$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5838b467-10e6-3deb-b337-cc4822f6d39e.roa File: 5838b467-10e6-3deb-b337-cc4822f6d39e.roa (raw, json) Hash identifier: d5NqWlfT+xArJuoEfIlOXjd5HjA017WdMX3geXZPt/4= Subject key identifier: 13:BA:F2:CE:9D:24:7B:65:F5:FD:FE:BE:06:90:23:07:90:4A:BF:41 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AB4EF05A91032E2CC7948C940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5838b467-10e6-3deb-b337-cc4822f6d39e.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 0 IP address blocks: 23.4.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ef:05:a9:10:32:e2:cc:79:48:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=0ad6c2e5-8cb3-4e46-b42c-3aab89ee78b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6c:23:10:c8:5e:0a:f1:d9:ce:03:81:23:95: 4d:76:29:27:99:06:06:d9:9b:ad:49:51:15:d9:f4: 85:e7:d4:0b:84:0e:3a:ca:3a:f4:7c:c4:57:f0:7f: 15:50:06:d6:6b:07:7e:08:8d:da:06:c2:44:11:eb: 05:a3:2f:25:d5:63:6f:2e:22:46:67:46:70:5f:ae: df:2d:33:be:0b:ff:65:39:2e:d1:76:34:e4:5c:54: 91:ba:df:70:4e:4a:ce:24:21:98:c8:19:28:55:34: 15:02:5f:42:37:de:c3:e6:ea:df:2f:57:91:ba:ee: 70:fd:04:05:22:34:b4:b1:2d:9b:a1:15:66:d6:60: 18:66:87:58:e2:92:7b:80:7f:bc:75:a7:ad:36:af: e2:56:42:34:43:56:d5:0a:10:cb:2d:19:b4:f0:09: 98:f9:41:4e:7f:dd:7b:bd:48:49:46:40:77:6c:9d: f3:5f:5e:15:b4:3f:9c:88:69:ee:39:ab:69:23:f3: 95:64:78:34:62:d4:37:ab:50:5f:f8:a6:87:1c:48: da:10:79:2f:07:25:fa:b6:5c:c0:3c:40:cb:ea:95: c5:7e:08:57:e7:9e:8e:bc:c0:2c:1d:35:65:85:09: 7a:ee:3f:a3:d5:4d:5a:5a:23:76:4d:b4:60:8b:c0: 9f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:BA:F2:CE:9D:24:7B:65:F5:FD:FE:BE:06:90:23:07:90:4A:BF:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5838b467-10e6-3deb-b337-cc4822f6d39e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.4.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:97:22:01:45:e8:e4:9e:ce:ce:c4:cb:35:a5:55:63:aa:e5: ef:b2:13:02:8f:94:05:2f:18:59:f1:61:03:ad:94:7c:8b:a9: 2f:b5:f8:2d:aa:5e:4d:f7:9d:f7:b3:42:74:07:0d:18:80:28: df:9f:fb:d7:4c:0d:65:4b:1e:5c:db:c1:ff:7e:7f:97:d9:94: b8:f2:6c:16:d7:5c:22:96:e9:7f:55:18:5e:7d:cb:e6:d3:bb: 92:9c:41:59:aa:19:3a:c1:d9:8f:50:17:67:34:43:dd:c2:52: 0c:b0:e7:da:ed:f4:0f:b2:c2:73:d0:82:e3:f9:14:cf:b5:95: ae:6d:9a:7e:d1:34:f6:58:b3:38:3f:92:0d:b5:b7:a5:d8:71: 97:7f:29:97:e5:42:68:0e:99:55:ca:74:bb:1b:e2:87:af:3b: 06:ee:64:68:7a:b9:ac:ef:30:49:04:4b:10:58:1a:90:a2:14: 0a:4c:8b:60:25:16:1b:d1:6b:91:58:e1:94:ef:f6:96:50:1a: 2e:3a:fa:6f:ee:51:3a:4c:b9:e1:1b:21:7f:60:ed:c6:1c:cd: f0:e0:47:1b:2a:9f:85:7e:4d:f1:21:a6:7c:6d:6d:a6:ac:aa: c8:f8:2e:5c:c5:df:0c:bd:16:31:f5:ae:0f:08:b4:7a:4e:ae: 58:46:c0:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07wWpEDLizHlIyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MGFkNmMyZTUtOGNiMy00ZTQ2LWI0MmMtM2FhYjg5ZWU3OGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmwjEMheCvHZzgOBI5VNdiknmQYG2ZutSVEV 2fSF59QLhA46yjr0fMRX8H8VUAbWawd+CI3aBsJEEesFoy8l1WNvLiJGZ0ZwX67f LTO+C/9lOS7RdjTkXFSRut9wTkrOJCGYyBkoVTQVAl9CN97D5urfL1eRuu5w/QQF IjS0sS2boRVm1mAYZodY4pJ7gH+8daetNq/iVkI0Q1bVChDLLRm08AmY+UFOf917 vUhJRkB3bJ3zX14VtD+ciGnuOatpI/OVZHg0YtQ3q1Bf+KaHHEjaEHkvByX6tlzA PEDL6pXFfghX556OvMAsHTVlhQl67j+j1U1aWiN2TbRgi8Cf8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBO68s6dJHtl9f3+vgaQIweQSr9BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTgzOGI0NjctMTBlNi0z ZGViLWIzMzctY2M0ODIyZjZkMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwT0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKXIgFF6OSezs7EyzWlVWOq5e+yEwKPlAUvGFnxYQOtlHyLqS+1+C2q Xk33nfezQnQHDRiAKN+f+9dMDWVLHlzbwf9+f5fZlLjybBbXXCKW6X9VGF59y+bT u5KcQVmqGTrB2Y9QF2c0Q93CUgyw59rt9A+ywnPQguP5FM+1la5tmn7RNPZYszg/ kg21t6XYcZd/KZflQmgOmVXKdLsb4oevOwbuZGh6uazvMEkESxBYGpCiFApMi2Al FhvRa5FY4ZTv9pZQGi46+m/uUTpMueEbIX9g7cYczfDgRxsqn4V+TfEhpnxtbaas qsj4LlzF3wy9FjH1rg8ItHpOrlhGwCg= -----END CERTIFICATE-----Generated at Mon Aug 4 16:09:33 2025 by rpki-client