$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dae47f19-a452-365d-a45a-89f5e4d8b9a7.roa File: dae47f19-a452-365d-a45a-89f5e4d8b9a7.roa (raw, json) Hash identifier: b4d5LQcaL2O/aZCd3AHQ1OqkewYIxDiOdZCxnyn3lAY= Subject key identifier: 9C:A2:AF:14:E7:C4:85:F5:DA:29:DE:7D:C5:59:24:51:86:BF:FB:41 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ABBE6336DBA83FD4865A45800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dae47f19-a452-365d-a45a-89f5e4d8b9a7.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 20940 IP address blocks: 23.197.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:33:6d:ba:83:fd:48:65:a4:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=7cfca416-fe35-431a-835c-7813b5d046ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e6:79:a9:68:4b:49:89:e9:66:1b:7a:60:a8: b1:d1:32:aa:b7:ba:70:3b:a8:07:45:97:0e:14:84: 68:4e:01:86:8c:ac:42:77:2f:04:58:af:40:5f:ea: 16:fe:84:37:06:d3:15:e6:f8:06:8d:ce:d4:c3:3e: 3c:01:aa:c3:59:fe:2b:b8:32:29:bc:19:75:87:9a: 23:3c:8a:ea:33:76:37:bb:1c:84:48:d5:be:4b:1e: 57:ad:9e:ec:67:28:da:00:15:69:0e:50:c1:4e:81: a7:48:23:d5:0c:c1:b1:03:68:b3:af:02:ba:1a:db: 13:e2:53:5b:98:5c:9d:a8:7b:72:aa:ff:93:3a:9a: 2a:02:93:43:ce:92:0b:67:49:0b:5d:77:7a:f6:6f: 98:27:7b:4b:c1:3e:3a:55:7e:93:33:b3:eb:2a:3e: d9:06:e7:ba:e4:10:cc:ce:4b:7e:e5:df:3a:71:fa: 96:dc:e4:6b:97:3a:27:c3:c4:64:85:e2:f3:85:07: db:ec:f0:75:7d:66:aa:d9:58:d5:df:0f:af:97:1d: 2b:80:85:e6:99:3b:cb:3b:bb:d0:51:21:67:b6:5d: aa:c1:cc:fc:bc:0c:c0:9a:08:63:b7:9f:bd:f1:04: 8d:c0:54:5a:14:fb:c1:5d:fb:bb:b8:cc:3a:7d:20: 3e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A2:AF:14:E7:C4:85:F5:DA:29:DE:7D:C5:59:24:51:86:BF:FB:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dae47f19-a452-365d-a45a-89f5e4d8b9a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:e4:05:94:9e:c7:3a:f3:f0:79:40:45:02:08:49:76:3d:42: 02:c4:d5:a3:48:40:cf:1b:31:0d:a0:23:bc:5b:11:70:d6:6a: 5b:47:3b:2d:90:03:eb:7c:3c:15:01:f4:78:5a:5d:f5:bd:1f: 0a:52:2a:96:d0:39:56:8f:07:6d:98:51:35:60:1c:9f:5f:bd: b0:0a:a4:28:6f:f3:a4:03:a8:d4:6e:31:93:55:01:8c:fd:52: 79:87:1d:93:42:88:94:c2:59:91:dc:7f:5e:a5:f4:1a:26:96: cc:a5:e1:d4:4b:28:be:38:ed:17:73:b3:0b:7d:d9:a7:df:7f: 64:c0:c9:43:d8:be:ff:e0:24:8c:05:3f:1a:09:c6:85:14:c4: 01:f0:0f:11:68:61:00:01:04:98:7e:90:66:2d:f0:aa:2a:d4: d0:c0:9b:e4:b6:92:3f:c6:a8:ae:c1:6d:8a:db:36:f8:a1:10: a3:19:d0:9f:60:59:ea:38:4f:04:c3:42:81:20:9b:fa:90:e3: 92:d6:35:27:83:fc:51:56:3d:ca:38:0a:d3:49:68:68:3c:d4: b1:cb:e0:e0:82:62:9e:80:8d:70:1a:8a:89:69:bc:76:2f:72: 64:8a:e2:00:f7:e7:cd:6c:a0:2b:99:ec:34:2c:6b:58:ca:6c: df:be:31:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq75jNtuoP9SGWkWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk N2NmY2E0MTYtZmUzNS00MzFhLTgzNWMtNzgxM2I1ZDA0NmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuZ5qWhLSYnpZht6YKix0TKqt7pwO6gHRZcO FIRoTgGGjKxCdy8EWK9AX+oW/oQ3BtMV5vgGjc7Uwz48AarDWf4ruDIpvBl1h5oj PIrqM3Y3uxyESNW+Sx5XrZ7sZyjaABVpDlDBToGnSCPVDMGxA2izrwK6GtsT4lNb mFydqHtyqv+TOpoqApNDzpILZ0kLXXd69m+YJ3tLwT46VX6TM7PrKj7ZBue65BDM zkt+5d86cfqW3ORrlzonw8RkheLzhQfb7PB1fWaq2VjV3w+vlx0rgIXmmTvLO7vQ USFntl2qwcz8vAzAmghjt5+98QSNwFRaFPvBXfu7uMw6fSA+zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyirxTnxIX12inefcVZJFGGv/tBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGFlNDdmMTktYTQ1Mi0z NjVkLWE0NWEtODlmNWU0ZDhiOWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8VVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnkBZSexzrz8HlARQIISXY9QgLE1aNIQM8bMQ2gI7xbEXDWaltHOy2Q A+t8PBUB9HhaXfW9HwpSKpbQOVaPB22YUTVgHJ9fvbAKpChv86QDqNRuMZNVAYz9 UnmHHZNCiJTCWZHcf16l9Bomlsyl4dRLKL447Rdzswt92afff2TAyUPYvv/gJIwF PxoJxoUUxAHwDxFoYQABBJh+kGYt8Koq1NDAm+S2kj/GqK7BbYrbNvihEKMZ0J9g Weo4TwTDQoEgm/qQ45LWNSeD/FFWPco4CtNJaGg81LHL4OCCYp6AjXAaiolpvHYv cmSK4gD3581soCuZ7DQsa1jKbN++MYs= -----END CERTIFICATE-----Generated at Mon Aug 4 14:51:19 2025 by rpki-client