$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19e0ada9-aea0-319d-8c15-db8ea329a4d1.roa File: 19e0ada9-aea0-319d-8c15-db8ea329a4d1.roa (raw, json) Hash identifier: WVEhwBpzAM9cMbYf9gWrDV/OCFhwh+P8WY39DOHh0gc= Subject key identifier: 2A:1C:2B:43:E8:F1:D4:1E:00:A7:B9:00:5B:25:CB:5E:1A:96:6E:E3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AB91B90B31F459417459C2848 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19e0ada9-aea0-319d-8c15-db8ea329a4d1.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 33905 IP address blocks: 23.1.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:90:b3:1f:45:94:17:45:9c:28:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=d5637f1d-9ec6-4c92-9189-60c98e09e0e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c4:fd:92:27:9a:84:6d:88:39:0b:96:9e:0b: a9:4b:9f:32:2f:8d:1c:bb:25:c5:14:81:be:0d:a0: 6e:45:4d:43:58:aa:9c:c5:46:a2:d1:d3:95:b4:a7: 5d:8a:27:4e:1d:11:3b:32:73:4c:79:b6:b1:fb:69: 13:96:bf:cc:12:b5:28:fe:af:6e:1f:4e:72:2a:68: a2:52:39:4f:02:65:60:f3:3b:c3:19:eb:2b:c1:48: 28:be:c7:e7:84:2b:1d:45:e8:dd:5e:3d:2b:aa:01: b4:c5:60:83:dd:4f:44:9f:e3:8d:b7:59:ae:6d:ae: 7d:c6:6d:06:b8:4e:e0:e5:a8:4a:93:45:79:05:1f: ed:e2:82:0f:dd:88:99:08:0d:e9:cb:b8:4a:45:26: 9d:33:fa:17:6a:63:cf:57:7b:80:fb:19:fa:83:ef: a8:95:45:55:25:32:67:28:47:64:76:8e:bd:31:12: 29:fc:87:64:f5:eb:9d:4e:db:25:69:94:73:4e:eb: ea:5c:5e:b1:a2:ab:3a:cf:a3:e4:4e:c0:2e:1a:17: 3c:2b:41:d2:01:31:3e:73:fe:02:fd:16:89:72:c2: 75:6a:53:ca:05:ed:78:96:f5:37:40:4f:3b:47:86: 15:ee:ee:68:6e:f9:67:33:1f:4a:da:77:7e:cc:1f: 29:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1C:2B:43:E8:F1:D4:1E:00:A7:B9:00:5B:25:CB:5E:1A:96:6E:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19e0ada9-aea0-319d-8c15-db8ea329a4d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:36:0c:02:2b:39:9c:33:fd:44:d8:6a:ad:a7:d5:fa:36:c7: 97:f5:f3:96:e1:98:23:4c:cc:47:33:5a:ea:a8:e3:fc:73:94: ca:ff:16:ed:99:29:7d:50:46:d7:e0:e5:8c:dd:1a:97:fa:86: b2:56:f0:23:0e:cc:ea:86:00:b8:1e:6b:d9:ed:e5:46:59:bb: 43:c8:30:46:8d:24:d8:65:29:f3:60:10:ac:83:01:35:f8:89: 0e:34:4f:51:33:36:02:0d:a5:55:a8:ef:c4:2c:c8:1f:22:a8: eb:1e:a7:58:b5:a4:94:0e:b1:e0:64:27:d0:c5:f4:e1:2f:65: af:96:92:a8:95:68:15:0b:ef:3d:b7:dd:47:72:67:d0:aa:ef: b7:0c:77:3d:0b:c9:66:bc:47:c1:67:41:03:64:65:dc:44:9a: 86:fe:42:d5:01:4d:3e:60:c5:41:6f:25:e6:d9:60:49:a4:ee: 9b:57:14:dc:68:6a:3a:dd:c2:84:64:7b:8d:82:84:9b:e3:b8: a4:7e:23:d4:ed:82:02:e0:f1:56:e7:7d:86:ce:73:79:fa:9a: f6:d5:1c:12:e8:85:cb:d4:23:eb:33:2a:22:e8:67:32:a7:e1: ee:50:79:2f:af:36:aa:ed:dc:34:8d:56:a8:38:0f:50:c7:30: 35:70:34:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G5CzH0WUF0WcKEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZDU2MzdmMWQtOWVjNi00YzkyLTkxODktNjBjOThlMDllMGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcT9kieahG2IOQuWngupS58yL40cuyXFFIG+ DaBuRU1DWKqcxUai0dOVtKddiidOHRE7MnNMebax+2kTlr/MErUo/q9uH05yKmii UjlPAmVg8zvDGesrwUgovsfnhCsdRejdXj0rqgG0xWCD3U9En+ONt1muba59xm0G uE7g5ahKk0V5BR/t4oIP3YiZCA3py7hKRSadM/oXamPPV3uA+xn6g++olUVVJTJn KEdkdo69MRIp/Idk9eudTtslaZRzTuvqXF6xoqs6z6PkTsAuGhc8K0HSATE+c/4C /RaJcsJ1alPKBe14lvU3QE87R4YV7u5obvlnMx9K2nd+zB8pEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCocK0Po8dQeAKe5AFsly14alm7jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTllMGFkYTktYWVhMC0z MTlkLThjMTUtZGI4ZWEzMjlhNGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwEjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADc2DAIrOZwz/UTYaq2n1fo2x5f185bhmCNMzEczWuqo4/xzlMr/Fu2Z KX1QRtfg5YzdGpf6hrJW8CMOzOqGALgea9nt5UZZu0PIMEaNJNhlKfNgEKyDATX4 iQ40T1EzNgINpVWo78QsyB8iqOsep1i1pJQOseBkJ9DF9OEvZa+WkqiVaBUL7z23 3UdyZ9Cq77cMdz0LyWa8R8FnQQNkZdxEmob+QtUBTT5gxUFvJebZYEmk7ptXFNxo ajrdwoRke42ChJvjuKR+I9TtggLg8VbnfYbOc3n6mvbVHBLohcvUI+szKiLoZzKn 4e5QeS+vNqrt3DSNVqg4D1DHMDVwNE4= -----END CERTIFICATE-----Generated at Mon Aug 4 18:37:23 2025 by rpki-client