$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0292ae58-1124-3295-81ae-7ff6d5faef2c.roa File: 0292ae58-1124-3295-81ae-7ff6d5faef2c.roa (raw, json) Hash identifier: IoZK/R7jEYvLeowWiF7qQERaHd/U3MQ2TCoyViDMkug= Subject key identifier: 20:03:0E:F7:7C:96:0A:B2:91:0A:10:68:15:80:90:D4:20:58:56:21 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A6290A628754285C062FDE300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0292ae58-1124-3295-81ae-7ff6d5faef2c.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.195.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:a6:28:75:42:85:c0:62:fd:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=bb790bf7-15be-4c60-aa4d-078f5c9b55bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:15:b4:b0:07:66:09:ea:2c:9c:a6:21:33:47: 03:7c:c1:8d:11:73:1d:46:a6:94:52:ee:0e:ee:63: 2a:f7:d8:56:aa:f1:fe:a9:2b:37:fe:2c:7c:3d:4c: b5:27:1f:da:03:cd:1b:4c:db:c6:50:ab:60:70:50: c3:4f:20:a8:b6:5a:96:72:e5:79:05:ac:24:b0:4c: 20:01:14:49:f6:b5:59:95:a9:04:21:74:02:4a:71: 09:ea:6f:8e:b1:40:dd:c4:6d:e3:e2:29:5d:7e:7c: 39:80:7b:e9:95:85:e5:e6:a0:f5:c1:c7:d8:87:0f: 4c:7d:b7:82:58:4f:a4:c7:5d:02:4e:a2:ee:ef:1b: 20:c0:63:a7:bb:6e:b1:d8:7a:25:3e:17:48:98:b8: 11:a6:3b:30:51:b7:d8:43:d0:fc:e3:8e:de:29:23: af:a4:ef:11:4f:00:08:5a:84:cc:bd:31:ab:1d:82: 2a:83:89:04:75:e8:b2:aa:ed:e0:35:a2:91:55:fd: 1a:bd:7f:59:a3:0d:49:f5:58:c2:97:de:27:9a:d5: 41:8c:c5:23:f7:b8:d2:6f:7c:90:83:d7:cb:9c:ad: ee:a8:9f:a1:69:af:03:ec:b4:0c:1e:c1:31:05:49: 18:18:c6:62:29:54:0e:66:ea:28:cb:2c:df:3d:6c: 12:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:03:0E:F7:7C:96:0A:B2:91:0A:10:68:15:80:90:D4:20:58:56:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0292ae58-1124-3295-81ae-7ff6d5faef2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:75:c0:0f:e6:40:bf:f5:a4:7d:99:08:9e:c3:de:61:b3:b6: f0:10:80:fd:40:26:c3:ad:d0:7c:9d:df:d7:10:b7:6c:c1:0e: 99:af:07:ec:8f:2d:ae:50:9a:ab:00:cd:03:90:1d:9e:a8:ce: f6:ee:bc:ce:7e:13:2e:7e:61:b6:05:ce:b3:a0:4c:24:9b:7e: f4:86:5e:99:0f:4b:ef:f2:b9:a3:79:4d:d8:a6:28:b6:8a:cc: 8b:0d:9a:96:81:81:cd:fe:36:88:b7:6e:0b:82:b4:8e:b9:19: 55:f2:2d:4a:3a:25:93:ca:80:8e:3d:d3:5c:56:00:b9:f9:3f: a2:af:d9:3e:73:2b:68:7c:dc:28:ab:fd:be:e3:69:d4:4f:6d: 33:a0:30:76:74:da:fd:a5:ac:85:67:75:6b:39:77:8f:d5:ca: f4:a2:1b:35:d9:ae:88:43:65:71:76:55:b2:85:16:9f:5e:8f: a5:df:45:05:a7:ae:44:e4:8f:0a:01:06:f6:f9:f5:ab:5d:2a: ca:3f:83:2d:23:ad:6b:f4:9e:64:42:25:bc:4a:d1:7f:fe:6b: 6a:49:75:6e:f2:9d:e7:5e:38:73:21:5a:03:30:37:53:5e:07: 30:15:e3:78:b5:a3:f1:3f:2c:fe:a4:3a:ef:56:5a:ae:a8:f9: cd:37:f3:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikKYodUKFwGL94wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk YmI3OTBiZjctMTViZS00YzYwLWFhNGQtMDc4ZjVjOWI1NWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxW0sAdmCeosnKYhM0cDfMGNEXMdRqaUUu4O 7mMq99hWqvH+qSs3/ix8PUy1Jx/aA80bTNvGUKtgcFDDTyCotlqWcuV5BawksEwg ARRJ9rVZlakEIXQCSnEJ6m+OsUDdxG3j4ildfnw5gHvplYXl5qD1wcfYhw9MfbeC WE+kx10CTqLu7xsgwGOnu26x2HolPhdImLgRpjswUbfYQ9D8447eKSOvpO8RTwAI WoTMvTGrHYIqg4kEdeiyqu3gNaKRVf0avX9Zow1J9VjCl94nmtVBjMUj97jSb3yQ g9fLnK3uqJ+haa8D7LQMHsExBUkYGMZiKVQOZuooyyzfPWwS6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCADDvd8lgqykQoQaBWAkNQgWFYhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDI5MmFlNTgtMTEyNC0z Mjk1LTgxYWUtN2ZmNmQ1ZmFlZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8OIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABt1wA/mQL/1pH2ZCJ7D3mGztvAQgP1AJsOt0Hyd39cQt2zBDpmvB+yP La5QmqsAzQOQHZ6ozvbuvM5+Ey5+YbYFzrOgTCSbfvSGXpkPS+/yuaN5TdimKLaK zIsNmpaBgc3+Noi3bguCtI65GVXyLUo6JZPKgI4901xWALn5P6Kv2T5zK2h83Cir /b7jadRPbTOgMHZ02v2lrIVndWs5d4/VyvSiGzXZrohDZXF2VbKFFp9ej6XfRQWn rkTkjwoBBvb59atdKso/gy0jrWv0nmRCJbxK0X/+a2pJdW7ynedeOHMhWgMwN1Ne BzAV43i1o/E/LP6kOu9WWq6o+c0388w= -----END CERTIFICATE-----Generated at Wed Jul 23 01:48:42 2025 by rpki-client