$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39fca956-6f8d-3af0-8e26-f6eaa8d1dc8d.roa File: 39fca956-6f8d-3af0-8e26-f6eaa8d1dc8d.roa (raw, json) Hash identifier: x/o/M0YzoN9WWS3AXKP1TGUFoBFoyM1XwxzsVhXvr5Q= Subject key identifier: 7F:E5:24:7C:A4:B8:FD:6D:4C:77:E7:C4:0C:BB:04:EB:B9:0B:27:17 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A90A0DF71A3CBCD579D20AE40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39fca956-6f8d-3af0-8e26-f6eaa8d1dc8d.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 16625 IP address blocks: 23.32.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:df:71:a3:cb:cd:57:9d:20:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=f254186c-40bb-4601-aeb7-d07b3add2500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6f:36:bb:c8:e2:8c:b8:7b:36:91:00:73:cd: 92:24:75:77:6f:64:a4:5e:67:2f:c8:b9:d3:65:5d: d5:b1:27:7f:19:e4:cf:fe:1c:2d:dc:74:a5:f8:02: 4e:7e:9c:40:07:94:49:6c:06:25:0e:72:6b:2d:41: 98:63:d3:28:20:df:3d:1f:46:b3:55:69:22:41:fc: 18:cf:5e:3a:b5:78:00:b0:be:a3:ec:a1:f2:1a:80: 31:75:d4:b8:ec:27:d2:b9:07:74:1e:1f:d9:3d:5a: 8a:ac:71:19:57:98:3f:c2:de:b5:eb:fe:53:b5:24: bd:6f:b9:44:99:9e:06:0f:b6:03:82:aa:af:0b:39: 8f:a1:c9:68:7f:6d:6a:9d:e9:d2:fd:ab:dc:73:a5: 2a:24:15:74:fc:d1:14:f3:1c:d7:03:e0:a7:e6:7f: 55:b9:e8:ff:2c:df:f6:e6:42:a1:cb:72:7d:63:c8: e3:0d:ab:bd:eb:ae:64:2a:68:0d:28:60:60:48:11: c1:79:d4:67:e5:2e:67:a3:00:68:7a:40:a8:f1:4b: c6:fe:d9:b4:a1:52:df:c0:bc:26:01:c2:c9:f2:4d: d6:1d:15:61:47:8d:7a:11:a8:00:72:fc:6a:98:f9: 06:8e:f5:81:e7:b6:9b:20:0e:7f:54:b2:0b:eb:cd: f6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E5:24:7C:A4:B8:FD:6D:4C:77:E7:C4:0C:BB:04:EB:B9:0B:27:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39fca956-6f8d-3af0-8e26-f6eaa8d1dc8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:55:da:c0:ad:bf:31:21:95:52:7e:63:3c:6f:ac:2d:d1:ec: 85:6f:f8:8c:b9:b3:7f:bf:6d:63:d0:85:e2:02:eb:57:34:10: 12:f9:82:d8:7e:13:d6:da:eb:e9:ff:35:81:b3:69:6a:53:16: fb:96:50:97:1d:c3:ad:5a:0a:d4:48:a7:49:33:70:0e:4d:e2: b9:39:b6:ee:51:17:46:9b:80:41:23:4d:99:d4:07:42:24:93: 44:ca:e9:1a:d1:42:b1:db:74:5c:8d:7e:90:45:e2:bf:5e:ba: 5a:89:f8:10:7c:f7:37:e7:1f:61:16:79:57:e9:4e:77:26:21: a0:c1:f1:10:de:55:8f:3f:11:c2:03:25:19:da:ef:e5:e7:68: 70:84:3a:84:02:f4:1b:8b:7d:22:e4:09:f9:d8:d7:64:43:8a: 2d:07:b9:fa:ae:60:fa:c4:ee:e3:cf:26:05:f6:12:b5:a7:9d: cd:0b:4d:33:90:7c:76:ac:34:69:c8:2e:9b:45:75:a2:24:e9: db:62:d6:cd:d8:2f:e2:b1:3e:bf:52:f7:58:88:9a:01:d0:b4: 5c:e0:94:0b:f5:b3:a6:89:5a:ba:ed:c1:f9:05:c0:28:20:ac: ed:b4:42:6c:ad:48:4c:21:0d:62:04:a9:d5:fb:56:10:2d:21: 3d:c2:0a:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoN9xo8vNV50grkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZjI1NDE4NmMtNDBiYi00NjAxLWFlYjctZDA3YjNhZGQyNTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgW82u8jijLh7NpEAc82SJHV3b2SkXmcvyLnT ZV3VsSd/GeTP/hwt3HSl+AJOfpxAB5RJbAYlDnJrLUGYY9MoIN89H0azVWkiQfwY z146tXgAsL6j7KHyGoAxddS47CfSuQd0Hh/ZPVqKrHEZV5g/wt616/5TtSS9b7lE mZ4GD7YDgqqvCzmPoclof21qnenS/avcc6UqJBV0/NEU8xzXA+Cn5n9Vuej/LN/2 5kKhy3J9Y8jjDau9665kKmgNKGBgSBHBedRn5S5nowBoekCo8UvG/tm0oVLfwLwm AcLJ8k3WHRVhR416EagAcvxqmPkGjvWB57abIA5/VLIL6832fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/lJHykuP1tTHfnxAy7BOu5CycXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzlmY2E5NTYtNmY4ZC0z YWYwLThlMjYtZjZlYWE4ZDFkYzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9V2sCtvzEhlVJ+YzxvrC3R7IVv+Iy5s3+/bWPQheIC61c0EBL5gth+ E9ba6+n/NYGzaWpTFvuWUJcdw61aCtRIp0kzcA5N4rk5tu5RF0abgEEjTZnUB0Ik k0TK6RrRQrHbdFyNfpBF4r9eulqJ+BB89zfnH2EWeVfpTncmIaDB8RDeVY8/EcID JRna7+XnaHCEOoQC9BuLfSLkCfnY12RDii0HufquYPrE7uPPJgX2ErWnnc0LTTOQ fHasNGnILptFdaIk6dti1s3YL+KxPr9S91iImgHQtFzglAv1s6aJWrrtwfkFwCgg rO20QmytSEwhDWIEqdX7VhAtIT3CCkc= -----END CERTIFICATE-----Generated at Mon Aug 4 19:06:49 2025 by rpki-client