$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3c65864-2a49-3bba-8842-4f324aed6142.roa File: e3c65864-2a49-3bba-8842-4f324aed6142.roa (raw, json) Hash identifier: vrq8cQfP+ULuTs9GbezlPZ56Coc/Kp44BQIL9wpgW1k= Subject key identifier: 86:2F:77:12:80:11:B1:72:44:D3:47:8F:7F:58:FE:7F:DB:01:AE:91 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF9515C1B5C7483B94EBEFB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3c65864-2a49-3bba-8842-4f324aed6142.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 16625 IP address blocks: 23.34.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:5c:1b:5c:74:83:b9:4e:be:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=6cbbf8ce-66d0-4410-82b8-5ddcf237b035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f2:32:dc:9b:70:f7:df:e6:12:82:95:1a:50: fb:f1:0b:e9:84:8a:5f:0b:5e:bc:e3:c2:af:b9:74: f5:44:34:0b:68:05:83:b4:f7:37:17:31:f2:88:eb: 12:de:97:2d:33:6c:43:59:e6:fe:8a:0a:2c:d0:fd: 74:6d:ff:e2:82:a6:3e:07:ea:e3:13:43:52:12:0c: 35:ee:89:68:f2:e7:a6:5c:72:b2:dc:24:c1:26:d6: 46:a6:48:54:dd:e6:f3:8c:ba:56:22:ab:59:2b:17: 95:3e:5f:9c:5c:b8:72:dd:16:61:6c:4a:ae:fe:ea: 03:b4:96:8d:c6:7e:df:51:60:a5:69:83:58:13:e3: 7b:83:2c:b9:b8:2d:5b:08:7e:3b:c4:a0:c4:21:6f: 11:04:e3:2a:62:d3:dc:a1:03:58:e1:28:f8:79:52: ba:18:73:21:7c:67:7d:1c:56:e3:ec:4f:28:0c:e5: 80:f8:3a:83:40:47:fa:bc:b3:9a:e1:18:dc:4f:1f: 36:61:62:23:17:06:50:f3:84:f7:45:eb:8b:85:29: 6a:60:29:f7:5d:45:61:43:28:c3:9c:a7:bb:77:6c: c7:63:e6:2a:ce:e4:e3:ec:73:79:fa:9b:ad:f5:68: 42:11:0b:1d:7c:e6:a3:e2:e8:8b:b3:2e:c4:c2:4b: 84:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2F:77:12:80:11:B1:72:44:D3:47:8F:7F:58:FE:7F:DB:01:AE:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3c65864-2a49-3bba-8842-4f324aed6142.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.34.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:e9:42:c1:ef:de:a2:2b:7d:60:bb:7d:4f:20:52:8b:21:e8: 9e:9d:ff:f3:14:02:dd:92:d2:ec:29:91:4b:4a:da:dd:8c:08: ef:13:6d:1a:7f:6f:d6:83:eb:4c:6f:d4:11:42:a6:58:c4:c2: 32:84:87:9a:65:4a:de:3c:f0:14:70:e6:fa:05:a5:5d:a0:19: 91:04:65:6e:89:2f:e6:84:ab:33:92:66:3d:bc:0d:4b:4f:c0: 84:c4:1c:81:3c:88:85:d2:97:2a:66:3f:37:52:01:17:f2:6c: 64:1c:d1:39:4f:a1:72:29:53:07:5e:22:46:6b:58:d3:83:28: 46:9a:d4:c3:70:e8:0c:da:a2:b1:e1:dc:f4:b4:de:9e:8f:a7: de:cd:c6:00:51:7a:44:9b:33:94:77:6c:ac:a5:43:e9:c8:43: 0a:6c:c3:f8:e7:96:07:4f:1c:7a:ab:be:b8:3e:9d:64:f3:5d: c0:0d:e2:11:a0:0e:5e:0f:97:de:38:9d:8f:09:32:f1:fe:22: 6c:ff:bb:41:33:8b:bf:35:dd:89:e2:fe:6a:b3:14:03:4e:2e: dc:ce:24:9c:5c:a4:b2:fd:c3:68:16:26:7f:e5:0e:13:17:1b: 70:74:48:a4:d1:56:71:89:72:85:fd:7c:81:d1:92:2b:f4:0c: bd:bb:48:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UVwbXHSDuU6++wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NmNiYmY4Y2UtNjZkMC00NDEwLTgyYjgtNWRkY2YyMzdiMDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/Iy3Jtw99/mEoKVGlD78QvphIpfC16848Kv uXT1RDQLaAWDtPc3FzHyiOsS3pctM2xDWeb+igos0P10bf/igqY+B+rjE0NSEgw1 7olo8uemXHKy3CTBJtZGpkhU3ebzjLpWIqtZKxeVPl+cXLhy3RZhbEqu/uoDtJaN xn7fUWClaYNYE+N7gyy5uC1bCH47xKDEIW8RBOMqYtPcoQNY4Sj4eVK6GHMhfGd9 HFbj7E8oDOWA+DqDQEf6vLOa4RjcTx82YWIjFwZQ84T3ReuLhSlqYCn3XUVhQyjD nKe7d2zHY+YqzuTj7HN5+put9WhCEQsdfOaj4uiLsy7EwkuEWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYvdxKAEbFyRNNHj39Y/n/bAa6RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTNjNjU4NjQtMmE0OS0z YmJhLTg4NDItNGYzMjRhZWQ2MTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyIEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/pQsHv3qIrfWC7fU8gUosh6J6d//MUAt2S0uwpkUtK2t2MCO8TbRp/ b9aD60xv1BFCpljEwjKEh5plSt488BRw5voFpV2gGZEEZW6JL+aEqzOSZj28DUtP wITEHIE8iIXSlypmPzdSARfybGQc0TlPoXIpUwdeIkZrWNODKEaa1MNw6AzaorHh 3PS03p6Pp97NxgBRekSbM5R3bKylQ+nIQwpsw/jnlgdPHHqrvrg+nWTzXcAN4hGg Dl4Pl944nY8JMvH+Imz/u0Ezi7813Yni/mqzFANOLtzOJJxcpLL9w2gWJn/lDhMX G3B0SKTRVnGJcoX9fIHRkiv0DL27SMc= -----END CERTIFICATE-----Generated at Sat Sep 6 05:13:59 2025 by rpki-client