$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71aa59cf-5f4a-33db-bd17-36b304ac79aa.roa File: 71aa59cf-5f4a-33db-bd17-36b304ac79aa.roa (raw, json) Hash identifier: 1lu0E4IIqoq1asP+7APjdjrvDWDvlgzvEStb87Jll+s= Subject key identifier: 4B:06:34:30:0F:47:2D:6B:CF:CA:41:67:EF:E5:0E:AE:C5:1E:86:1C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AB65106EB99A37FD18B44C020 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71aa59cf-5f4a-33db-bd17-36b304ac79aa.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 16625 IP address blocks: 23.1.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:51:06:eb:99:a3:7f:d1:8b:44:c0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=17fb4d5e-c139-4a4e-ba24-d7965b69b4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:37:4a:a7:5a:53:fb:2b:43:e7:57:25:fb:ca: be:f8:da:8c:f0:bd:9d:05:3c:a1:b9:bc:d8:5f:a4: 56:6e:b8:cf:6e:68:ef:2f:c6:0d:e1:52:92:ee:77: 54:78:90:85:6a:31:e1:e7:98:37:c6:03:00:66:fb: 19:95:e5:26:23:88:db:e5:0d:ac:47:08:c7:61:46: 4f:fd:cc:c2:da:60:ca:6e:ea:60:b9:43:81:cf:1a: f1:72:84:a0:93:d0:5e:70:6c:10:93:ec:e5:cd:3c: d5:9b:17:bb:87:ae:ed:d7:d8:77:80:38:8d:93:f9: b3:e5:a7:de:f7:75:3c:a4:91:07:4b:cf:4f:8b:bb: 4d:37:06:22:0e:49:24:46:40:f8:8b:c8:c4:9c:9d: 32:a5:25:80:e6:93:7f:77:f1:cd:4e:9d:da:db:8b: fb:2d:72:60:a4:b7:12:5f:9f:4c:3f:80:a4:eb:4e: 13:9f:50:89:05:b0:5d:d1:d9:b6:e6:95:5d:32:81: 4e:d4:0c:b3:61:29:3f:e0:28:f8:dd:1c:9c:76:06: 62:ef:ab:cf:d6:0a:cd:46:9d:95:c5:ef:63:5c:ae: d7:c5:87:d8:75:3d:2a:7b:8e:e0:56:84:5e:91:94: d5:21:c5:06:6c:16:bc:ce:14:b6:ef:6f:5e:65:74: f1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:06:34:30:0F:47:2D:6B:CF:CA:41:67:EF:E5:0E:AE:C5:1E:86:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71aa59cf-5f4a-33db-bd17-36b304ac79aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:85:21:bf:ea:9b:e2:5b:e9:7f:47:c1:3a:39:63:08:7d:2a: 15:fc:32:b3:98:a3:40:ef:f1:c5:7b:af:cd:93:f0:c1:bb:65: 9a:13:d8:a2:a1:40:a2:35:02:7a:63:7d:7f:57:b5:a0:cb:cb: 5a:e6:f1:bb:c5:47:06:45:c1:eb:07:92:2a:d6:ef:a6:f4:ff: 26:d9:ae:ef:bf:84:90:bd:37:f7:d3:45:be:f6:ee:75:57:bb: 7f:5c:0a:54:ef:e7:85:49:a2:00:13:e2:89:dc:0e:a6:a5:e5: 2c:dc:e3:6f:e1:45:d1:5b:c7:fc:55:d1:0d:9c:a0:d4:73:88: 83:7d:3c:6c:cd:d3:34:bf:8c:6a:79:ee:a1:44:4a:f3:05:32: 65:81:16:1c:1c:0e:3b:76:d0:e0:fb:9b:72:3d:87:6a:d7:c0: 5f:99:99:7f:47:2e:c2:d3:49:56:71:85:f0:65:71:85:b6:15: a0:99:1d:d2:00:f2:05:e4:f4:18:0a:2f:75:e1:1d:61:df:5c: cc:d3:12:ed:a3:55:43:ab:ce:72:a5:57:37:ed:c3:4e:ee:05: a0:f0:13:a1:89:3a:ff:d0:5b:0d:4e:2b:48:87:ea:6c:3e:ee: 65:37:42:f2:28:6c:44:fe:aa:5d:d9:16:fd:64:0f:f7:ab:d5: 5b:29:0a:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UQbrmaN/0YtEwCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk MTdmYjRkNWUtYzEzOS00YTRlLWJhMjQtZDc5NjViNjliNGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDdKp1pT+ytD51cl+8q++NqM8L2dBTyhubzY X6RWbrjPbmjvL8YN4VKS7ndUeJCFajHh55g3xgMAZvsZleUmI4jb5Q2sRwjHYUZP /czC2mDKbupguUOBzxrxcoSgk9BecGwQk+zlzTzVmxe7h67t19h3gDiNk/mz5afe 93U8pJEHS89Pi7tNNwYiDkkkRkD4i8jEnJ0ypSWA5pN/d/HNTp3a24v7LXJgpLcS X59MP4Ck604Tn1CJBbBd0dm25pVdMoFO1AyzYSk/4Cj43RycdgZi76vP1grNRp2V xe9jXK7XxYfYdT0qe47gVoRekZTVIcUGbBa8zhS2729eZXTx9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsGNDAPRy1rz8pBZ+/lDq7FHoYcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzFhYTU5Y2YtNWY0YS0z M2RiLWJkMTctMzZiMzA0YWM3OWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFwHuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyFIb/qm+Jb6X9HwTo5Ywh9KhX8MrOYo0Dv8cV7r82T8MG7ZZoT2KKh QKI1AnpjfX9XtaDLy1rm8bvFRwZFwesHkirW76b0/ybZru+/hJC9N/fTRb727nVX u39cClTv54VJogAT4oncDqal5Szc42/hRdFbx/xV0Q2coNRziIN9PGzN0zS/jGp5 7qFESvMFMmWBFhwcDjt20OD7m3I9h2rXwF+ZmX9HLsLTSVZxhfBlcYW2FaCZHdIA 8gXk9BgKL3XhHWHfXMzTEu2jVUOrznKlVzftw07uBaDwE6GJOv/QWw1OK0iH6mw+ 7mU3QvIobET+ql3ZFv1kD/er1VspCrE= -----END CERTIFICATE-----Generated at Mon Aug 4 19:17:22 2025 by rpki-client