$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc21a010-a89b-3735-8add-4d8ec6a5adf7.roa File: cc21a010-a89b-3735-8add-4d8ec6a5adf7.roa (raw, json) Hash identifier: T7OaxeJOkE/zMGj/RLnNniM1KjWuTDWifrLm74Emayo= Subject key identifier: DF:97:53:78:8E:92:E8:E1:BD:63:5B:04:07:4A:2B:88:83:21:F7:AB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AFC1C12C0F2C5D0F246BB6180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc21a010-a89b-3735-8add-4d8ec6a5adf7.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.32.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:12:c0:f2:c5:d0:f2:46:bb:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=c107f366-c77a-48b0-b928-01ec0cffd312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ff:6f:db:8e:8e:27:32:82:5f:76:d0:6f:d2: bc:9a:66:b2:1f:6a:5a:d5:ec:6c:36:0a:d7:02:b9: ce:dd:44:d5:38:ef:db:38:cf:70:4e:c6:3d:cc:a6: a8:5a:1f:44:9c:82:d2:7f:74:94:ad:c8:22:e3:5b: 60:2f:81:c7:e3:fd:92:4c:13:cc:07:9c:ad:49:a1: 1d:db:89:43:3c:1d:04:fd:70:12:be:70:71:19:a3: 7c:54:84:b1:72:2b:16:05:9e:77:44:a2:f4:36:0d: a8:b5:30:37:1b:12:2e:73:a0:ea:5e:03:0b:92:35: b2:95:26:67:5a:a7:47:8f:15:0d:9d:29:36:19:dc: 5f:1a:cd:f4:70:0a:e4:dc:9e:9f:02:e1:f5:7a:38: b2:36:1d:9a:72:1d:03:17:f4:75:fb:4b:44:a1:59: b4:1e:2c:c3:f2:82:a7:f1:a4:aa:55:7d:b5:48:e6: 1c:e8:36:fc:de:32:93:d5:1b:73:95:4b:a5:1a:7f: d4:84:cb:90:47:9f:01:43:24:c1:47:d1:3a:eb:e1: e8:af:0e:ba:17:ae:95:dd:05:92:87:be:f0:08:49: d5:61:45:ba:fa:b6:f6:d1:13:65:ed:fa:d7:9f:11: b0:fe:b5:b6:f1:d0:ee:bc:13:ee:e2:1f:73:49:11: 86:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:97:53:78:8E:92:E8:E1:BD:63:5B:04:07:4A:2B:88:83:21:F7:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc21a010-a89b-3735-8add-4d8ec6a5adf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:30:7f:54:ad:21:cd:58:11:19:66:66:cb:56:65:de:09:73: 36:6b:eb:14:45:d1:ef:5c:a3:57:a3:01:73:fe:fb:b5:a7:a0: 9e:b9:51:3c:8f:d5:08:07:cb:36:80:ce:ad:9d:f7:32:a8:9b: 24:08:f6:29:06:b7:24:21:90:76:f8:37:b7:6d:d6:0b:3f:a8: bc:b9:12:77:30:19:96:a9:3e:c6:4c:fa:89:22:0c:9d:25:27: c9:3c:86:1b:f5:05:59:1a:32:78:8f:93:41:fb:9e:82:11:4e: 80:69:f8:0b:c5:72:53:60:a5:36:5f:23:a8:d3:72:8d:3a:2a: ac:ca:53:f3:ff:b4:56:ea:fb:bc:a7:9c:2d:6d:0f:27:db:93: a2:6a:4e:b8:41:ae:da:a5:c9:4c:3c:44:a1:7d:5e:36:e0:51: c3:fe:b9:48:2c:e3:36:68:73:a4:11:3b:3a:20:eb:1e:32:c3: 9b:70:52:05:7c:b3:18:61:a4:a9:6c:07:50:4f:eb:1d:64:4f: 3a:6c:87:9b:9e:4d:24:32:52:89:61:7a:82:c5:27:c2:4f:4a: 8e:87:4f:68:ae:90:11:a8:35:23:64:0d:ad:04:82:f7:6f:b1: 9b:4a:f6:f1:38:7a:1a:a3:87:06:d6:1a:44:6b:41:2b:57:43: db:01:01:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HBLA8sXQ8ka7YYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk YzEwN2YzNjYtYzc3YS00OGIwLWI5MjgtMDFlYzBjZmZkMzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf9v246OJzKCX3bQb9K8mmayH2pa1exsNgrX ArnO3UTVOO/bOM9wTsY9zKaoWh9EnILSf3SUrcgi41tgL4HH4/2STBPMB5ytSaEd 24lDPB0E/XASvnBxGaN8VISxcisWBZ53RKL0Ng2otTA3GxIuc6DqXgMLkjWylSZn WqdHjxUNnSk2GdxfGs30cArk3J6fAuH1ejiyNh2ach0DF/R1+0tEoVm0HizD8oKn 8aSqVX21SOYc6Db83jKT1RtzlUulGn/UhMuQR58BQyTBR9E66+Horw66F66V3QWS h77wCEnVYUW6+rb20RNl7frXnxGw/rW28dDuvBPu4h9zSRGGYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+XU3iOkujhvWNbBAdKK4iDIferMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2MyMWEwMTAtYTg5Yi0z NzM1LThhZGQtNGQ4ZWM2YTVhZGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyBbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFowf1StIc1YERlmZstWZd4JczZr6xRF0e9co1ejAXP++7WnoJ65UTyP 1QgHyzaAzq2d9zKomyQI9ikGtyQhkHb4N7dt1gs/qLy5EncwGZapPsZM+okiDJ0l J8k8hhv1BVkaMniPk0H7noIRToBp+AvFclNgpTZfI6jTco06KqzKU/P/tFbq+7yn nC1tDyfbk6JqTrhBrtqlyUw8RKF9XjbgUcP+uUgs4zZoc6QROzog6x4yw5twUgV8 sxhhpKlsB1BP6x1kTzpsh5ueTSQyUolheoLFJ8JPSo6HT2iukBGoNSNkDa0Egvdv sZtK9vE4ehqjhwbWGkRrQStXQ9sBAbI= -----END CERTIFICATE-----Generated at Sat Sep 6 01:12:27 2025 by rpki-client