be:88:95:3b:8d:c5:47: 27:e4:5a:02:3f:67:7a:2f:3a:28:51:e8:74:5f:29: d4:32:17:c5:5c:74:93:b6:d2:2a:1d:a2:7a:c5:18: 03:4a:bc:10:08:0e:1f:48:5b:6b:32:bd:3b:5c:d8: 35:34:6a:1e:15:97:ca:0c:06:3c:87:78:c8:96:76: 92:38:de:da:09:92:78:60:84:d2:f8:9d:98:d0:0c: a4:e2:b5:73:d8:c4:63:10:a6:5e:e8:1d:9f:b9:79: d6:2f:35:fc:04:52:8c:20:86:1a:e0:23:6e:80:a7: 01:e7:db:49:14:25:fb:e2:23:62:30:74:a9:1e:2f: 45:21:e6:a7:81:fe:63:5f:a4:af:3a:57:f0:aa:e9: 6b:d1:b8:3f:1d:88:5e:e0:53:c0:54:4b:a3:b8:e4: 7f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:69:5E:5F:E2:61:B3:B2:25:D7:20:8E:C4:95:C2:23:77:E0:33:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0970f64a-52b7-3f4d-a76d-0b87fa5cb7dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:f9:38:df:71:da:38:ae:bc:bd:bd:20:12:e5:2c:5c:dd:36: 6f:e4:6b:95:54:86:08:bc:c0:6d:c9:be:77:e8:c3:f7:17:59: 3d:74:b8:3b:0b:b1:58:82:c6:99:80:2e:f7:73:d6:ea:e9:da: 5b:71:af:56:b8:74:49:16:dd:e6:10:2b:14:51:5e:59:a7:65: 11:62:7d:7e:0a:cd:d5:81:78:5c:8d:4e:3f:49:58:4a:52:5a: 37:2f:13:26:c6:d9:c8:27:1a:9f:d1:ca:ba:91:88:77:9f:ca: d4:9e:75:8c:15:04:73:30:af:9d:07:cc:ca:3a:d2:1f:5a:ea: cd:ab:09:df:5e:48:80:0d:72:95:5d:77:59:d2:74:a5:92:5b: ac:39:2f:de:30:fd:51:10:87:7b:73:bd:6a:da:40:0f:36:21: e5:72:52:9d:cb:e5:1e:41:33:ef:e4:44:17:b6:47:41:fc:53: 19:7c:d2:a4:c0:1f:c2:91:d5:17:48:c4:57:07:ad:12:2d:22: 7c:c4:b0:ad:f6:7f:bf:6e:c2:0a:cc:1a:9f:96:e0:d4:60:4a: d1:02:f1:d6:79:90:10:33:e1:a5:b1:bb:fc:bf:81:20:20:eb: 3e:40:70:71:5d:d2:b6:cb:6d:8f:4d:a7:a4:b6:dc:c1:3b:23: be:6f:50:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3CYZ3Dhg8HndB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk MWEzZjJhNTUtMWM3ZC00Yjg5LTg2YTEtNjBhZDU5YTM1N2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2eg1Od1bwQS2IvvXHXYPkqMzoDWrjMEMeLE J+fmwbs4SpodiNn7Jxec9u47w2Rzm51kE23sxtTn/QhlMUkg0IQvC5M5nae4pfQy KLFvojpUVOqfE/lpRTjzpR6oAXDjSb6IlTuNxUcn5FoCP2d6LzooUeh0XynUMhfF XHSTttIqHaJ6xRgDSrwQCA4fSFtrMr07XNg1NGoeFZfKDAY8h3jIlnaSON7aCZJ4 YITS+J2Y0Ayk4rVz2MRjEKZe6B2fuXnWLzX8BFKMIIYa4CNugKcB59tJFCX74iNi MHSpHi9FIeangf5jX6SvOlfwqulr0bg/HYhe4FPAVEujuOR//QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9pXl/iYbOyJdcgjsSVwiN34DNRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDk3MGY2NGEtNTJiNy0z ZjRkLWE3NmQtMGI4N2ZhNWNiN2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyBsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIL5ON9x2jiuvL29IBLlLFzdNm/ka5VUhgi8wG3Jvnfow/cXWT10uDsL sViCxpmALvdz1urp2ltxr1a4dEkW3eYQKxRRXlmnZRFifX4KzdWBeFyNTj9JWEpS WjcvEybG2cgnGp/RyrqRiHefytSedYwVBHMwr50HzMo60h9a6s2rCd9eSIANcpVd d1nSdKWSW6w5L94w/VEQh3tzvWraQA82IeVyUp3L5R5BM+/kRBe2R0H8Uxl80qTA H8KR1RdIxFcHrRItInzEsK32f79uwgrMGp+W4NRgStEC8dZ5kBAz4aWxu/y/gSAg 6z5AcHFd0rbLbY9Np6S23ME7I75vUAc= -----END CERTIFICATE-----Generated at Sat Sep 6 05:05:50 2025 by rpki-client