$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbcf8562-da7f-30d0-a2c8-139b0afd5fcb.roa File: dbcf8562-da7f-30d0-a2c8-139b0afd5fcb.roa (raw, json) Hash identifier: 6NuTrBtuUnWkOGl8DSLDHbMFJauLmoJQu3rx/XGs7WM= Subject key identifier: 41:35:3E:F5:DC:6A:82:99:3F:D2:5C:AA:57:F5:B1:83:1F:D8:F5:82 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0CDC280E3E1329FA31D61D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbcf8562-da7f-30d0-a2c8-139b0afd5fcb.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.32.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:28:0e:3e:13:29:fa:31:d6:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=ee4ae083-6832-49c7-bc4c-0c89a1ccaa77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fe:3f:9b:07:0d:1d:56:23:14:6a:b8:2e:c0: ab:ba:6d:a4:d1:e6:ba:c1:f2:a5:97:20:92:90:a3: 7a:92:75:df:0c:a1:b7:b3:b8:cc:02:22:d0:7d:5a: db:98:f2:e8:6c:1f:7d:a4:22:da:c5:7d:be:8a:9f: 8d:18:10:5c:5b:ef:f7:7b:ab:90:f7:14:c0:f5:6d: e6:fc:43:2b:5a:8e:bb:16:5e:d7:a1:78:45:d9:05: 07:55:6e:d0:e2:92:9b:8e:3e:68:68:e3:73:5d:e6: a2:12:c5:ac:6e:46:78:b2:bd:08:dd:8e:59:18:72: 30:dd:52:48:62:a5:2c:9e:f1:c8:a1:45:bd:f3:6e: e6:71:1d:64:48:67:42:84:c2:2d:88:88:85:bd:b6: 97:6f:68:c1:b9:1d:57:b9:a9:d6:16:d6:68:76:f9: 90:80:2f:ca:d1:8d:6e:dd:cc:55:d1:d4:71:72:05: cc:a9:c2:7a:78:d1:53:7e:a4:8f:0a:1e:44:c1:e4: 9a:09:cd:da:bf:83:bd:b2:99:4e:90:1f:7e:40:f0: 52:a9:dd:e8:cb:b3:c5:36:b0:f2:40:1f:bb:d1:53: f3:f4:d2:d1:5e:56:8c:24:4f:1a:90:73:40:a5:c9: c2:bf:f0:c7:41:91:67:e1:fa:16:54:a7:04:69:f9: 9a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:35:3E:F5:DC:6A:82:99:3F:D2:5C:AA:57:F5:B1:83:1F:D8:F5:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbcf8562-da7f-30d0-a2c8-139b0afd5fcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:de:fe:66:73:d5:8d:3d:22:f0:40:fa:19:9e:47:01:80:96: 45:5c:0b:97:b1:82:c9:ef:eb:ed:48:10:ff:a0:9b:19:cb:72: 27:31:d7:6f:bf:b1:97:29:b8:62:12:c1:31:bf:fb:36:7d:2f: 4a:19:a0:29:2a:ea:37:cb:49:d8:83:57:a8:8a:c5:35:fe:a7: 48:fa:96:f7:84:9a:f8:3d:4c:8d:69:b9:44:ae:2f:c2:3a:53: f8:89:42:99:58:ef:78:78:1f:22:dc:a3:f6:d3:6b:bc:77:b5: 05:42:ef:49:bc:df:9b:91:26:31:52:43:a9:34:2d:4b:a1:d2: 17:0d:72:61:76:86:cc:03:0e:6b:82:aa:d1:be:2e:3d:da:36: b6:75:36:ef:d4:e8:8e:52:35:25:53:3e:db:25:72:3a:c6:af: c8:b1:e5:69:cb:15:de:0d:3d:28:04:8e:1c:d9:08:27:71:b1: b9:be:2f:6c:2c:4b:ce:38:90:d2:14:5d:0c:1f:29:ea:49:ca: 40:c4:99:63:e8:4a:92:b3:48:54:c9:7d:1e:39:a1:f3:cd:26: 54:cb:6b:57:d5:92:3c:54:69:ce:a5:b0:ca:13:d7:46:68:3b: 8c:72:fb:a0:71:05:72:c5:1c:3d:63:a8:58:a4:8e:51:c3:0a: 28:04:0b:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3CgOPhMp+jHWHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk ZWU0YWUwODMtNjgzMi00OWM3LWJjNGMtMGM4OWExY2NhYTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov4/mwcNHVYjFGq4LsCrum2k0ea6wfKllyCS kKN6knXfDKG3s7jMAiLQfVrbmPLobB99pCLaxX2+ip+NGBBcW+/3e6uQ9xTA9W3m /EMrWo67Fl7XoXhF2QUHVW7Q4pKbjj5oaONzXeaiEsWsbkZ4sr0I3Y5ZGHIw3VJI YqUsnvHIoUW9827mcR1kSGdChMItiIiFvbaXb2jBuR1XuanWFtZodvmQgC/K0Y1u 3cxV0dRxcgXMqcJ6eNFTfqSPCh5EweSaCc3av4O9splOkB9+QPBSqd3oy7PFNrDy QB+70VPz9NLRXlaMJE8akHNApcnCv/DHQZFn4foWVKcEafmakwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEE1PvXcaoKZP9Jcqlf1sYMf2PWCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGJjZjg1NjItZGE3Zi0z MGQwLWEyYzgtMTM5YjBhZmQ1ZmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHne/mZz1Y09IvBA+hmeRwGAlkVcC5exgsnv6+1IEP+gmxnLcicx12+/ sZcpuGISwTG/+zZ9L0oZoCkq6jfLSdiDV6iKxTX+p0j6lveEmvg9TI1puUSuL8I6 U/iJQplY73h4HyLco/bTa7x3tQVC70m835uRJjFSQ6k0LUuh0hcNcmF2hswDDmuC qtG+Lj3aNrZ1Nu/U6I5SNSVTPtslcjrGr8ix5WnLFd4NPSgEjhzZCCdxsbm+L2ws S844kNIUXQwfKepJykDEmWPoSpKzSFTJfR45ofPNJlTLa1fVkjxUac6lsMoT10Zo O4xy+6BxBXLFHD1jqFikjlHDCigEC78= -----END CERTIFICATE-----Generated at Sat Sep 6 05:08:16 2025 by rpki-client