$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/125f277d-d6b9-30a1-bbee-676052b265b0.roa File: 125f277d-d6b9-30a1-bbee-676052b265b0.roa (raw, json) Hash identifier: RHxu37gzsnZ0drDoIBvyIOXyAfoBb4aacHYVPDwrqvA= Subject key identifier: 45:1B:92:59:9B:7A:DD:3F:15:0D:96:DC:73:CC:3A:76:39:8A:C6:EA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8840A9BB16DCA1DDE1E15D40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/125f277d-d6b9-30a1-bbee-676052b265b0.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 20940 IP address blocks: 23.219.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:a9:bb:16:dc:a1:dd:e1:e1:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=493dad7c-92d9-4297-8ad4-31bc92aa88f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1e:a8:f1:a0:22:79:2a:91:d2:3f:3f:11:ba: 87:6f:ee:75:85:78:7e:70:63:cb:7b:d3:43:d3:8e: 0d:dc:03:c3:b3:71:6e:1a:39:d8:1a:69:11:1e:7d: ee:43:b0:7f:cd:cd:7c:9c:f8:88:e0:02:c9:e6:3f: 4d:ab:f1:4a:01:1d:57:30:50:63:bb:3f:a0:36:ac: 69:6e:c5:94:63:44:ff:ed:f9:2b:55:32:95:6a:54: cc:ed:4c:45:24:46:dc:ec:5e:52:b1:85:1e:ae:00: e8:74:a8:65:f0:6d:c4:29:e6:5e:cf:f8:82:b8:21: 1e:50:09:9a:59:9a:ff:1a:71:c3:33:50:f0:0e:30: 18:a5:ab:f7:ab:65:ba:6d:e9:41:47:13:f7:57:c3: f8:d8:c2:1b:9b:83:4b:2f:e8:36:1b:3b:65:d9:61: 31:4a:bc:6e:1c:fb:c4:24:a2:02:48:00:e8:f8:12: dc:fe:ae:f3:a6:9e:0f:03:d5:00:67:00:77:ae:e9: 9a:ca:5b:da:f9:cb:b4:41:76:b3:fd:2e:8c:08:52: 93:9e:8e:a7:77:4a:54:d0:af:30:51:6b:06:67:12: 56:5d:af:1a:05:58:15:cc:d6:a9:48:95:04:15:61: 23:9f:30:aa:73:2c:ce:ac:4f:88:2b:21:ba:c0:71: 8c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:1B:92:59:9B:7A:DD:3F:15:0D:96:DC:73:CC:3A:76:39:8A:C6:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/125f277d-d6b9-30a1-bbee-676052b265b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:03:c4:74:54:b0:23:60:85:e9:a2:c5:62:1a:a8:b9:5d:10: 8b:d3:10:7c:29:a2:5f:fa:4c:21:c6:26:28:41:47:39:e5:6e: 2f:2d:b4:94:d8:59:1a:31:3d:4e:5b:b6:34:b1:da:63:b8:ba: ea:54:ed:4d:34:c1:46:3e:51:fb:3e:dd:9c:f9:b1:a4:72:4f: 57:e3:b1:b5:01:ee:fd:7f:a9:6b:a7:cd:6a:ac:60:1d:23:bc: cd:f2:c8:a5:9e:63:f4:3f:23:0a:51:dd:12:bf:ee:f3:c9:21: cf:63:df:9a:97:c7:a0:42:c4:2b:4b:aa:10:78:f4:9c:71:ed: c7:56:d5:4e:1f:6d:9f:31:28:63:16:ac:93:6c:3b:c2:0e:56: f7:84:93:fa:a0:a4:84:80:38:63:9a:b3:f4:fc:fc:b5:f3:10: 39:2d:3a:0f:b8:ff:a4:7f:74:c3:1b:87:21:9b:0d:e4:67:61: d8:68:4d:52:54:5b:e1:46:43:f9:9e:69:82:f8:ec:76:9d:d0: 30:02:03:ec:62:21:08:f9:ea:39:75:57:43:4d:73:ab:fb:e9: 90:49:2a:75:01:81:97:2d:9c:d2:b1:cf:68:9b:8e:20:54:c1: 03:2c:96:79:7c:ba:fa:42:d1:44:08:6c:f5:4b:7f:5e:b5:fe: 35:2c:7e:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQKm7Ftyh3eHhXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk NDkzZGFkN2MtOTJkOS00Mjk3LThhZDQtMzFiYzkyYWE4OGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx6o8aAieSqR0j8/EbqHb+51hXh+cGPLe9ND 044N3APDs3FuGjnYGmkRHn3uQ7B/zc18nPiI4ALJ5j9Nq/FKAR1XMFBjuz+gNqxp bsWUY0T/7fkrVTKValTM7UxFJEbc7F5SsYUergDodKhl8G3EKeZez/iCuCEeUAma WZr/GnHDM1DwDjAYpav3q2W6belBRxP3V8P42MIbm4NLL+g2Gztl2WExSrxuHPvE JKICSADo+BLc/q7zpp4PA9UAZwB3rumaylva+cu0QXaz/S6MCFKTno6nd0pU0K8w UWsGZxJWXa8aBVgVzNapSJUEFWEjnzCqcyzOrE+IKyG6wHGM+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUbklmbet0/FQ2W3HPMOnY5isbqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTI1ZjI3N2QtZDZiOS0z MGExLWJiZWUtNjc2MDUyYjI2NWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9uYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMDxHRUsCNghemixWIaqLldEIvTEHwpol/6TCHGJihBRznlbi8ttJTY WRoxPU5btjSx2mO4uupU7U00wUY+Ufs+3Zz5saRyT1fjsbUB7v1/qWunzWqsYB0j vM3yyKWeY/Q/IwpR3RK/7vPJIc9j35qXx6BCxCtLqhB49Jxx7cdW1U4fbZ8xKGMW rJNsO8IOVveEk/qgpISAOGOas/T8/LXzEDktOg+4/6R/dMMbhyGbDeRnYdhoTVJU W+FGQ/meaYL47Had0DACA+xiIQj56jl1V0NNc6v76ZBJKnUBgZctnNKxz2ibjiBU wQMslnl8uvpC0UQIbPVLf161/jUsflY= -----END CERTIFICATE-----Generated at Thu Jul 24 00:04:10 2025 by rpki-client