$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a8c35cb-f7c4-3793-9e6c-7a6b8b7c355d.roa File: 4a8c35cb-f7c4-3793-9e6c-7a6b8b7c355d.roa (raw, json) Hash identifier: a1qL9k7eAem7fiwE8Sb/P4FLubLImJj6DaekV5e2Ea0= Subject key identifier: 09:B3:DC:9C:E3:2E:C6:B4:1D:CA:87:15:3A:A6:40:69:50:93:B7:9D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0CDC251B0E41B9CB2B437238 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a8c35cb-f7c4-3793-9e6c-7a6b8b7c355d.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.32.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:25:1b:0e:41:b9:cb:2b:43:72:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=740c9399-9d12-4985-b980-b4617ccc3469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c4:47:e2:b2:7b:f3:0a:bf:bf:ce:19:29:25: 1f:1c:08:27:0a:0d:ae:48:ba:5c:5a:b7:f5:7e:84: 33:c0:67:c5:cc:e9:48:07:d5:32:98:3f:62:a2:3f: 93:01:62:f4:ba:6d:9d:ca:01:01:ad:29:34:9a:0c: 62:de:15:7b:d1:da:46:e8:5c:88:a9:97:19:14:b1: 67:fa:d3:a3:0f:85:1d:51:39:50:7e:38:c7:49:38: 69:04:58:72:78:e9:a3:43:95:2b:00:d4:1b:56:9c: 82:80:31:97:8c:60:36:08:a3:bf:d2:35:ae:9b:ad: dc:c3:e6:51:ff:a2:83:9d:13:4e:45:82:26:63:b5: cf:79:f9:2f:22:6e:f0:a6:21:fd:48:06:1e:24:86: 07:7b:e1:a0:49:db:2c:e0:87:67:f1:03:b0:08:0f: 75:ef:c9:4f:d4:f7:14:33:fa:4b:06:f7:fc:36:28: e8:33:0d:1b:85:5a:d6:c7:0c:39:46:23:1c:ee:52: ad:c7:57:4d:a1:21:b2:f0:d9:76:5b:88:47:ab:98: 88:77:a2:d4:dd:f9:08:33:83:f2:4d:f5:e5:8d:a3: 54:8a:c8:e2:f7:6c:78:3d:70:e6:72:fa:ed:d6:26: 79:a2:9c:9d:08:fa:d4:49:58:f8:bf:50:dc:19:8b: f9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B3:DC:9C:E3:2E:C6:B4:1D:CA:87:15:3A:A6:40:69:50:93:B7:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a8c35cb-f7c4-3793-9e6c-7a6b8b7c355d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:93:bf:56:ca:c8:63:6c:ad:85:c4:75:43:8b:8d:35:bd:3e: 6c:18:a9:f4:7c:f1:15:d4:94:66:e1:21:75:36:17:8f:96:ef: 1c:3d:9a:28:71:48:34:33:ae:4d:d9:5e:b2:1b:07:3b:d5:49: d8:ac:5b:fb:8c:55:72:a2:94:3f:05:13:81:32:b8:74:ff:92: 63:b1:73:f9:8f:e3:3c:b4:7b:e9:8f:03:09:02:dd:53:f7:00: 2c:78:0c:f0:3f:c3:f1:2c:8d:bb:b2:77:94:d4:64:0a:26:4e: fd:ab:25:01:fc:68:8b:86:49:c6:11:e8:17:46:5a:bc:f1:01: f2:13:71:6f:90:02:11:8e:75:f6:c5:c1:a5:78:cf:da:8e:54: de:30:9c:f6:99:08:0f:7b:93:2b:47:d5:17:2b:5c:c0:78:d3: e2:30:25:d1:ac:97:d9:f5:d0:0d:23:91:56:7d:b8:b9:48:3e: b6:fc:b8:62:4c:4b:05:25:4e:92:5c:ef:9b:e6:cc:74:b0:fc: 16:38:34:c3:ef:bb:0a:07:0e:df:34:42:80:a0:9a:4a:ea:26: aa:d1:71:3a:8a:e9:cf:92:c4:be:0a:68:19:e7:e6:d2:4b:28: 87:c2:d9:02:c6:1f:2d:c2:04:be:be:83:17:a6:aa:a9:44:7d: 9a:2f:f4:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3CUbDkG5yytDcjgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk NzQwYzkzOTktOWQxMi00OTg1LWI5ODAtYjQ2MTdjY2MzNDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicRH4rJ78wq/v84ZKSUfHAgnCg2uSLpcWrf1 foQzwGfFzOlIB9UymD9ioj+TAWL0um2dygEBrSk0mgxi3hV70dpG6FyIqZcZFLFn +tOjD4UdUTlQfjjHSThpBFhyeOmjQ5UrANQbVpyCgDGXjGA2CKO/0jWum63cw+ZR /6KDnRNORYImY7XPefkvIm7wpiH9SAYeJIYHe+GgSdss4Idn8QOwCA9178lP1PcU M/pLBvf8NijoMw0bhVrWxww5RiMc7lKtx1dNoSGy8Nl2W4hHq5iId6LU3fkIM4Py TfXljaNUisji92x4PXDmcvrt1iZ5opydCPrUSVj4v1DcGYv5hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmz3JzjLsa0HcqHFTqmQGlQk7edMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGE4YzM1Y2ItZjdjNC0z NzkzLTllNmMtN2E2YjhiN2MzNTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyA8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqTv1bKyGNsrYXEdUOLjTW9PmwYqfR88RXUlGbhIXU2F4+W7xw9mihx SDQzrk3ZXrIbBzvVSdisW/uMVXKilD8FE4EyuHT/kmOxc/mP4zy0e+mPAwkC3VP3 ACx4DPA/w/Esjbuyd5TUZAomTv2rJQH8aIuGScYR6BdGWrzxAfITcW+QAhGOdfbF waV4z9qOVN4wnPaZCA97kytH1RcrXMB40+IwJdGsl9n10A0jkVZ9uLlIPrb8uGJM SwUlTpJc75vmzHSw/BY4NMPvuwoHDt80QoCgmkrqJqrRcTqK6c+SxL4KaBnn5tJL KIfC2QLGHy3CBL6+gxemqqlEfZov9PE= -----END CERTIFICATE-----Generated at Sat Sep 6 01:17:28 2025 by rpki-client