$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afbe5d86-6ca3-3d94-a742-4b582c552ccf.roa File: afbe5d86-6ca3-3d94-a742-4b582c552ccf.roa (raw, json) Hash identifier: cYod8ugI6/Eoo79UrEjev1/sjmX9tAvb7AlSTj6lG7E= Subject key identifier: 4F:76:7E:FF:A3:B4:02:37:54:0C:17:9C:59:B7:AF:4A:A5:AC:70:96 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AFC1C12B01E891CA8773815C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afbe5d86-6ca3-3d94-a742-4b582c552ccf.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.32.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:12:b0:1e:89:1c:a8:77:38:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=3540ae77-8f74-4cb6-a299-3d636b5f4c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3b:92:9f:fa:7a:bc:dc:69:85:92:73:a2:18: aa:b2:48:4d:ae:a4:38:5d:d8:48:7a:c0:f7:8c:f4: 10:2b:d7:ba:e6:3f:d3:45:34:37:52:62:64:72:64: 67:46:05:12:ee:77:ed:70:70:a9:46:e4:c1:7e:e1: 2c:cf:60:88:58:8d:3e:65:c0:68:01:4f:6e:9e:f2: 5c:e5:41:09:ea:60:ba:ea:43:5d:c6:78:65:50:e8: 92:6b:46:9d:55:e4:45:ad:f1:a9:ce:47:e6:5c:b8: b3:c4:cd:85:ad:79:f2:b2:20:4f:3c:3e:9a:96:40: c9:f0:1f:2e:b5:f8:60:49:81:ca:2f:b2:88:e7:ee: de:61:5f:6a:ba:09:f0:42:b4:cc:67:ae:2f:5a:33: ed:5a:e3:5c:8e:c8:0c:01:08:e9:16:52:46:c4:65: c0:0c:a4:21:1f:25:70:6b:54:8e:20:9f:db:e3:b2: 7e:41:c3:24:12:67:3e:50:f8:64:c4:39:26:57:08: e0:c6:f9:b3:a2:bd:6a:46:11:e6:68:fb:3b:35:4e: b5:2a:39:29:68:2f:91:e1:97:fb:c4:af:04:b0:64: 29:77:e5:de:a0:ec:0b:1c:8d:ec:90:96:5d:3c:25: 19:f7:4d:22:2c:cd:8f:82:e6:57:73:2e:e8:aa:c5: 9c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:76:7E:FF:A3:B4:02:37:54:0C:17:9C:59:B7:AF:4A:A5:AC:70:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afbe5d86-6ca3-3d94-a742-4b582c552ccf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:81:ab:0d:d6:b4:14:02:1d:41:b6:da:2f:93:dd:04:9b:a0: d2:af:15:3f:47:a6:7c:e8:8e:6a:96:f8:c3:1e:99:3f:d8:c4: e9:e1:ba:17:76:73:46:28:86:d3:02:49:cd:6b:36:0c:8b:2f: ef:fa:6b:19:fb:e5:24:14:c0:10:0d:da:12:50:68:d8:85:46: c6:d7:bb:5a:3f:c6:47:53:28:a3:05:a5:e7:7c:f2:34:9e:94: 8e:3c:11:d1:24:bc:8f:e6:d8:dd:24:16:98:0b:00:21:18:43: 57:9f:0b:24:8a:aa:7d:ff:76:b9:43:e6:5f:84:19:8d:7e:0d: 97:4e:a9:37:0e:00:dd:e3:31:de:ad:e5:dd:09:76:06:60:8c: 93:7c:fa:29:74:45:e5:c7:81:74:d6:ac:f7:55:3f:95:04:ae: 00:53:4c:a0:44:9c:cf:68:50:56:c1:14:c1:be:b7:f5:1e:fe: 56:2c:f7:bf:8e:0e:0f:b6:5a:94:01:11:d0:8a:1b:a6:49:26: f5:e8:d0:cb:6c:3a:e4:e2:5c:3d:a0:7e:9e:2c:75:ba:12:b9: 21:43:12:46:17:ec:3b:44:5b:86:30:4b:c5:52:b5:3c:fc:ab: 06:6a:4c:2e:1b:24:d0:61:2c:24:90:8f:38:d0:4e:ba:43:9e: de:52:a9:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HBKwHokcqHc4FcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk MzU0MGFlNzctOGY3NC00Y2I2LWEyOTktM2Q2MzZiNWY0YzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDuSn/p6vNxphZJzohiqskhNrqQ4XdhIesD3 jPQQK9e65j/TRTQ3UmJkcmRnRgUS7nftcHCpRuTBfuEsz2CIWI0+ZcBoAU9unvJc 5UEJ6mC66kNdxnhlUOiSa0adVeRFrfGpzkfmXLizxM2FrXnysiBPPD6alkDJ8B8u tfhgSYHKL7KI5+7eYV9qugnwQrTMZ64vWjPtWuNcjsgMAQjpFlJGxGXADKQhHyVw a1SOIJ/b47J+QcMkEmc+UPhkxDkmVwjgxvmzor1qRhHmaPs7NU61KjkpaC+R4Zf7 xK8EsGQpd+XeoOwLHI3skJZdPCUZ900iLM2PguZXcy7oqsWcpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE92fv+jtAI3VAwXnFm3r0qlrHCWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWZiZTVkODYtNmNhMy0z ZDk0LWE3NDItNGI1ODJjNTUyY2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyDyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCBqw3WtBQCHUG22i+T3QSboNKvFT9HpnzojmqW+MMemT/YxOnhuhd2 c0YohtMCSc1rNgyLL+/6axn75SQUwBAN2hJQaNiFRsbXu1o/xkdTKKMFped88jSe lI48EdEkvI/m2N0kFpgLACEYQ1efCySKqn3/drlD5l+EGY1+DZdOqTcOAN3jMd6t 5d0JdgZgjJN8+il0ReXHgXTWrPdVP5UErgBTTKBEnM9oUFbBFMG+t/Ue/lYs97+O Dg+2WpQBEdCKG6ZJJvXo0MtsOuTiXD2gfp4sdboSuSFDEkYX7DtEW4YwS8VStTz8 qwZqTC4bJNBhLCSQjzjQTrpDnt5SqVg= -----END CERTIFICATE-----Generated at Sat Sep 6 12:19:56 2025 by rpki-client