$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/5a6ba6f3-4897-332b-8c6b-76ba9dc048aa.roa File: 5a6ba6f3-4897-332b-8c6b-76ba9dc048aa.roa (raw, json) Hash identifier: Uf82lwv0m1Zol5zVOAo2LGqfcW+O2ff/YE+85LhHCtw= Subject key identifier: 90:CA:90:9A:65:18:E3:7D:E5:04:47:5B:35:50:8C:FA:52:4E:22:9D Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F4328584AADF102D42325AEF85CC92E40 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/5a6ba6f3-4897-332b-8c6b-76ba9dc048aa.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 7782 IP address blocks: 23.235.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:02:d4:23:25:ae:f8:5c:c9:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=b5590381-2aa5-487a-ac5a-85ddceec0b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4c:0d:11:b2:de:1b:cf:44:ac:36:db:83:90: 96:c6:13:59:70:10:63:8a:53:64:57:c0:00:59:2d: 33:f8:c7:ce:f8:c7:46:de:ee:c9:1e:58:6c:64:4a: ce:5d:58:aa:fe:61:8b:43:2a:90:4a:0b:fd:2d:ff: 6e:14:02:2e:27:a6:2b:d6:30:0c:df:88:e2:95:4b: 30:4a:09:9f:3c:d6:0f:7e:9f:42:23:c5:42:8c:48: c4:f0:35:62:7f:14:17:b5:dd:a2:4d:db:ec:5c:34: be:0b:70:2a:9d:c4:98:b4:f8:6f:e5:f2:d6:f3:4d: 8e:32:db:25:91:d8:2e:46:44:f0:4f:9a:31:ce:d2: 3b:8c:85:5e:aa:15:23:3c:d4:1c:f8:3d:d6:60:cd: 8f:a9:85:d3:d7:03:bb:e5:88:c6:4b:23:41:29:f9: 23:36:00:54:b3:fc:37:e0:76:55:be:29:a7:b4:ab: 17:ab:d1:37:3c:aa:58:2a:2b:dd:9d:64:0a:ac:85: f4:6b:0f:b7:78:aa:af:9f:3d:c5:5b:95:26:8e:59: c6:ff:b1:75:db:69:16:38:ea:97:cc:13:82:a7:88: 3c:38:38:d3:dd:5e:06:d2:5c:49:71:fa:df:f8:5b: 7e:06:34:a9:26:42:fb:b1:96:2a:36:96:a8:bd:d1: 9f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CA:90:9A:65:18:E3:7D:E5:04:47:5B:35:50:8C:FA:52:4E:22:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/5a6ba6f3-4897-332b-8c6b-76ba9dc048aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 23.235.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:8f:a3:5e:be:20:89:f7:b5:90:8d:d1:78:52:ec:8e:0e:39: 1a:db:f4:dd:92:97:3a:c8:92:1a:a1:47:28:b6:22:fb:78:ef: 2e:2c:2e:06:51:4a:1d:8c:97:08:2a:47:3d:0c:1a:c9:d3:28: 8f:a0:b1:52:2e:00:b2:2a:6c:01:d1:ab:f7:85:04:87:62:40: ab:92:53:d1:37:37:b3:72:e8:07:92:cd:fe:16:14:b1:e9:ad: ab:be:58:3a:42:11:13:b7:23:0c:26:0c:16:db:b1:92:b5:dd: 81:c0:18:9a:99:98:bf:37:81:ad:2b:54:e1:56:89:a0:b0:64: 2f:95:d1:5e:34:22:73:94:13:bb:67:19:10:dd:ef:35:c6:df: 36:df:0e:e6:af:dd:8e:6b:e1:70:fb:15:72:90:21:b5:36:81: 2f:88:fc:04:f7:01:96:de:84:f6:f9:35:00:7c:08:19:d7:b9: 81:3c:84:b9:2a:e2:a7:4a:c0:86:68:dd:0d:0e:bc:ed:c9:f9: 40:ea:c1:69:b4:18:a2:ad:aa:9a:65:ef:fc:2d:54:ad:ee:b1: 3d:fc:65:3a:8d:15:2f:54:5b:c0:c1:1d:4b:d7:53:c8:ad:d0: 76:ee:cf:88:6a:2c:5d:02:78:f2:89:d6:82:bb:3a:7b:d6:f2: c1:4a:2a:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8QLUIyWu+FzJLkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk YjU1OTAzODEtMmFhNS00ODdhLWFjNWEtODVkZGNlZWMwYjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUwNEbLeG89ErDbbg5CWxhNZcBBjilNkV8AA WS0z+MfO+MdG3u7JHlhsZErOXViq/mGLQyqQSgv9Lf9uFAIuJ6Yr1jAM34jilUsw SgmfPNYPfp9CI8VCjEjE8DVifxQXtd2iTdvsXDS+C3AqncSYtPhv5fLW802OMtsl kdguRkTwT5oxztI7jIVeqhUjPNQc+D3WYM2PqYXT1wO75YjGSyNBKfkjNgBUs/w3 4HZVvimntKsXq9E3PKpYKivdnWQKrIX0aw+3eKqvnz3FW5UmjlnG/7F122kWOOqX zBOCp4g8ODjT3V4G0lxJcfrf+Ft+BjSpJkL7sZYqNpaovdGf8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDKkJplGON95QRHWzVQjPpSTiKdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvNWE2YmE2ZjMtNDg5Ny0z MzJiLThjNmItNzZiYTlkYzA0OGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF+tgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGPo16+IIn3tZCN0XhS7I4OORrb9N2SlzrIkhqhRyi2Ivt47y4sLgZR Sh2MlwgqRz0MGsnTKI+gsVIuALIqbAHRq/eFBIdiQKuSU9E3N7Ny6AeSzf4WFLHp rau+WDpCERO3IwwmDBbbsZK13YHAGJqZmL83ga0rVOFWiaCwZC+V0V40InOUE7tn GRDd7zXG3zbfDuav3Y5r4XD7FXKQIbU2gS+I/AT3AZbehPb5NQB8CBnXuYE8hLkq 4qdKwIZo3Q0OvO3J+UDqwWm0GKKtqppl7/wtVK3usT38ZTqNFS9UW8DBHUvXU8it 0Hbuz4hqLF0CePKJ1oK7OnvW8sFKKhU= -----END CERTIFICATE-----Generated at Wed Aug 6 09:31:15 2025 by rpki-client