$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2dfb0fa5-e063-35db-84f3-e8017a6b0971.roa File: 2dfb0fa5-e063-35db-84f3-e8017a6b0971.roa (raw, json) Hash identifier: TO+PvwVhfzq6DQqDW8mgerPtjg9brvjKyrZey2IINv4= Subject key identifier: 72:75:70:99:75:19:38:42:C2:78:0E:38:B6:47:83:06:06:31:BB:E0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0B76CD1933ED63709B89A111 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2dfb0fa5-e063-35db-84f3-e8017a6b0971.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.63.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:cd:19:33:ed:63:70:9b:89:a1:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=2202286a-da6a-4eda-aaad-5b445e37a198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f6:4e:de:ca:d3:d5:de:65:8c:0e:08:92:61: 66:18:c9:27:c2:00:b0:29:87:43:70:77:6b:08:e6: 1c:27:b1:6d:ea:63:40:d6:a5:a9:aa:7d:c3:e4:78: 99:b8:b4:e6:53:ea:49:d2:66:5d:77:e5:81:89:93: b8:9e:1f:cd:9e:90:f8:ff:8d:d2:f8:50:b4:87:63: 04:f9:39:cb:7e:b1:9d:2c:91:f8:63:94:20:f8:6e: e1:58:34:d9:e3:fb:02:63:52:64:36:9a:a2:bf:94: bc:0d:53:41:08:cd:90:d6:36:f3:b3:e3:15:97:69: 92:b5:fe:c7:8f:45:bc:7f:de:ab:6b:b5:bc:fb:80: 6f:10:80:62:6a:85:04:f9:c6:7a:27:78:8a:6f:9f: f5:c7:9d:c6:c3:b9:ab:9f:e7:d4:05:69:05:ec:29: 7f:42:62:89:2b:5b:98:a3:9b:1f:3a:1d:9d:5d:0b: b5:20:40:0c:5e:54:7f:12:00:e1:0c:71:26:ba:42: 62:5e:45:7c:1b:17:1b:5d:e8:29:f2:ee:03:2c:2e: dd:82:b3:fe:9b:40:79:de:bb:04:bd:09:50:10:da: e6:e7:d7:85:34:d0:f0:de:28:3f:2e:61:f4:64:b4: 91:2f:e0:b7:ac:e0:1e:ad:87:7f:f2:6e:ad:9b:b2: 84:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:75:70:99:75:19:38:42:C2:78:0E:38:B6:47:83:06:06:31:BB:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2dfb0fa5-e063-35db-84f3-e8017a6b0971.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.63.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:8b:43:6e:cf:ec:a1:46:99:5f:97:80:40:46:e2:9d:08:b5: cf:0e:1c:d1:ea:45:97:a2:a0:2b:34:e2:ed:47:56:c7:db:e9: 49:10:bc:c9:10:15:0b:64:e8:f6:74:be:af:45:2c:bc:a1:bf: 78:96:b4:65:68:e0:dd:c0:1d:4a:6a:05:81:49:55:2b:d7:33: a1:d9:87:60:f5:0a:f4:30:81:db:26:53:2c:0c:60:50:4b:88: 45:6a:46:6a:ff:e5:76:17:2b:8b:4d:f3:34:e8:55:7f:fa:69: 7c:11:fd:5b:68:85:4c:6a:f0:dc:3d:7c:ab:69:1c:cb:41:22: 57:f1:09:f1:69:57:76:5c:67:e0:b9:6f:d5:b0:8a:67:b7:86: 48:c7:61:e2:34:02:bf:7a:84:85:52:ee:1c:be:80:bd:ec:6e: 1b:a2:43:86:9f:03:4d:ea:ca:d0:bb:bb:5e:80:54:3c:45:23: 28:c2:a4:82:e4:83:2e:24:f3:07:1c:49:e7:3a:73:2d:51:2e: 3f:21:0c:40:76:33:32:c2:d2:68:7f:7f:f8:71:77:ad:19:12: a8:e5:68:df:d2:d7:23:3b:02:4f:1b:4d:25:9e:8a:c8:c3:62: 5c:91:90:2d:96:8d:1c:3d:b0:f9:41:0b:a0:8d:14:e6:a4:ca: 9f:79:09:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLds0ZM+1jcJuJoREwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MjIwMjI4NmEtZGE2YS00ZWRhLWFhYWQtNWI0NDVlMzdhMTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfZO3srT1d5ljA4IkmFmGMknwgCwKYdDcHdr COYcJ7Ft6mNA1qWpqn3D5HiZuLTmU+pJ0mZdd+WBiZO4nh/NnpD4/43S+FC0h2ME +TnLfrGdLJH4Y5Qg+G7hWDTZ4/sCY1JkNpqiv5S8DVNBCM2Q1jbzs+MVl2mStf7H j0W8f96ra7W8+4BvEIBiaoUE+cZ6J3iKb5/1x53Gw7mrn+fUBWkF7Cl/QmKJK1uY o5sfOh2dXQu1IEAMXlR/EgDhDHEmukJiXkV8GxcbXegp8u4DLC7dgrP+m0B53rsE vQlQENrm59eFNNDw3ig/LmH0ZLSRL+C3rOAerYd/8m6tm7KE6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJ1cJl1GThCwngOOLZHgwYGMbvgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmRmYjBmYTUtZTA2My0z NWRiLTg0ZjMtZTgwMTdhNmIwOTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFz8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+LQ27P7KFGmV+XgEBG4p0Itc8OHNHqRZeioCs04u1HVsfb6UkQvMkQ FQtk6PZ0vq9FLLyhv3iWtGVo4N3AHUpqBYFJVSvXM6HZh2D1CvQwgdsmUywMYFBL iEVqRmr/5XYXK4tN8zToVX/6aXwR/VtohUxq8Nw9fKtpHMtBIlfxCfFpV3ZcZ+C5 b9Wwime3hkjHYeI0Ar96hIVS7hy+gL3sbhuiQ4afA03qytC7u16AVDxFIyjCpILk gy4k8wccSec6cy1RLj8hDEB2MzLC0mh/f/hxd60ZEqjlaN/S1yM7Ak8bTSWeisjD YlyRkC2WjRw9sPlBC6CNFOakyp95CTA= -----END CERTIFICATE-----Generated at Sat Sep 6 05:05:34 2025 by rpki-client