$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/75d8c6f2-a718-390d-a00b-f629b43e3954.roa File: 75d8c6f2-a718-390d-a00b-f629b43e3954.roa (raw, json) Hash identifier: 9hhLX1qX/ycD7IcK1elAcbcwlpyR1/NjkR6FaP7DAVU= Subject key identifier: 8E:3F:D4:AC:7D:4D:A2:9E:61:3C:32:40:9E:BE:E0:00:2A:65:09:1E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0E41635CF66BFA168B7DD7D0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/75d8c6f2-a718-390d-a00b-f629b43e3954.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.35.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:63:5c:f6:6b:fa:16:8b:7d:d7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=59f57e42-81f7-43f1-a553-29241d6d435c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:75:86:b3:97:3a:5a:0d:83:1f:5c:aa:83:85: c5:f0:64:95:4d:9e:61:f3:9d:7c:62:1b:42:e4:60: 95:01:de:b4:a0:da:f3:aa:4e:0b:f0:49:e5:c9:3e: 31:f6:85:27:68:02:3c:15:5a:23:60:dc:7a:53:2f: 03:90:f9:81:47:5d:e9:ab:78:78:11:d5:f4:c8:34: c7:1d:4f:f1:fb:92:26:b6:d1:f5:15:7b:32:91:97: e9:79:e9:93:0a:db:ad:5f:67:ce:ec:7f:0e:e7:ba: 19:ab:5f:de:67:0d:23:92:6a:46:f4:66:02:0d:76: f6:4e:ad:da:6a:b3:08:4e:e4:1b:5d:83:4b:7a:be: 49:52:63:21:b2:7c:22:76:bc:70:76:08:ed:a6:73: 31:0a:b7:7b:e0:4f:ed:ce:dd:de:6d:be:b1:26:5b: 52:56:70:86:08:c8:26:2d:c5:7a:a6:81:89:bd:09: 6c:9f:8d:d5:51:8a:89:35:8f:94:79:28:b2:b7:a1: 6f:1d:90:d0:7d:c6:14:9c:ea:6e:3e:17:a5:b4:5e: 30:69:8e:83:88:f6:87:3a:e1:f0:c2:18:4d:66:e3: 65:56:36:01:42:7c:36:12:fa:46:50:48:bf:f1:2c: 70:57:50:58:d0:44:bd:e6:0e:96:14:e5:82:71:80: 97:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:3F:D4:AC:7D:4D:A2:9E:61:3C:32:40:9E:BE:E0:00:2A:65:09:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/75d8c6f2-a718-390d-a00b-f629b43e3954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:5c:7a:81:00:90:9a:2b:48:31:69:2b:8c:74:a5:6c:ca:26: 4d:12:83:4e:59:c8:1d:78:4e:d8:64:f1:40:84:08:17:b1:fd: 52:cc:8b:a0:74:c0:c0:aa:c5:fe:ad:6f:18:bd:b8:05:47:ed: a4:e8:d5:df:66:49:12:2d:53:26:ca:b7:1f:ab:27:a7:39:4b: 87:0e:8b:b4:a2:26:81:cf:e6:e0:a0:5e:5c:d7:e6:2e:3c:82: b7:ad:9a:53:35:a9:34:d7:d7:bc:2f:82:38:7f:dc:e7:44:37: 86:04:4c:5a:06:71:19:83:1d:c6:cd:59:9f:a0:4e:11:65:ff: a2:32:26:08:1e:2a:75:5c:ee:a3:9e:35:e8:5c:8c:c4:a4:ab: 07:48:0d:d1:bf:d6:74:75:56:d6:9d:72:01:69:f1:5d:4f:c6: d6:b2:40:94:4d:36:16:fb:7d:01:d5:35:df:94:78:a8:02:2a: 22:1e:8a:56:2a:e6:1e:a7:36:29:c5:09:96:53:3c:31:42:86: c4:bd:0f:5f:7d:8e:a3:0a:5a:77:59:72:dc:51:35:1c:de:26: f3:cf:18:64:fd:4c:a2:f2:3f:70:92:aa:24:fe:be:76:f1:84: 4e:b5:4d:d7:7c:de:78:22:d2:e5:1d:0d:7b:6b:11:4b:7e:6c: cb:3a:e5:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQWNc9mv6Fot919AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk NTlmNTdlNDItODFmNy00M2YxLWE1NTMtMjkyNDFkNmQ0MzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3WGs5c6Wg2DH1yqg4XF8GSVTZ5h8518YhtC 5GCVAd60oNrzqk4L8EnlyT4x9oUnaAI8FVojYNx6Uy8DkPmBR13pq3h4EdX0yDTH HU/x+5ImttH1FXsykZfpeemTCtutX2fO7H8O57oZq1/eZw0jkmpG9GYCDXb2Tq3a arMITuQbXYNLer5JUmMhsnwidrxwdgjtpnMxCrd74E/tzt3ebb6xJltSVnCGCMgm LcV6poGJvQlsn43VUYqJNY+UeSiyt6FvHZDQfcYUnOpuPheltF4waY6DiPaHOuHw whhNZuNlVjYBQnw2EvpGUEi/8SxwV1BY0ES95g6WFOWCcYCXzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4/1Kx9TaKeYTwyQJ6+4AAqZQkeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzVkOGM2ZjItYTcxOC0z OTBkLWEwMGItZjYyOWI0M2UzOTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyOUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5ceoEAkJorSDFpK4x0pWzKJk0Sg05ZyB14Tthk8UCECBex/VLMi6B0 wMCqxf6tbxi9uAVH7aTo1d9mSRItUybKtx+rJ6c5S4cOi7SiJoHP5uCgXlzX5i48 gretmlM1qTTX17wvgjh/3OdEN4YETFoGcRmDHcbNWZ+gThFl/6IyJggeKnVc7qOe NehcjMSkqwdIDdG/1nR1VtadcgFp8V1PxtayQJRNNhb7fQHVNd+UeKgCKiIeilYq 5h6nNinFCZZTPDFChsS9D199jqMKWndZctxRNRzeJvPPGGT9TKLyP3CSqiT+vnbx hE61Tdd83ngi0uUdDXtrEUt+bMs65f0= -----END CERTIFICATE-----Generated at Sat Sep 6 05:17:40 2025 by rpki-client