$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbdecb51-8373-3c9d-839d-d0fd6c7eec4a.roa File: cbdecb51-8373-3c9d-839d-d0fd6c7eec4a.roa (raw, json) Hash identifier: FbXz+U0pKYFTsQqYekM3TY8BdcTFM1DScLythArSG0Q= Subject key identifier: 73:89:49:40:2C:AF:D4:BF:6E:49:6E:7B:64:E9:C9:35:E9:1D:79:7B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0E4161DC1B29E13994434500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbdecb51-8373-3c9d-839d-d0fd6c7eec4a.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 7545 IP address blocks: 23.34.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:61:dc:1b:29:e1:39:94:43:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=44774b14-147b-4315-9c6f-7cc2b11fd8aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:88:95:bc:d3:89:b7:44:3e:6f:df:87:d5:78: 07:ec:86:ef:53:91:4f:ce:e0:22:1f:91:d5:90:19: 20:a1:aa:d6:05:7f:40:a6:7d:ae:81:02:9f:93:23: 05:f0:98:24:6a:d1:2e:f5:41:de:98:a7:07:ef:60: b9:8d:63:96:86:5d:e5:cd:65:15:48:59:7f:45:38: d6:6d:f2:7f:30:6b:8e:82:33:ad:a7:64:ea:8f:79: bd:62:72:d7:65:bc:fe:e1:df:b6:7e:2a:7b:77:0a: 06:b5:d1:0a:fb:e2:cf:dd:1e:d3:83:74:15:e0:81: d8:73:e2:a8:c7:9d:76:06:d5:aa:cb:65:d0:fa:27: 5f:13:93:bd:38:76:2d:71:6b:89:78:9d:90:1e:68: 60:56:fe:9f:fe:8d:be:87:27:61:ed:e0:92:1d:f0: d5:08:8c:dd:e2:ea:d1:3e:93:64:30:be:cf:23:38: 48:a8:e5:31:1a:69:fe:8f:f7:c7:97:76:c2:89:9b: 53:02:ed:b7:c8:64:f6:85:dd:47:d3:cf:16:ba:68: c7:0b:6c:da:fd:be:73:81:2b:eb:15:6d:0b:ec:60: 8a:74:ce:2f:df:6a:d9:b1:f5:78:47:e5:18:41:8b: f2:b9:82:f7:3c:c6:fe:6d:6f:d4:63:64:9e:67:99: b6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:89:49:40:2C:AF:D4:BF:6E:49:6E:7B:64:E9:C9:35:E9:1D:79:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbdecb51-8373-3c9d-839d-d0fd6c7eec4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.34.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:83:99:2d:af:6e:36:48:3c:1d:cd:2e:1b:3a:4c:62:7a:40: aa:74:f0:fe:58:c0:8d:d9:37:8a:63:20:4c:2b:ba:94:42:ba: 97:bf:19:e4:fe:08:c8:c3:86:de:64:5f:21:0b:02:77:dd:0c: 01:b9:0e:e0:0a:66:8d:36:53:9d:f3:52:ce:35:4b:70:0e:d2: 8a:02:f0:1e:26:29:58:8f:5a:14:ca:79:19:34:83:b0:41:79: 00:7a:73:1d:a7:3d:51:b3:6a:8f:e6:66:24:db:55:0f:7f:e5: fc:c6:66:98:d0:1e:64:5b:8e:f4:11:a8:bb:05:17:3b:5d:4f: 89:57:bf:c1:87:41:4f:db:8f:df:41:56:8e:0c:39:2d:e6:ed: 5b:ba:b2:ae:19:38:a3:18:b3:20:6b:fd:f2:b8:b2:e5:c8:7b: 1d:4c:b6:e9:92:2c:7a:fb:e7:41:46:d6:82:6a:8b:5a:4d:d1: 6b:af:21:e5:bd:b9:be:96:ea:42:91:7f:8f:36:86:79:02:1b: f5:22:60:68:44:66:6c:d9:31:96:17:1f:ac:66:83:e5:d5:c5: 86:55:65:95:42:1f:9d:ae:91:bf:9d:e2:a6:08:73:90:c1:0a: 6e:a5:97:3a:c3:9a:9b:22:a5:ea:b6:27:84:af:45:85:59:ba: 94:e5:92:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQWHcGynhOZRDRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk NDQ3NzRiMTQtMTQ3Yi00MzE1LTljNmYtN2NjMmIxMWZkOGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoiVvNOJt0Q+b9+H1XgH7IbvU5FPzuAiH5HV kBkgoarWBX9Apn2ugQKfkyMF8JgkatEu9UHemKcH72C5jWOWhl3lzWUVSFl/RTjW bfJ/MGuOgjOtp2Tqj3m9YnLXZbz+4d+2fip7dwoGtdEK++LP3R7Tg3QV4IHYc+Ko x512BtWqy2XQ+idfE5O9OHYtcWuJeJ2QHmhgVv6f/o2+hydh7eCSHfDVCIzd4urR PpNkML7PIzhIqOUxGmn+j/fHl3bCiZtTAu23yGT2hd1H088WumjHC2za/b5zgSvr FW0L7GCKdM4v32rZsfV4R+UYQYvyuYL3PMb+bW/UY2SeZ5m2rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOJSUAsr9S/bklue2TpyTXpHXl7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2JkZWNiNTEtODM3My0z YzlkLTgzOWQtZDBmZDZjN2VlYzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyLsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESDmS2vbjZIPB3NLhs6TGJ6QKp08P5YwI3ZN4pjIEwrupRCupe/GeT+ CMjDht5kXyELAnfdDAG5DuAKZo02U53zUs41S3AO0ooC8B4mKViPWhTKeRk0g7BB eQB6cx2nPVGzao/mZiTbVQ9/5fzGZpjQHmRbjvQRqLsFFztdT4lXv8GHQU/bj99B Vo4MOS3m7Vu6sq4ZOKMYsyBr/fK4suXIex1MtumSLHr750FG1oJqi1pN0WuvIeW9 ub6W6kKRf482hnkCG/UiYGhEZmzZMZYXH6xmg+XVxYZVZZVCH52ukb+d4qYIc5DB Cm6llzrDmpsipeq2J4SvRYVZupTlkgw= -----END CERTIFICATE-----Generated at Sat Sep 6 05:20:19 2025 by rpki-client