$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28464964-e18a-34dc-b99b-717ba0d7c5e6.roa File: 28464964-e18a-34dc-b99b-717ba0d7c5e6.roa (raw, json) Hash identifier: tTIHSOtC7PfOJUkyy8YbyEtfAVmRriljMWb8UOd8wvg= Subject key identifier: 13:02:ED:BF:6D:94:FA:E9:9A:C2:AD:9E:71:A8:6A:FA:FC:A3:B0:3D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0E415D65DC28807DE253D2C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28464964-e18a-34dc-b99b-717ba0d7c5e6.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 16625 IP address blocks: 23.35.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:5d:65:dc:28:80:7d:e2:53:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=60d994eb-7cb9-4d2b-8696-a66881abef60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:25:d4:7d:45:2e:a0:77:5d:86:9b:de:bd:48: 96:7d:fa:a8:10:05:b7:9e:7b:62:ba:3b:b1:ba:1a: 50:17:a3:10:8e:16:af:79:e9:35:c8:03:73:db:84: 0d:f4:80:6d:92:69:36:0e:84:86:69:11:97:b0:71: a2:c4:66:01:11:c1:86:04:52:71:63:03:ab:50:8e: 59:87:e9:db:a6:97:a1:42:1a:66:ce:77:e5:0a:49: c8:be:0f:b2:12:af:63:d3:17:4a:a8:2d:61:5d:6a: 91:49:39:36:48:7d:88:ad:c6:be:88:9e:e0:38:a6: 46:95:c5:46:25:33:f3:ae:b7:4b:47:41:51:4f:3e: 21:ac:ac:d4:57:e3:41:49:9f:a4:cc:41:50:c4:f7: 09:b2:62:7f:9c:71:12:98:57:2a:ab:35:ac:69:bf: 6e:6d:44:3d:93:1f:4f:b8:1a:42:22:69:22:e6:88: eb:7d:49:3f:0c:83:39:f8:15:9d:08:83:df:27:01: 19:9f:98:d7:46:2d:2e:3e:22:54:c5:28:04:72:fd: 04:5e:14:ab:06:cf:bf:9c:3c:e8:70:bf:1f:2d:f8: d8:ab:af:9d:a9:47:07:20:84:88:37:d0:a9:33:ca: ea:de:fd:12:db:cb:92:22:cb:30:bd:d3:d2:dc:dc: d7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:02:ED:BF:6D:94:FA:E9:9A:C2:AD:9E:71:A8:6A:FA:FC:A3:B0:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28464964-e18a-34dc-b99b-717ba0d7c5e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:b1:33:c4:7d:3f:b8:4a:0e:69:f2:c2:68:e4:2d:d9:8e:19: 19:12:bc:69:95:71:57:85:4d:49:e7:e6:12:72:0c:97:17:b2: 6d:66:35:5d:70:20:e4:8f:5c:ce:34:87:3b:0e:17:70:41:49: ce:a1:99:2c:a9:ea:6f:1f:85:36:db:19:2a:9b:ba:a4:c0:17: 0e:ab:c6:a9:1a:e8:af:ab:2f:a4:6b:a2:27:3a:10:9c:43:9b: 0d:58:8a:0d:5b:5b:ad:bb:f1:09:5e:3d:81:58:c6:4b:79:6a: b9:8f:85:8f:52:2d:9d:0d:f1:37:51:93:f6:04:c8:4b:9d:3c: 77:af:aa:31:01:26:75:66:0e:83:09:0b:7c:d7:3f:3f:a8:92: ad:fd:34:23:e5:67:05:c2:f4:7d:0a:ce:3d:17:51:e8:a6:0e: 75:dd:a9:83:62:c9:b6:8d:57:60:a8:ba:bf:ad:fa:8e:66:e2: c9:9a:4a:83:d8:d8:03:e6:76:ab:fb:38:0a:1e:9c:a2:96:43: 30:1f:c3:17:72:01:4c:97:48:30:1a:09:09:26:00:3a:e0:91: d1:d8:d5:9c:eb:b9:fa:e4:af:80:07:63:c9:d3:b9:67:bc:04: 6d:e9:f1:f2:03:24:48:d4:e2:e0:22:9f:32:77:60:30:f9:1d: 07:ac:90:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQV1l3CiAfeJT0sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk NjBkOTk0ZWItN2NiOS00ZDJiLTg2OTYtYTY2ODgxYWJlZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCXUfUUuoHddhpvevUiWffqoEAW3nntiujux uhpQF6MQjhaveek1yANz24QN9IBtkmk2DoSGaRGXsHGixGYBEcGGBFJxYwOrUI5Z h+nbppehQhpmznflCknIvg+yEq9j0xdKqC1hXWqRSTk2SH2Irca+iJ7gOKZGlcVG JTPzrrdLR0FRTz4hrKzUV+NBSZ+kzEFQxPcJsmJ/nHESmFcqqzWsab9ubUQ9kx9P uBpCImki5ojrfUk/DIM5+BWdCIPfJwEZn5jXRi0uPiJUxSgEcv0EXhSrBs+/nDzo cL8fLfjYq6+dqUcHIISIN9CpM8rq3v0S28uSIsswvdPS3NzXxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMC7b9tlPrpmsKtnnGoavr8o7A9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjg0NjQ5NjQtZTE4YS0z NGRjLWI5OWItNzE3YmEwZDdjNWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyP8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOxM8R9P7hKDmnywmjkLdmOGRkSvGmVcVeFTUnn5hJyDJcXsm1mNV1w IOSPXM40hzsOF3BBSc6hmSyp6m8fhTbbGSqbuqTAFw6rxqka6K+rL6Rroic6EJxD mw1Yig1bW6278QlePYFYxkt5armPhY9SLZ0N8TdRk/YEyEudPHevqjEBJnVmDoMJ C3zXPz+okq39NCPlZwXC9H0Kzj0XUeimDnXdqYNiybaNV2Cour+t+o5m4smaSoPY 2APmdqv7OAoenKKWQzAfwxdyAUyXSDAaCQkmADrgkdHY1Zzrufrkr4AHY8nTuWe8 BG3p8fIDJEjU4uAinzJ3YDD5HQeskIM= -----END CERTIFICATE-----Generated at Sat Sep 6 14:20:48 2025 by rpki-client