$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbe9de1f-a0da-3335-8602-3545bec6747e.roa File: cbe9de1f-a0da-3335-8602-3545bec6747e.roa (raw, json) Hash identifier: Wj9AAIGpwwL3WLhpqcVmukFKyU+wUUeLNuqvXvho2vU= Subject key identifier: 13:30:92:42:77:62:3A:BE:09:2F:8F:FA:B4:7E:EF:A0:BA:55:D8:8E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0E415BD5D0C8DFE4C2909900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbe9de1f-a0da-3335-8602-3545bec6747e.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 16625 IP address blocks: 23.34.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:5b:d5:d0:c8:df:e4:c2:90:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=81d8c8ee-1deb-4a31-84da-1bf7e353ee35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e6:96:0b:3d:b8:5e:fd:bb:1a:9d:d8:5b:1b: f1:00:08:a1:5f:a0:65:a2:d4:fd:f8:b3:bd:1a:31: b1:aa:ed:e7:00:63:3c:76:1f:e5:66:9b:79:03:66: bf:94:f5:ae:b8:1b:60:0d:7c:c0:a5:19:d7:64:f0: e7:22:68:06:c6:95:d2:17:5c:03:69:18:0a:2a:5e: 22:98:43:46:cc:40:d7:db:b4:4a:96:40:27:53:34: 1b:7a:6a:1a:8d:31:9d:af:a5:99:84:65:d0:d5:33: 0f:bd:e4:1b:54:30:64:d6:a9:f0:cc:4d:ef:6e:c0: db:14:4c:b0:b1:fb:8c:eb:7b:28:79:9f:d3:d5:17: 13:16:20:38:1d:b6:db:67:79:b9:ea:92:7a:25:9d: 5f:23:5a:8e:6c:69:5e:5f:83:e1:25:fb:ba:d0:68: cb:a3:41:0d:6a:c5:a6:59:4e:85:e4:74:79:82:7b: e0:4b:78:00:95:cb:7e:15:ae:33:4a:11:7e:fb:ba: d3:8a:00:35:71:e8:e5:c8:4f:a6:14:df:e0:de:b3: e5:69:f4:20:6a:4a:fd:25:36:38:23:77:16:be:70: d7:fd:d4:2f:45:2f:23:f9:9e:21:67:b0:0e:7a:02: 38:b6:0f:15:59:88:03:fb:aa:92:61:4e:f2:ba:a2: ec:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:30:92:42:77:62:3A:BE:09:2F:8F:FA:B4:7E:EF:A0:BA:55:D8:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbe9de1f-a0da-3335-8602-3545bec6747e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.34.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:f8:c1:f1:3b:64:61:28:d3:58:e8:d8:2e:92:b3:54:5d:db: f2:f1:27:62:df:37:a8:02:9b:8e:8a:86:d0:78:eb:62:b5:ac: 93:66:57:a8:d2:48:b8:ba:e1:ca:6b:e6:f2:b3:a9:0d:70:a6: 73:3c:45:34:ef:f2:36:fe:6d:93:28:55:3a:09:12:48:11:26: 12:f1:db:72:6c:73:4a:75:24:b4:78:1b:91:48:b2:2c:58:cf: 7d:57:e8:b0:f2:70:20:5e:ce:6a:75:dc:e4:57:34:91:1a:64: 66:50:61:e4:cd:2c:8b:75:f7:40:bb:7c:e1:f9:ec:80:b6:a8: 6c:de:4e:8d:6f:55:0d:16:05:b8:79:c3:af:2a:08:06:17:4a: a7:45:df:0d:b0:11:e6:00:bd:c9:a9:e9:81:63:b3:4b:f4:9f: 51:9e:92:bd:a5:41:8d:2b:b8:35:86:72:43:94:ce:41:c9:ff: 58:67:c5:c1:6c:01:a7:5b:a8:f2:fb:2c:ec:06:9b:6b:49:9b: c4:42:cd:2c:bd:7b:02:b0:6e:f0:47:a8:19:d3:9a:8f:40:c4: f9:72:73:ec:24:f8:e7:5f:b6:02:b4:f9:cd:5f:c6:da:3e:cd: 75:ab:d1:29:bb:de:04:89:23:42:57:b9:fd:ce:7e:08:55:f4: 4f:14:20:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQVvV0Mjf5MKQmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk ODFkOGM4ZWUtMWRlYi00YTMxLTg0ZGEtMWJmN2UzNTNlZTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuaWCz24Xv27Gp3YWxvxAAihX6BlotT9+LO9 GjGxqu3nAGM8dh/lZpt5A2a/lPWuuBtgDXzApRnXZPDnImgGxpXSF1wDaRgKKl4i mENGzEDX27RKlkAnUzQbemoajTGdr6WZhGXQ1TMPveQbVDBk1qnwzE3vbsDbFEyw sfuM63soeZ/T1RcTFiA4HbbbZ3m56pJ6JZ1fI1qObGleX4PhJfu60GjLo0ENasWm WU6F5HR5gnvgS3gAlct+Fa4zShF++7rTigA1cejlyE+mFN/g3rPlafQgakr9JTY4 I3cWvnDX/dQvRS8j+Z4hZ7AOegI4tg8VWYgD+6qSYU7yuqLskwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMwkkJ3Yjq+CS+P+rR+76C6VdiOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2JlOWRlMWYtYTBkYS0z MzM1LTg2MDItMzU0NWJlYzY3NDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyLoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAD4wfE7ZGEo01jo2C6Ss1Rd2/LxJ2LfN6gCm46KhtB462K1rJNmV6jS SLi64cpr5vKzqQ1wpnM8RTTv8jb+bZMoVToJEkgRJhLx23Jsc0p1JLR4G5FIsixY z31X6LDycCBezmp13ORXNJEaZGZQYeTNLIt190C7fOH57IC2qGzeTo1vVQ0WBbh5 w68qCAYXSqdF3w2wEeYAvcmp6YFjs0v0n1Gekr2lQY0ruDWGckOUzkHJ/1hnxcFs AadbqPL7LOwGm2tJm8RCzSy9ewKwbvBHqBnTmo9AxPlyc+wk+OdftgK0+c1fxto+ zXWr0Sm73gSJI0JXuf3OfghV9E8UIDs= -----END CERTIFICATE-----Generated at Sat Sep 6 12:19:53 2025 by rpki-client