$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/008b5a39-e02f-36a9-909f-48edbc257012.roa File: 008b5a39-e02f-36a9-909f-48edbc257012.roa (raw, json) Hash identifier: XCW/KMgbSDpKMr5bZAqgEdWF2hFDmd4nhKEVL2XD+Bg= Subject key identifier: 97:58:85:93:F8:4F:9F:BF:5F:FA:1F:E8:A2:26:B5:CF:F2:2F:65:DE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A77809548CF7F7180B006FAC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/008b5a39-e02f-36a9-909f-48edbc257012.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.205.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:95:48:cf:7f:71:80:b0:06:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=e7c13e58-d056-4d84-b64f-fc21328874b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:56:be:6c:ca:28:d5:70:e7:cc:45:4d:18:90: 58:ab:b9:ac:b0:5d:cf:73:e6:b4:94:5d:a5:f8:c9: 4a:13:f9:c7:8f:84:9c:af:a4:63:eb:c1:cb:bc:ba: 34:a1:f2:39:5a:4a:94:73:80:47:7f:be:1b:59:26: ba:d5:27:49:03:b1:68:0c:3c:a1:64:af:98:d1:b1: d7:d2:c6:2f:db:59:d2:95:03:51:b5:5f:0d:09:57: 82:3b:fa:69:d2:56:dd:78:50:4a:a5:3e:54:6e:1c: f9:2a:c2:a1:49:de:33:d3:76:a2:d4:e9:68:5c:27: 93:97:7c:fd:03:4c:87:b4:d0:32:3b:a8:77:ca:9d: ea:78:7b:05:df:f9:9f:c9:45:92:a1:80:20:7d:ad: 60:b2:32:5a:c1:e7:01:9e:32:b3:4f:42:c7:81:42: 55:2c:f1:7f:c8:04:87:ec:e0:30:58:13:6c:69:09: 9c:03:11:e6:4f:f1:99:67:5c:65:45:46:03:8a:a2: 85:52:61:ec:5b:26:d4:76:fd:3e:1b:30:3a:f2:06: 65:d7:e2:0f:a9:0c:b5:bd:69:cb:4c:b9:2c:ae:8f: 9e:74:51:44:2c:2d:f0:7c:68:01:4d:a9:f4:ca:5b: a0:31:a9:70:fe:bc:eb:54:3d:9e:39:93:49:e4:0b: fa:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:58:85:93:F8:4F:9F:BF:5F:FA:1F:E8:A2:26:B5:CF:F2:2F:65:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/008b5a39-e02f-36a9-909f-48edbc257012.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:78:02:1e:ec:dd:a5:e3:ba:34:f1:c4:63:7a:cf:b1:a0:1f: 1d:82:94:93:6a:e3:e2:60:fd:76:83:72:7f:c9:d6:46:a7:0d: 94:a1:e1:84:73:60:87:7a:13:e1:a7:a8:b9:dd:a5:a2:fd:4a: de:f0:da:d2:b4:a3:68:c3:0c:2c:6b:b5:20:f4:c6:eb:b4:38: 33:6c:95:92:08:f8:a8:67:25:43:3e:89:32:b6:65:d7:e5:04: c3:fc:da:3a:ad:77:12:38:a5:15:76:08:9c:5e:ca:f9:85:30: 9f:12:93:ae:65:a6:f0:10:81:b6:02:79:62:42:5d:24:12:f9: fd:72:7e:90:b5:49:aa:a5:2e:1e:a3:7f:74:e5:f6:d8:08:f3: 76:12:ba:75:cd:8e:f4:32:8a:5e:de:e3:29:2c:41:13:a1:00: d5:68:91:68:09:56:ad:69:c7:40:ef:9e:cb:c6:df:0f:93:81: fb:3d:b0:7c:57:c4:bd:38:b7:a3:fd:db:cc:10:93:db:cd:28: 4b:d6:ee:fc:5e:70:b2:d6:3f:e8:43:5a:17:cb:40:6d:1e:15: cc:52:0d:0c:42:cf:0f:00:11:52:d3:2e:c4:a7:26:2a:ec:ee: 3e:54:8a:98:02:32:f8:5d:d8:50:53:38:6f:a0:b2:89:2f:90: 44:b9:01:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gJVIz39xgLAG+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk ZTdjMTNlNTgtZDA1Ni00ZDg0LWI2NGYtZmMyMTMyODg3NGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvla+bMoo1XDnzEVNGJBYq7mssF3Pc+a0lF2l +MlKE/nHj4Scr6Rj68HLvLo0ofI5WkqUc4BHf74bWSa61SdJA7FoDDyhZK+Y0bHX 0sYv21nSlQNRtV8NCVeCO/pp0lbdeFBKpT5Ubhz5KsKhSd4z03ai1OloXCeTl3z9 A0yHtNAyO6h3yp3qeHsF3/mfyUWSoYAgfa1gsjJawecBnjKzT0LHgUJVLPF/yASH 7OAwWBNsaQmcAxHmT/GZZ1xlRUYDiqKFUmHsWybUdv0+GzA68gZl1+IPqQy1vWnL TLksro+edFFELC3wfGgBTan0ylugMalw/rzrVD2eOZNJ5Av6PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdYhZP4T5+/X/of6KImtc/yL2XeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDA4YjVhMzktZTAyZi0z NmE5LTkwOWYtNDhlZGJjMjU3MDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF81zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAh4Ah7s3aXjujTxxGN6z7GgHx2ClJNq4+Jg/XaDcn/J1kanDZSh4YRz YId6E+GnqLndpaL9St7w2tK0o2jDDCxrtSD0xuu0ODNslZII+KhnJUM+iTK2Zdfl BMP82jqtdxI4pRV2CJxeyvmFMJ8Sk65lpvAQgbYCeWJCXSQS+f1yfpC1SaqlLh6j f3Tl9tgI83YSunXNjvQyil7e4yksQROhANVokWgJVq1px0DvnsvG3w+Tgfs9sHxX xL04t6P928wQk9vNKEvW7vxecLLWP+hDWhfLQG0eFcxSDQxCzw8AEVLTLsSnJirs 7j5UipgCMvhd2FBTOG+gsokvkES5AZs= -----END CERTIFICATE-----Generated at Tue Jul 22 19:44:13 2025 by rpki-client