$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4e50f9f-8d7b-3771-a906-e8b18b89aba5.roa File: d4e50f9f-8d7b-3771-a906-e8b18b89aba5.roa (raw, json) Hash identifier: rF+e+CpEPHv9xzDtQ03YZHudPEE9c5QFTg1S3sfhSXE= Subject key identifier: AA:C9:04:73:27:5A:3B:0A:DA:3D:98:64:6B:06:E7:C5:D1:76:46:B6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AFC1C17EB18E8D95F112CA920 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4e50f9f-8d7b-3771-a906-e8b18b89aba5.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.32.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:17:eb:18:e8:d9:5f:11:2c:a9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=6c8d1415-3c8a-4047-85a0-8d3b10986fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:98:da:fc:4f:e5:cb:ab:1a:96:78:f1:7a:3b: 63:cc:85:f0:74:29:11:7d:54:18:0f:0f:89:53:c3: ae:ea:ae:d1:8b:40:ff:5f:0f:60:b5:9a:62:46:ef: 9b:56:64:e2:b0:1e:a6:13:3b:70:de:c5:a0:14:78: 52:08:3f:d3:86:8c:9a:78:59:2c:ab:a9:0a:33:dc: 57:c1:0b:4f:76:a0:7e:c7:53:05:d9:65:c5:fd:d8: 1a:72:de:48:73:74:53:d5:b1:95:43:00:82:15:32: 23:f7:1b:67:f7:44:e5:c1:93:76:02:3a:99:3a:cd: 78:a8:54:f5:b0:aa:86:01:03:16:15:95:99:12:e0: ba:74:ef:1d:97:ef:db:16:ac:03:26:1e:35:48:cb: 7e:0c:f1:c4:37:e1:df:51:27:48:aa:79:5e:09:92: c2:b5:7a:61:b2:32:1f:ad:02:94:fa:00:4b:cd:1e: 16:ac:cb:98:10:04:79:4a:ac:45:25:c7:a9:42:5f: 20:14:b4:28:34:8d:d5:9c:86:90:9d:de:37:f2:fc: de:5b:d6:e3:e6:7d:8a:03:84:79:13:85:8e:42:f6: 5f:7a:98:76:6c:03:f6:7e:51:5a:97:3c:48:78:c5: 3b:2b:03:a9:bb:f6:34:4f:75:ad:23:52:4a:86:57: e5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C9:04:73:27:5A:3B:0A:DA:3D:98:64:6B:06:E7:C5:D1:76:46:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4e50f9f-8d7b-3771-a906-e8b18b89aba5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:f2:12:6e:ee:ec:e7:7c:97:30:42:20:7b:19:4e:45:b9:d5: 20:7c:64:d3:d2:1b:c8:80:6a:40:04:d1:db:62:69:f4:8b:93: 2f:02:91:85:8c:dd:a1:be:ba:b8:60:44:be:f7:e0:30:81:42: 19:c8:15:77:a0:79:90:3a:28:14:22:25:2e:f0:aa:32:d6:29: 21:fb:a4:cf:39:c9:a7:8c:42:fd:47:b0:9b:84:7a:78:84:f5: 44:da:29:62:68:00:7d:b7:91:cd:5c:24:ef:a1:b5:d8:5a:3e: dc:fa:d2:09:bc:78:2f:73:b6:d3:f5:74:62:b3:d9:77:c4:88: c7:2a:04:98:9d:70:d2:65:98:bb:07:f4:2e:bf:9a:10:15:1f: f1:26:9c:5d:3f:1a:f4:4e:26:05:b1:ed:9a:9d:25:50:a2:aa: 03:cb:97:22:85:73:4a:77:4c:1e:c6:c0:6c:61:52:60:24:9e: 13:9c:f0:8b:cd:e4:33:0d:1b:6f:51:71:df:09:73:41:b2:84: ea:2e:b7:0d:de:2b:69:f4:24:16:9d:4b:14:8a:09:cd:58:45: 60:42:ca:f7:24:cc:13:14:a4:2e:2c:ee:69:54:af:50:31:84: f0:ab:46:90:86:fc:e7:85:a1:15:6e:19:7a:96:cc:3d:ba:ae: 80:5a:bc:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HBfrGOjZXxEsqSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NmM4ZDE0MTUtM2M4YS00MDQ3LTg1YTAtOGQzYjEwOTg2ZmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJja/E/ly6salnjxejtjzIXwdCkRfVQYDw+J U8Ou6q7Ri0D/Xw9gtZpiRu+bVmTisB6mEztw3sWgFHhSCD/ThoyaeFksq6kKM9xX wQtPdqB+x1MF2WXF/dgact5Ic3RT1bGVQwCCFTIj9xtn90TlwZN2AjqZOs14qFT1 sKqGAQMWFZWZEuC6dO8dl+/bFqwDJh41SMt+DPHEN+HfUSdIqnleCZLCtXphsjIf rQKU+gBLzR4WrMuYEAR5SqxFJcepQl8gFLQoNI3VnIaQnd438vzeW9bj5n2KA4R5 E4WOQvZfeph2bAP2flFalzxIeMU7KwOpu/Y0T3WtI1JKhlflKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrJBHMnWjsK2j2YZGsG58XRdka2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDRlNTBmOWYtOGQ3Yi0z NzcxLWE5MDYtZThiMThiODlhYmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyAOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHyEm7u7Od8lzBCIHsZTkW51SB8ZNPSG8iAakAE0dtiafSLky8CkYWM 3aG+urhgRL734DCBQhnIFXegeZA6KBQiJS7wqjLWKSH7pM85yaeMQv1HsJuEeniE 9UTaKWJoAH23kc1cJO+htdhaPtz60gm8eC9zttP1dGKz2XfEiMcqBJidcNJlmLsH 9C6/mhAVH/EmnF0/GvROJgWx7ZqdJVCiqgPLlyKFc0p3TB7GwGxhUmAknhOc8IvN 5DMNG29Rcd8Jc0GyhOoutw3eK2n0JBadSxSKCc1YRWBCyvckzBMUpC4s7mlUr1Ax hPCrRpCG/OeFoRVuGXqWzD26roBavCM= -----END CERTIFICATE-----Generated at Sat Sep 6 01:13:57 2025 by rpki-client