$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f3780eb-6382-3c23-9938-070bd9af81c7.roa File: 1f3780eb-6382-3c23-9938-070bd9af81c7.roa (raw, json) Hash identifier: G+Ba92pUv5IqUzgaE0iawGNY8l8CBWWwRC0SJUPlho4= Subject key identifier: 93:58:37:A4:8C:D4:98:3E:DB:AD:18:62:54:60:2E:E4:2F:F5:36:6D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A6290B66E7BBF65EA0E777660 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f3780eb-6382-3c23-9938-070bd9af81c7.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.193.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:b6:6e:7b:bf:65:ea:0e:77:76:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=296d13d6-2813-453d-9a19-9bf1777fe2ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:53:ce:11:d8:0c:e9:20:ce:69:55:75:33:14: 85:99:25:4c:56:cb:77:98:da:fd:84:9f:f9:d4:32: 13:66:e8:90:48:87:d1:30:af:13:f4:c3:15:70:83: 80:b7:d8:31:c1:6a:dc:62:ca:a5:e0:7f:df:81:e2: 8d:91:d7:c7:49:98:fe:45:d2:18:d0:ca:eb:47:03: db:df:85:4e:a0:7a:b3:1f:22:4b:9f:2d:84:0e:98: 0d:3b:13:b2:4f:31:34:1b:b6:4b:1e:5b:9a:09:19: 2f:34:85:76:44:86:de:eb:dd:ea:06:8e:77:2a:ae: 01:d3:e9:65:18:18:76:18:84:34:af:f7:a0:f0:f8: 77:6e:f4:16:39:0e:26:72:e0:d7:22:a3:5b:fb:34: 5d:0e:85:ea:e8:8a:1a:de:c7:38:44:f5:09:e2:b1: d4:b1:03:f1:e6:7b:bc:9d:e7:91:4f:5a:fc:51:98: e9:99:25:39:57:f1:d8:08:7b:2f:e7:b8:1b:e2:d7: 46:cb:8f:72:c2:ef:6c:44:ba:20:91:95:65:45:e4: bb:b7:1e:a8:00:40:9c:70:a5:e6:e8:c3:99:a9:c6: 03:e6:42:09:74:dc:39:27:33:98:5e:7d:e7:68:f0: 35:36:6c:8b:3c:f9:da:4c:2c:60:36:97:98:4b:93: 5b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:58:37:A4:8C:D4:98:3E:DB:AD:18:62:54:60:2E:E4:2F:F5:36:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f3780eb-6382-3c23-9938-070bd9af81c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.193.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:15:1e:e7:0e:88:70:2a:74:07:9a:7d:88:fa:e2:ee:4c:4c: 8a:6d:a2:58:d9:fe:55:05:d6:ba:2c:40:4e:99:2c:0e:2d:17: 09:31:ec:a9:4b:ef:17:3b:fd:5e:24:ae:ba:43:6f:6c:9e:4e: bf:82:01:dc:06:8b:e0:87:c8:ef:91:df:a5:f9:73:95:51:a6: a8:34:00:09:50:84:6e:ec:b9:65:3a:fa:a6:ea:66:b3:a4:51: 7d:fc:cc:b1:f6:65:f0:77:73:06:38:20:52:b6:37:c4:77:fc: 5a:ee:76:5c:c4:07:0b:33:95:cd:87:40:7c:ea:30:2f:cb:93: 39:3d:61:71:5f:c7:92:fa:3b:1f:39:58:0b:02:7d:5b:f8:47: 07:c4:91:4c:8a:e3:eb:e1:5f:2f:51:77:34:b7:c5:cd:54:8b: 87:6a:96:5f:c5:e0:88:5d:13:82:54:0f:15:1f:77:06:22:d1: 5e:b7:bf:0d:77:6f:fe:b9:59:55:be:78:c8:6f:8d:9e:98:9c: 78:b1:a4:e2:f4:ef:e3:5e:b0:23:e3:d8:d8:ed:a4:6a:5c:18: 74:f1:d3:b3:5d:a3:19:a1:5e:cb:5b:53:6a:f5:c2:01:f2:be: 31:9e:be:b9:01:60:59:e1:dc:a7:8d:ef:d7:03:1b:86:b4:bc: 43:64:25:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikLZue79l6g53dmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk Mjk2ZDEzZDYtMjgxMy00NTNkLTlhMTktOWJmMTc3N2ZlMmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VPOEdgM6SDOaVV1MxSFmSVMVst3mNr9hJ/5 1DITZuiQSIfRMK8T9MMVcIOAt9gxwWrcYsql4H/fgeKNkdfHSZj+RdIY0MrrRwPb 34VOoHqzHyJLny2EDpgNOxOyTzE0G7ZLHluaCRkvNIV2RIbe693qBo53Kq4B0+ll GBh2GIQ0r/eg8Ph3bvQWOQ4mcuDXIqNb+zRdDoXq6Ioa3sc4RPUJ4rHUsQPx5nu8 neeRT1r8UZjpmSU5V/HYCHsv57gb4tdGy49ywu9sRLogkZVlReS7tx6oAECccKXm 6MOZqcYD5kIJdNw5JzOYXn3naPA1NmyLPPnaTCxgNpeYS5NbbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNYN6SM1Jg+260YYlRgLuQv9TZtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWYzNzgwZWItNjM4Mi0z YzIzLTk5MzgtMDcwYmQ5YWY4MWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8HEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAVHucOiHAqdAeafYj64u5MTIptoljZ/lUF1rosQE6ZLA4tFwkx7KlL 7xc7/V4krrpDb2yeTr+CAdwGi+CHyO+R36X5c5VRpqg0AAlQhG7suWU6+qbqZrOk UX38zLH2ZfB3cwY4IFK2N8R3/FrudlzEBwszlc2HQHzqMC/Lkzk9YXFfx5L6Ox85 WAsCfVv4RwfEkUyK4+vhXy9RdzS3xc1Ui4dqll/F4IhdE4JUDxUfdwYi0V63vw13 b/65WVW+eMhvjZ6YnHixpOL07+NesCPj2NjtpGpcGHTx07NdoxmhXstbU2r1wgHy vjGevrkBYFnh3KeN79cDG4a0vENkJXc= -----END CERTIFICATE-----Generated at Wed Jul 23 01:28:29 2025 by rpki-client