$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/171a17c9-540c-3439-b32a-758a7c56ea1c.roa File: 171a17c9-540c-3439-b32a-758a7c56ea1c.roa (raw, json) Hash identifier: RIOlEcR+IhgMzCbOnixmda/Vid64QOEmnzfmEHeKVbU= Subject key identifier: FC:B4:2A:22:A2:D9:F4:33:F0:AE:B8:6D:51:FF:2B:3D:25:63:6B:4B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0CDC27FAB0D5B7EDDE81D8F0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/171a17c9-540c-3439-b32a-758a7c56ea1c.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.32.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:27:fa:b0:d5:b7:ed:de:81:d8:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=7f4f485a-ac7c-4a98-b945-44a6f216e583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:56:c3:91:a0:d1:f8:b1:83:a2:e1:dc:e9:4b: 08:d5:a2:eb:a5:10:c5:d8:1c:50:52:8f:b4:ec:05: 62:72:fe:e8:e4:cc:65:a4:97:b5:db:b8:e5:b5:06: 92:a6:2a:09:03:d6:bb:4f:f1:aa:89:96:76:d6:15: 11:3f:79:16:09:ef:99:53:a2:46:a4:bd:7d:75:41: e4:17:b9:33:96:ac:a7:cc:19:0e:7d:d4:30:43:ab: 1c:0a:9a:c3:b8:9b:5e:39:27:56:e3:f5:5d:f0:7b: 5c:db:58:d8:8d:c8:3e:86:0d:70:89:4a:4b:1f:a6: e9:c6:d1:01:e1:2d:b5:8e:b1:82:25:80:2c:df:f1: a7:73:cf:13:cb:20:26:0e:05:10:88:3a:07:cd:85: b6:ca:3b:f3:ef:72:48:f4:6f:95:28:25:ce:74:44: c3:20:38:4d:e8:f7:53:48:1f:79:cd:28:5d:6d:80: 9f:da:d5:5a:9a:dc:f5:dc:48:bb:be:09:a9:0b:00: 3a:90:30:90:43:a2:69:a5:0e:74:14:96:15:02:b1: c5:4f:73:33:cc:e1:f1:e4:69:c5:ca:c8:89:28:73: 7d:5d:d1:81:94:6d:ee:8b:18:66:1c:be:d1:6c:4a: c6:a0:e0:cb:1c:71:3b:d0:87:b8:b9:ea:5e:67:d9: 96:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B4:2A:22:A2:D9:F4:33:F0:AE:B8:6D:51:FF:2B:3D:25:63:6B:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/171a17c9-540c-3439-b32a-758a7c56ea1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:77:bf:68:a9:e3:6a:59:89:5f:97:35:50:78:fb:a7:08:27: 40:36:95:f1:d8:ba:d1:5c:e9:2d:45:20:40:1c:2b:17:47:56: 40:95:05:0a:07:b6:41:f4:a6:be:e8:5a:a9:72:bd:a4:3c:bd: 7a:54:83:f1:be:3c:76:66:e7:f9:b1:f7:d2:11:cf:43:85:14: b8:de:c6:7b:65:d5:47:0b:7c:37:8c:3d:a2:01:f7:7c:01:29: 8b:27:02:96:a8:a5:cf:82:32:5c:32:2e:fb:d9:ec:97:35:58: de:86:94:b5:10:82:ac:6f:7c:43:12:47:36:aa:5d:fc:35:30: 18:cc:cf:d4:35:df:45:e3:63:6b:40:c5:53:60:c6:e1:7f:4c: 89:e0:b8:b3:30:83:dd:72:c9:e3:37:ff:63:0c:04:2b:4d:ea: f9:d9:e6:16:28:29:ec:b3:6d:ea:e8:8a:ea:0a:41:33:ee:7c: 45:4c:0b:58:27:5f:60:78:1a:ad:c9:2c:13:a5:67:2b:68:68: 72:5e:95:b6:63:09:6d:16:5d:f7:46:2e:a4:d9:b8:32:c5:68: 0a:6b:23:00:b1:48:57:ce:9e:47:8d:5e:30:1f:1e:fb:11:4a: b1:f3:0f:97:92:67:cc:65:0a:b0:81:2e:aa:2b:6e:90:b7:80: a6:2c:e0:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3Cf6sNW37d6B2PAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk N2Y0ZjQ4NWEtYWM3Yy00YTk4LWI5NDUtNDRhNmYyMTZlNTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFbDkaDR+LGDouHc6UsI1aLrpRDF2BxQUo+0 7AVicv7o5MxlpJe127jltQaSpioJA9a7T/GqiZZ21hURP3kWCe+ZU6JGpL19dUHk F7kzlqynzBkOfdQwQ6scCprDuJteOSdW4/Vd8Htc21jYjcg+hg1wiUpLH6bpxtEB 4S21jrGCJYAs3/Gnc88TyyAmDgUQiDoHzYW2yjvz73JI9G+VKCXOdETDIDhN6PdT SB95zShdbYCf2tVamtz13Ei7vgmpCwA6kDCQQ6JppQ50FJYVArHFT3MzzOHx5GnF ysiJKHN9XdGBlG3uixhmHL7RbErGoODLHHE70Ie4uepeZ9mWhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPy0KiKi2fQz8K64bVH/Kz0lY2tLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTcxYTE3YzktNTQwYy0z NDM5LWIzMmEtNzU4YTdjNTZlYTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyD6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJV3v2ip42pZiV+XNVB4+6cIJ0A2lfHYutFc6S1FIEAcKxdHVkCVBQoH tkH0pr7oWqlyvaQ8vXpUg/G+PHZm5/mx99IRz0OFFLjexntl1UcLfDeMPaIB93wB KYsnApaopc+CMlwyLvvZ7Jc1WN6GlLUQgqxvfEMSRzaqXfw1MBjMz9Q130XjY2tA xVNgxuF/TInguLMwg91yyeM3/2MMBCtN6vnZ5hYoKeyzberoiuoKQTPufEVMC1gn X2B4Gq3JLBOlZytoaHJelbZjCW0WXfdGLqTZuDLFaAprIwCxSFfOnkeNXjAfHvsR SrHzD5eSZ8xlCrCBLqorbpC3gKYs4Gs= -----END CERTIFICATE-----Generated at Sat Sep 6 05:19:22 2025 by rpki-client