$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6aba9ff9-7b48-324d-ab22-4e1654cf0560.roa File: 6aba9ff9-7b48-324d-ab22-4e1654cf0560.roa (raw, json) Hash identifier: FOBq80IPTs+mxkIxR0p7h3BJgV/h1bZWeB2jYmLFzMQ= Subject key identifier: 98:07:6D:5E:34:97:1F:3D:82:63:45:1C:69:4C:3A:4E:F5:69:75:66 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AFC1C1B1A706717D2E7CE1B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6aba9ff9-7b48-324d-ab22-4e1654cf0560.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 7713 IP address blocks: 23.38.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:1b:1a:70:67:17:d2:e7:ce:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=e98ffcee-aa6b-41e6-a079-8c9c21d6df1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cf:c3:4f:f6:cf:cf:59:cb:5c:b3:72:83:56: 99:10:77:91:88:9b:c1:2a:3c:92:c9:d0:18:69:e8: d3:e7:16:26:eb:6d:1f:6f:50:d6:75:9b:13:16:72: 44:5c:49:8b:2f:54:3c:45:5c:e9:11:32:8f:1c:90: 0a:8d:8e:0c:28:02:8f:35:3f:9e:12:0a:92:5a:56: 44:66:f2:9b:63:c8:2b:65:68:0c:c4:af:65:48:4e: f9:a5:fe:5b:0e:83:33:ec:16:65:ab:dd:4c:90:72: f3:3c:78:65:5e:50:fd:86:fb:57:79:13:d2:ab:a0: 1c:5c:cc:53:57:a2:0e:2e:fd:7c:70:8c:9d:e0:a3: 79:b9:10:19:d0:01:e9:77:1b:bd:f2:a6:c5:29:35: 67:0e:e9:f4:dc:28:28:68:b4:b1:23:b1:26:92:19: 77:b2:e0:59:20:f3:67:2a:9b:f7:70:17:8f:5e:fa: e6:26:18:22:7a:bb:4e:a2:4d:59:03:9a:18:ec:69: 30:cc:c8:ee:8d:22:a1:11:2d:7b:50:79:15:60:c6: 4c:d9:2e:aa:9b:83:a0:14:70:83:c2:d7:71:0e:90: 8f:01:d9:83:43:57:f2:cf:96:b4:fa:72:82:8c:f7: fe:38:31:80:5b:53:bd:38:04:fd:c4:7c:e6:1a:b7: 6a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:07:6D:5E:34:97:1F:3D:82:63:45:1C:69:4C:3A:4E:F5:69:75:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6aba9ff9-7b48-324d-ab22-4e1654cf0560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:5a:12:82:35:8c:fe:7d:52:65:01:86:85:3b:63:a9:54:3d: f7:0e:99:74:35:71:96:e8:c6:25:e1:a7:3f:40:c4:4a:1f:b7: f5:c1:ec:73:02:ac:d9:65:3b:88:de:24:05:35:b3:2c:49:66: e6:cd:6e:e9:a5:48:19:29:a5:87:69:1b:95:12:6e:04:b1:97: e5:77:47:d7:e0:5a:8c:b9:6e:d4:e8:21:02:0d:d1:49:ad:c6: 40:63:20:b0:d4:b3:6f:87:89:4c:f8:bb:d1:65:b3:e9:cb:b0: 82:e0:c9:36:8c:89:35:85:d3:bc:68:85:86:ad:e7:fb:92:99: f9:7a:df:9f:d3:ce:be:f4:c3:42:ee:1c:31:1a:58:c7:e3:65: a6:da:e4:8c:e3:1f:b6:98:5c:6a:df:ec:01:9c:16:fd:ff:0a: e6:0e:1d:3c:a3:3b:e0:10:66:fb:5d:04:d9:9c:f2:68:eb:c6: f8:2d:ff:3c:85:76:66:fb:83:9e:c8:29:73:71:04:af:27:e7: 91:72:21:5b:50:ad:45:2e:7e:70:a0:e5:8d:06:57:e6:6d:3e: ab:90:b7:07:18:f1:42:96:dc:21:28:3f:d8:bd:71:30:49:b5: 65:f1:2b:7f:30:22:32:04:f3:7b:e3:32:ad:47:7c:15:d2:8c: 03:d0:45:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HBsacGcX0ufOG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZTk4ZmZjZWUtYWE2Yi00MWU2LWEwNzktOGM5YzIxZDZkZjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM/DT/bPz1nLXLNyg1aZEHeRiJvBKjySydAY aejT5xYm620fb1DWdZsTFnJEXEmLL1Q8RVzpETKPHJAKjY4MKAKPNT+eEgqSWlZE ZvKbY8grZWgMxK9lSE75pf5bDoMz7BZlq91MkHLzPHhlXlD9hvtXeRPSq6AcXMxT V6IOLv18cIyd4KN5uRAZ0AHpdxu98qbFKTVnDun03CgoaLSxI7Emkhl3suBZIPNn Kpv3cBePXvrmJhgiertOok1ZA5oY7GkwzMjujSKhES17UHkVYMZM2S6qm4OgFHCD wtdxDpCPAdmDQ1fyz5a0+nKCjPf+ODGAW1O9OAT9xHzmGrdq0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgHbV40lx89gmNFHGlMOk71aXVmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmFiYTlmZjktN2I0OC0z MjRkLWFiMjItNGUxNjU0Y2YwNTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFybDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtaEoI1jP59UmUBhoU7Y6lUPfcOmXQ1cZboxiXhpz9AxEoft/XB7HMC rNllO4jeJAU1syxJZubNbumlSBkppYdpG5USbgSxl+V3R9fgWoy5btToIQIN0Umt xkBjILDUs2+HiUz4u9Fls+nLsILgyTaMiTWF07xohYat5/uSmfl635/Tzr70w0Lu HDEaWMfjZaba5IzjH7aYXGrf7AGcFv3/CuYOHTyjO+AQZvtdBNmc8mjrxvgt/zyF dmb7g57IKXNxBK8n55FyIVtQrUUufnCg5Y0GV+ZtPquQtwcY8UKW3CEoP9i9cTBJ tWXxK38wIjIE83vjMq1HfBXSjAPQReo= -----END CERTIFICATE-----Generated at Sat Sep 6 05:14:00 2025 by rpki-client