$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afefd870-79c4-39ba-abeb-37b3457e8c41.roa File: afefd870-79c4-39ba-abeb-37b3457e8c41.roa (raw, json) Hash identifier: WIKgO/LxL+GJpEcK4fH874kt7QsGy6KBnOsIbg2ZgaA= Subject key identifier: 40:08:7D:BB:8A:83:28:36:3D:1A:E6:32:D9:0C:A2:7E:D4:DE:AA:E8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0CDC24A346B98B9FDB3A5440 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afefd870-79c4-39ba-abeb-37b3457e8c41.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.32.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:24:a3:46:b9:8b:9f:db:3a:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=7acec3cf-1492-4bd8-871c-c11b4646e5f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1a:22:2d:f0:36:f0:0b:c6:f5:f5:f1:66:f9: e1:a3:e1:2f:a6:45:65:ca:0c:24:b1:d1:4b:7b:55: ab:97:6a:2c:cf:4a:73:62:73:e1:1d:02:37:45:2f: 37:29:1e:d9:a5:54:a5:fa:1c:0d:22:d9:85:cb:83: 6b:d6:88:19:84:be:c4:52:53:1f:03:02:7d:34:07: 6b:9b:90:e8:d9:53:29:af:7b:cc:5c:20:e5:66:66: 37:2c:aa:36:fe:9e:a5:dd:95:67:eb:33:bc:fe:05: d6:22:af:6c:1a:9d:f7:b2:18:1b:d7:59:31:ac:83: da:fd:ff:01:5d:6a:f4:7f:60:b5:cb:6d:4a:14:d0: da:d3:dc:02:c7:72:0e:71:f2:69:a7:1c:04:d7:e8: f6:e3:64:40:3c:b6:e1:fa:e3:88:f2:9b:ec:ee:50: 05:74:4a:47:55:39:13:35:a4:5f:ac:3f:96:1f:60: d0:5b:d6:69:0a:91:15:71:73:66:b2:ce:15:e4:be: 2e:eb:39:b4:aa:bb:82:41:d8:98:c4:35:28:c1:dd: 74:5b:33:03:6d:52:c5:12:7b:ce:8a:a7:70:60:01: cd:6a:2e:10:b4:a7:7e:ae:a5:c7:44:7f:f9:65:4a: 51:d4:44:2a:f8:a2:c0:18:06:e2:8e:5d:9b:ae:84: 5f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:08:7D:BB:8A:83:28:36:3D:1A:E6:32:D9:0C:A2:7E:D4:DE:AA:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afefd870-79c4-39ba-abeb-37b3457e8c41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:40:69:06:b1:ed:ea:85:c1:c3:a2:2a:7f:e1:79:b7:94:6c: 46:06:61:b0:5d:a8:b3:8e:24:f4:1c:8f:93:c5:df:07:49:9b: de:63:61:ac:88:cb:20:f2:5c:96:72:d5:93:1c:6a:a6:14:30: 7e:05:63:41:a0:8e:ac:dc:2a:91:6d:a0:90:57:81:59:c1:39: 86:19:a9:05:0b:61:9c:89:6d:0c:00:51:e7:60:f1:0a:69:9e: b5:3f:a3:47:39:fc:8b:aa:98:3c:47:e8:62:86:39:36:01:86: ac:b5:fa:38:fe:2f:49:1d:9f:ca:67:3c:a5:02:f3:44:82:bc: 84:bf:7e:eb:73:a9:06:77:55:04:43:6f:d4:17:15:6c:2e:d6: 29:3c:fb:c4:08:05:69:73:cc:95:26:b4:94:7d:91:d8:f7:a8: b6:56:06:c7:65:0c:80:38:54:23:5e:52:b0:34:c6:50:e3:cc: 47:ce:a8:12:fb:1c:62:9e:fd:6b:9c:95:65:1e:2a:3c:12:a4: 26:43:c4:32:88:e1:94:35:d6:0e:b0:c5:71:46:3d:96:bf:84: 56:a6:8f:1e:47:cc:50:e7:55:d5:1e:e7:ad:c6:41:8e:77:3a: 0b:a4:03:90:a0:86:ae:59:de:cc:a9:2d:96:60:dd:2c:bb:78: 86:fe:7b:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3CSjRrmLn9s6VEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk N2FjZWMzY2YtMTQ5Mi00YmQ4LTg3MWMtYzExYjQ2NDZlNWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRoiLfA28AvG9fXxZvnho+EvpkVlygwksdFL e1Wrl2osz0pzYnPhHQI3RS83KR7ZpVSl+hwNItmFy4Nr1ogZhL7EUlMfAwJ9NAdr m5Do2VMpr3vMXCDlZmY3LKo2/p6l3ZVn6zO8/gXWIq9sGp33shgb11kxrIPa/f8B XWr0f2C1y21KFNDa09wCx3IOcfJppxwE1+j242RAPLbh+uOI8pvs7lAFdEpHVTkT NaRfrD+WH2DQW9ZpCpEVcXNmss4V5L4u6zm0qruCQdiYxDUowd10WzMDbVLFEnvO iqdwYAHNai4QtKd+rqXHRH/5ZUpR1EQq+KLAGAbijl2broRfKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAIfbuKgyg2PRrmMtkMon7U3qroMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWZlZmQ4NzAtNzljNC0z OWJhLWFiZWItMzdiMzQ1N2U4YzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyAqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBAaQax7eqFwcOiKn/hebeUbEYGYbBdqLOOJPQcj5PF3wdJm95jYayI yyDyXJZy1ZMcaqYUMH4FY0GgjqzcKpFtoJBXgVnBOYYZqQULYZyJbQwAUedg8Qpp nrU/o0c5/IuqmDxH6GKGOTYBhqy1+jj+L0kdn8pnPKUC80SCvIS/futzqQZ3VQRD b9QXFWwu1ik8+8QIBWlzzJUmtJR9kdj3qLZWBsdlDIA4VCNeUrA0xlDjzEfOqBL7 HGKe/WuclWUeKjwSpCZDxDKI4ZQ11g6wxXFGPZa/hFamjx5HzFDnVdUe563GQY53 OgukA5Cghq5Z3sypLZZg3Sy7eIb+eyk= -----END CERTIFICATE-----Generated at Sat Sep 6 05:22:25 2025 by rpki-client