$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e53c04c4-22f6-3c84-adbe-dafa6adc0f19.roa File: e53c04c4-22f6-3c84-adbe-dafa6adc0f19.roa (raw, json) Hash identifier: hnXkSa5nU4mn9NPD9H1m1aOCJ3fwIKxYXX+oNT8DPeE= Subject key identifier: A0:D8:8E:65:C1:13:35:FE:DF:C1:A5:38:78:C8:C3:F2:71:FE:C4:E4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AFC1C1C0CC244A7BC03A91F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e53c04c4-22f6-3c84-adbe-dafa6adc0f19.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.44.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:1c:0c:c2:44:a7:bc:03:a9:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=1b618f1e-0f4b-42c8-bada-5e85e7b9cb17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fc:67:11:51:15:c3:0e:2d:96:ba:a9:e6:03: 6c:05:ce:77:4f:37:67:cb:b6:6e:5c:c6:18:17:db: 1c:d9:72:57:eb:b8:08:0c:b8:99:68:73:78:fb:99: c5:14:93:a5:3e:c1:1d:69:91:1c:f9:d0:60:ca:97: b6:80:90:3e:4f:cc:63:81:20:da:65:19:03:11:8c: 36:39:24:fd:83:a6:9e:66:1e:fd:68:69:7b:0d:b9: be:01:7e:59:65:2a:93:3f:98:f5:fb:61:24:18:bd: 74:02:da:3b:58:a7:bd:ee:64:4a:59:7d:6b:5e:61: 3c:a9:0b:13:ec:06:91:35:18:76:2d:2a:e8:1b:b8: cd:48:3c:23:e8:79:3e:ad:ab:e7:d7:81:34:6d:b7: b3:5e:aa:69:dd:61:7c:d3:80:12:f4:9d:13:61:3b: 1c:f6:22:99:fb:96:5f:08:46:8d:24:ca:3d:ea:e3: 98:87:90:9f:da:62:c0:b3:17:10:71:aa:a6:0f:68: b6:83:be:c0:ec:2a:89:75:77:03:1e:ea:d2:43:73: 90:f4:8d:7e:bb:3d:15:d2:7a:0b:73:cb:fc:7a:02: 23:3b:22:75:f1:98:7c:c3:e6:59:5e:40:51:b1:dc: e5:42:0e:c0:2a:49:f3:a9:d5:b3:b3:b1:3e:63:e6: 63:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D8:8E:65:C1:13:35:FE:DF:C1:A5:38:78:C8:C3:F2:71:FE:C4:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e53c04c4-22f6-3c84-adbe-dafa6adc0f19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:a8:96:83:df:88:8f:54:e6:45:83:2d:00:e3:a5:c7:76:f6: 54:cc:34:7c:f5:d5:5d:70:bf:4a:6c:1a:7b:fc:22:0d:4b:2a: 69:ca:5e:38:a8:65:ff:fd:c4:3d:1f:46:d3:87:e1:af:04:e9: 40:c1:d1:fd:1e:f8:33:53:8b:88:62:f8:ae:1b:2a:f0:31:70: ce:c4:9e:85:a7:ad:e2:5e:0d:a3:40:4f:4d:9f:28:59:4d:54: bc:42:f0:07:17:9e:d8:95:25:bf:99:96:67:e8:fe:5b:73:a4: 68:e8:28:3c:1e:07:7b:ab:f4:bb:91:f3:9b:2a:b5:72:8c:bf: 96:37:75:73:b7:6d:62:7e:34:1a:af:10:f5:80:00:d3:a1:06: d1:44:c9:17:a2:e1:fd:f2:32:c4:ee:8b:b1:63:2d:07:a7:a3: 3a:0c:95:e1:38:a6:8b:83:9f:e7:e8:61:07:8f:6e:42:16:09: 3d:5f:50:9f:6a:fc:dd:11:ad:dc:b9:65:78:da:34:bb:24:bd: 95:9a:14:2e:c1:05:24:bb:30:96:dc:70:56:5a:7b:ba:e1:0c: 64:c5:6a:cc:db:76:45:5b:d0:0f:dc:46:d3:26:f4:ce:51:48: ab:3c:e1:55:6a:ec:ba:aa:f1:3d:26:4f:50:7f:23:37:0f:63: c5:3b:0e:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HBwMwkSnvAOpH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk MWI2MThmMWUtMGY0Yi00MmM4LWJhZGEtNWU4NWU3YjljYjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/xnEVEVww4tlrqp5gNsBc53Tzdny7ZuXMYY F9sc2XJX67gIDLiZaHN4+5nFFJOlPsEdaZEc+dBgype2gJA+T8xjgSDaZRkDEYw2 OST9g6aeZh79aGl7Dbm+AX5ZZSqTP5j1+2EkGL10Ato7WKe97mRKWX1rXmE8qQsT 7AaRNRh2LSroG7jNSDwj6Hk+ravn14E0bbezXqpp3WF804AS9J0TYTsc9iKZ+5Zf CEaNJMo96uOYh5Cf2mLAsxcQcaqmD2i2g77A7CqJdXcDHurSQ3OQ9I1+uz0V0noL c8v8egIjOyJ18Zh8w+ZZXkBRsdzlQg7AKknzqdWzs7E+Y+ZjNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDYjmXBEzX+38GlOHjIw/Jx/sTkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTUzYzA0YzQtMjJmNi0z Yzg0LWFkYmUtZGFmYTZhZGMwZjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmoloPfiI9U5kWDLQDjpcd29lTMNHz11V1wv0psGnv8Ig1LKmnKXjio Zf/9xD0fRtOH4a8E6UDB0f0e+DNTi4hi+K4bKvAxcM7EnoWnreJeDaNAT02fKFlN VLxC8AcXntiVJb+Zlmfo/ltzpGjoKDweB3ur9LuR85sqtXKMv5Y3dXO3bWJ+NBqv EPWAANOhBtFEyRei4f3yMsTui7FjLQenozoMleE4pouDn+foYQePbkIWCT1fUJ9q /N0Rrdy5ZXjaNLskvZWaFC7BBSS7MJbccFZae7rhDGTFaszbdkVb0A/cRtMm9M5R SKs84VVq7Lqq8T0mT1B/IzcPY8U7Dv4= -----END CERTIFICATE-----Generated at Sat Sep 6 05:17:39 2025 by rpki-client