$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0af47bae-92a6-3c83-9e6a-5c2daec7d3f6.roa File: 0af47bae-92a6-3c83-9e6a-5c2daec7d3f6.roa (raw, json) Hash identifier: fjzqoGmViaB3ALxPPJKdF6sMIVwd0XbPZkjAjkMTJpE= Subject key identifier: FC:86:8F:08:B8:57:88:1F:F6:21:73:FD:9E:56:D7:13:E7:AE:BE:7A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7A4B5181B738327184683520 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0af47bae-92a6-3c83-9e6a-5c2daec7d3f6.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 16625 IP address blocks: 23.211.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:51:81:b7:38:32:71:84:68:35:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=18b2705e-6bca-428e-aa2d-fc29c6c3c051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7e:d3:8c:8d:b8:ba:0c:5b:b9:87:c8:8e:80: 76:72:af:7c:ec:02:28:28:d3:c7:d8:82:67:a3:1e: 29:c7:bb:2c:2a:f8:6a:e9:1f:10:a8:8c:84:e3:67: 58:2b:71:30:5e:23:54:f9:70:41:0c:8e:14:7e:17: 42:0a:ec:30:69:ba:b3:aa:c9:75:6a:93:a9:97:e9: 0b:10:1e:10:60:31:00:5e:da:fd:5c:da:19:72:cd: 37:f5:1b:e8:99:af:34:59:27:c9:7d:66:fb:9f:a0: 5d:1a:89:89:5f:c9:26:1f:4c:df:0f:8c:2e:fc:d9: ea:bb:ab:e8:b2:3b:70:e5:a0:80:a6:c9:6c:d0:42: 18:65:05:3d:2d:36:97:2d:6c:f5:45:4c:18:f5:1f: 09:e0:15:89:17:58:2c:5c:57:37:10:13:a9:03:cf: 9d:81:c4:da:74:51:cd:9a:aa:5e:36:00:de:ef:ed: 17:11:82:5c:0e:8c:21:4d:b5:11:8d:eb:ca:b4:57: 28:5b:61:6e:4c:df:f1:cf:96:27:63:15:4d:cd:62: 3b:02:39:ec:bb:15:5b:8d:96:77:58:0d:99:58:75: f9:3b:4e:d3:72:b4:4e:b1:50:b5:5a:c2:51:ad:a2: b6:e8:55:83:3e:36:d0:cd:84:81:db:0a:f8:66:59: b7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:86:8F:08:B8:57:88:1F:F6:21:73:FD:9E:56:D7:13:E7:AE:BE:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0af47bae-92a6-3c83-9e6a-5c2daec7d3f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:55:57:63:f7:5b:24:f6:c9:de:61:4f:01:e7:e5:9d:29:d2: a9:39:f2:f4:f0:6b:5b:09:25:2a:7b:05:28:2c:74:0e:84:5f: 85:d6:5a:b0:75:21:1c:5f:a5:bf:73:39:33:5a:70:9e:0f:c3: 21:3c:e8:eb:8b:94:ef:30:a8:2b:b2:9e:ff:60:6c:23:9c:0a: 7d:b2:07:54:90:5c:82:8b:1d:c1:c4:fe:a8:b9:00:ec:20:a7: 37:85:8e:85:f4:1d:0d:2b:51:65:cf:a6:05:f9:f3:a4:d8:65: d5:89:b1:b5:76:a9:5e:1a:52:6a:9f:dd:2e:a7:4f:03:fd:71: 74:f2:c2:a1:50:c3:3c:97:59:7c:22:b3:0e:7b:1e:79:85:8d: 9a:ff:c4:28:79:6b:59:89:67:63:eb:c8:5a:61:e4:ac:b3:a1: 82:d0:20:06:7d:51:91:1d:7d:43:ad:36:1f:6b:63:7a:1a:7e: 8e:03:1d:9c:65:dd:75:15:27:69:ba:88:9c:80:a5:b6:39:63: f5:41:d6:2c:80:84:db:38:57:12:1a:c5:92:f2:25:1e:0d:8d: a9:dd:e5:a5:a6:82:57:f4:e8:07:ec:cf:5e:da:4c:0b:b6:c9: d5:83:3d:38:5e:48:f2:a8:c6:cf:93:a7:84:b2:e3:ea:0e:8b: 39:3a:a1:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S1GBtzgycYRoNSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk MThiMjcwNWUtNmJjYS00MjhlLWFhMmQtZmMyOWM2YzNjMDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgX7TjI24ugxbuYfIjoB2cq987AIoKNPH2IJn ox4px7ssKvhq6R8QqIyE42dYK3EwXiNU+XBBDI4UfhdCCuwwabqzqsl1apOpl+kL EB4QYDEAXtr9XNoZcs039Rvoma80WSfJfWb7n6BdGomJX8kmH0zfD4wu/Nnqu6vo sjtw5aCApsls0EIYZQU9LTaXLWz1RUwY9R8J4BWJF1gsXFc3EBOpA8+dgcTadFHN mqpeNgDe7+0XEYJcDowhTbURjevKtFcoW2FuTN/xz5YnYxVNzWI7AjnsuxVbjZZ3 WA2ZWHX5O07TcrROsVC1WsJRraK26FWDPjbQzYSB2wr4Zlm3xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyGjwi4V4gf9iFz/Z5W1xPnrr56MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGFmNDdiYWUtOTJhNi0z YzgzLTllNmEtNWMyZGFlYzdkM2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF9NAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1VV2P3WyT2yd5hTwHn5Z0p0qk58vTwa1sJJSp7BSgsdA6EX4XWWrB1 IRxfpb9zOTNacJ4PwyE86OuLlO8wqCuynv9gbCOcCn2yB1SQXIKLHcHE/qi5AOwg pzeFjoX0HQ0rUWXPpgX586TYZdWJsbV2qV4aUmqf3S6nTwP9cXTywqFQwzyXWXwi sw57HnmFjZr/xCh5a1mJZ2PryFph5KyzoYLQIAZ9UZEdfUOtNh9rY3oafo4DHZxl 3XUVJ2m6iJyApbY5Y/VB1iyAhNs4VxIaxZLyJR4Njand5aWmglf06Afsz17aTAu2 ydWDPTheSPKoxs+Tp4Sy4+oOizk6oRg= -----END CERTIFICATE-----Generated at Tue Jul 22 19:38:18 2025 by rpki-client