$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8abe964-571c-33e2-b05c-0f35a7c8ce9b.roa File: f8abe964-571c-33e2-b05c-0f35a7c8ce9b.roa (raw, json) Hash identifier: wU5aM5DiIxdde3sCQqx32nKWZPHNrvIn17lWOyu8GN8= Subject key identifier: C1:D1:EE:89:80:1C:11:23:35:3F:B6:5D:67:88:9E:81:53:6E:B7:83 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE4612E5468DC7B15E8877F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8abe964-571c-33e2-b05c-0f35a7c8ce9b.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.2.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:2e:54:68:dc:7b:15:e8:87:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=ec45c3bc-bb32-4848-a8ef-f57dee64d768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3c:f2:82:00:bd:ab:b8:f8:b4:05:ec:75:ec: 98:7f:f0:a0:d1:d4:ce:53:6a:47:86:34:78:20:04: d9:7e:8d:33:66:6f:f7:f3:0b:aa:90:f4:35:0f:8a: ab:0a:f9:1f:ff:ff:3d:67:8b:b5:67:65:a7:f8:f0: 70:4b:5f:67:6e:47:5e:e1:49:d7:60:c2:30:8a:55: 13:e7:19:9d:de:d2:b8:a5:83:d6:84:e9:45:75:38: c5:01:58:0c:e2:e5:3d:6c:34:d7:b9:f2:79:57:79: d6:1c:5c:a0:3e:d4:8c:f3:63:dc:0f:e7:f6:74:9b: 1b:d5:8c:cf:f8:cf:81:47:74:4f:a5:62:81:2e:cd: 04:94:6d:e3:3f:ea:9f:26:ad:00:5c:fa:89:04:5e: 45:5d:2c:f4:e7:85:d7:9b:93:84:ee:cd:4a:b0:db: 1b:6b:f4:5f:2e:a4:96:f8:f2:63:2e:51:9a:1c:f3: 78:36:ba:88:53:fc:21:c1:b9:fd:8e:8b:40:7d:13: 59:7c:c6:1f:de:9a:a2:9e:19:a8:d8:c3:0f:1b:c9: cc:c0:0d:e9:69:a4:12:77:92:d1:7d:ce:e1:49:a0: 5c:a9:d1:62:39:0d:0d:7f:da:a9:83:8d:ed:16:11: 6f:1d:f1:c4:4b:a9:16:17:30:b6:96:5f:5b:f2:fc: 91:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D1:EE:89:80:1C:11:23:35:3F:B6:5D:67:88:9E:81:53:6E:B7:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8abe964-571c-33e2-b05c-0f35a7c8ce9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.2.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:ea:c4:e9:b4:e7:89:ff:9e:be:19:e4:63:47:a3:8e:0b:eb: c7:47:d0:6e:52:54:cf:32:fd:85:41:2b:e9:12:d6:5c:5e:1a: ab:f1:9e:84:18:2f:fa:2d:ac:cc:8b:f5:29:67:5a:a4:33:c3: 01:a2:9c:e3:30:61:01:65:78:20:9c:7c:dc:09:b5:68:92:bd: 75:a3:75:9f:5d:2a:8a:3b:47:af:52:6f:f0:fd:d5:ec:2e:17: f4:88:72:e8:f8:a7:19:78:f8:c0:7c:a9:6f:f7:c4:e5:95:79: 47:aa:25:59:5e:10:c1:e9:57:8d:39:66:92:e5:7d:2b:e4:d5: 11:29:3a:50:4f:d2:7b:0e:73:4f:e5:4e:69:09:94:01:64:fb: 72:ec:6e:d1:07:b8:b1:ce:ff:7f:2d:df:eb:b1:d7:a7:b4:ec: 48:40:0f:2b:42:a6:0f:69:82:32:1f:f1:1b:e7:1c:6c:43:71: 33:3e:4b:fc:ea:60:e0:cf:5b:44:cb:5d:ac:c3:fa:8e:85:bd: 53:e4:7f:e6:76:c9:c1:dc:56:7f:26:f5:3f:c0:30:eb:15:13: 64:d1:37:27:52:d4:63:cf:9c:d7:b6:1b:ea:14:fd:9a:cd:98: 4f:d0:ae:9b:c4:2a:da:0a:68:c5:e7:cb:10:8e:8b:a6:15:20: c6:c3:0e:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYS5UaNx7FeiHfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk ZWM0NWMzYmMtYmIzMi00ODQ4LWE4ZWYtZjU3ZGVlNjRkNzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjzyggC9q7j4tAXsdeyYf/Cg0dTOU2pHhjR4 IATZfo0zZm/38wuqkPQ1D4qrCvkf//89Z4u1Z2Wn+PBwS19nbkde4UnXYMIwilUT 5xmd3tK4pYPWhOlFdTjFAVgM4uU9bDTXufJ5V3nWHFygPtSM82PcD+f2dJsb1YzP +M+BR3RPpWKBLs0ElG3jP+qfJq0AXPqJBF5FXSz054XXm5OE7s1KsNsba/RfLqSW +PJjLlGaHPN4NrqIU/whwbn9jotAfRNZfMYf3pqinhmo2MMPG8nMwA3paaQSd5LR fc7hSaBcqdFiOQ0Nf9qpg43tFhFvHfHES6kWFzC2ll9b8vyRaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHR7omAHBEjNT+2XWeInoFTbreDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjhhYmU5NjQtNTcxYy0z M2UyLWIwNWMtMGYzNWE3YzhjZTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwJQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrqxOm054n/nr4Z5GNHo44L68dH0G5SVM8y/YVBK+kS1lxeGqvxnoQY L/otrMyL9SlnWqQzwwGinOMwYQFleCCcfNwJtWiSvXWjdZ9dKoo7R69Sb/D91ewu F/SIcuj4pxl4+MB8qW/3xOWVeUeqJVleEMHpV405ZpLlfSvk1REpOlBP0nsOc0/l TmkJlAFk+3LsbtEHuLHO/38t3+ux16e07EhADytCpg9pgjIf8RvnHGxDcTM+S/zq YODPW0TLXazD+o6FvVPkf+Z2ycHcVn8m9T/AMOsVE2TRNydS1GPPnNe2G+oU/ZrN mE/QrpvEKtoKaMXnyxCOi6YVIMbDDuw= -----END CERTIFICATE-----Generated at Wed Nov 5 08:21:03 2025 by rpki-client