$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7e280b7-e14e-3f23-a411-dfcc49f93ddb.roa File: a7e280b7-e14e-3f23-a411-dfcc49f93ddb.roa (raw, json) Hash identifier: xuHn3mv/9WVYdsHD4Rqt0DCmcxahr4Ug8u8uoPIXzgA= Subject key identifier: 0D:C2:EF:4C:8E:B2:E7:64:9E:E6:1C:AE:6D:F8:97:ED:D0:43:70:92 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A6825E0BF8823683E11074A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7e280b7-e14e-3f23-a411-dfcc49f93ddb.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 16625 IP address blocks: 23.3.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:e0:bf:88:23:68:3e:11:07:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=2fb32283-bbdf-4197-ac5a-071051810e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8d:85:f5:e0:f7:6d:f2:5e:59:a3:bf:5d:31: d7:67:41:af:0e:a6:ec:27:71:b3:97:2d:b1:6c:e9: 90:1e:6a:e0:e4:67:a4:f4:52:23:92:55:cd:d3:5b: c3:0f:d2:b5:af:0e:ab:4e:71:8e:91:a6:22:c7:b5: 39:31:a6:e3:69:51:2e:75:fc:08:7b:3e:1b:36:d7: ed:38:56:e2:90:96:96:9d:a0:a1:12:c3:41:dd:11: 1d:48:99:49:79:ff:a3:02:e7:d1:f1:3a:44:3f:2e: 3b:29:29:34:96:1d:ec:27:94:8f:99:66:c8:d5:4b: 73:8c:66:a3:c2:49:51:de:a2:f6:71:89:67:63:95: 4c:7f:85:16:66:a9:1d:03:fe:f5:76:c0:4b:1f:a7: d7:0a:cf:b1:67:e0:21:0d:38:04:d3:01:2b:2a:f8: d5:c8:bd:29:74:23:76:4c:28:01:03:35:ad:9f:67: 23:ba:ed:56:91:9e:c1:c9:3c:d0:51:4d:19:3a:d9: 20:dd:43:fd:82:8c:83:9c:58:36:64:94:ff:52:e3: a9:2f:31:d1:e3:c4:e9:33:46:a2:ae:8c:3f:bd:dd: 2e:81:ad:71:89:49:e6:12:67:63:64:3a:06:13:63: 6e:74:d6:95:9c:5f:11:8f:02:0c:d9:82:02:41:a8: 26:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C2:EF:4C:8E:B2:E7:64:9E:E6:1C:AE:6D:F8:97:ED:D0:43:70:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7e280b7-e14e-3f23-a411-dfcc49f93ddb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:5c:cb:09:c4:7f:a0:24:4d:ca:3e:3d:0c:52:0c:ce:12:fb: df:c2:0a:76:36:ca:f2:dd:f4:02:c4:68:a8:17:f5:ea:57:39: 53:e9:69:38:85:da:14:45:c3:ec:22:8b:4d:9b:77:d5:a4:04: 3f:b2:72:21:37:b0:2e:12:16:4e:95:07:00:bd:52:72:75:e8: 52:52:2f:91:46:39:4b:6f:44:3b:db:fc:5a:4f:48:1c:a3:a6: 44:c7:b9:ff:43:1f:28:46:b2:c1:27:a8:c5:03:18:9b:a6:b5: 56:20:9d:7f:ae:0d:07:51:87:c5:25:07:ad:6f:10:9a:28:10: d3:a2:fb:5b:99:a6:4f:77:39:9f:00:65:7e:51:35:e8:48:0f: 11:18:04:05:db:e7:c9:d9:d0:2a:da:7d:5f:a6:cc:d1:1e:9c: 33:d1:57:12:8c:6a:50:c7:73:9e:be:d1:0a:07:42:89:70:76: ed:c7:02:31:75:80:bf:b3:3c:6a:97:1a:e1:3d:8d:bc:63:c9: 60:5d:b5:ab:41:ae:ba:65:f6:d2:18:ba:c5:bd:e2:8a:aa:b6: ac:66:c7:03:4d:44:00:f0:bb:28:c0:75:21:c9:ae:7c:07:78: 4e:61:9b:06:ce:8a:c8:54:91:df:54:71:ad:58:5f:7e:c9:d7: 8a:54:ca:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJeC/iCNoPhEHSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk MmZiMzIyODMtYmJkZi00MTk3LWFjNWEtMDcxMDUxODEwZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I2F9eD3bfJeWaO/XTHXZ0GvDqbsJ3Gzly2x bOmQHmrg5Gek9FIjklXN01vDD9K1rw6rTnGOkaYix7U5MabjaVEudfwIez4bNtft OFbikJaWnaChEsNB3REdSJlJef+jAufR8TpEPy47KSk0lh3sJ5SPmWbI1UtzjGaj wklR3qL2cYlnY5VMf4UWZqkdA/71dsBLH6fXCs+xZ+AhDTgE0wErKvjVyL0pdCN2 TCgBAzWtn2cjuu1WkZ7ByTzQUU0ZOtkg3UP9goyDnFg2ZJT/UuOpLzHR48TpM0ai row/vd0uga1xiUnmEmdjZDoGE2NudNaVnF8RjwIM2YICQagm9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3C70yOsudknuYcrm34l+3QQ3CSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTdlMjgwYjctZTE0ZS0z ZjIzLWE0MTEtZGZjYzQ5ZjkzZGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwOEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZcywnEf6AkTco+PQxSDM4S+9/CCnY2yvLd9ALEaKgX9epXOVPpaTiF 2hRFw+wii02bd9WkBD+yciE3sC4SFk6VBwC9UnJ16FJSL5FGOUtvRDvb/FpPSByj pkTHuf9DHyhGssEnqMUDGJumtVYgnX+uDQdRh8UlB61vEJooENOi+1uZpk93OZ8A ZX5RNehIDxEYBAXb58nZ0CrafV+mzNEenDPRVxKMalDHc56+0QoHQolwdu3HAjF1 gL+zPGqXGuE9jbxjyWBdtatBrrpl9tIYusW94oqqtqxmxwNNRADwuyjAdSHJrnwH eE5hmwbOishUkd9Uca1YX37J14pUysU= -----END CERTIFICATE-----Generated at Mon Aug 4 18:19:52 2025 by rpki-client