$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20074cc1-0147-3ae4-99ab-511d33ec8edb.roa File: 20074cc1-0147-3ae4-99ab-511d33ec8edb.roa (raw, json) Hash identifier: 6J33mW4y0dTBjtSSng4Hwlbm9WS+dANLQzwN5hCILVE= Subject key identifier: CB:02:9F:CA:90:18:8C:2F:4B:DF:C6:65:A7:39:DC:D6:BD:62:FF:3C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7D161072286F7458448C9E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20074cc1-0147-3ae4-99ab-511d33ec8edb.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.217.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:16:10:72:28:6f:74:58:44:8c:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=aff885c9-8165-4567-9edd-4742c591a326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:06:b8:9d:a6:79:0c:8e:37:9d:de:dc:a8:ee: 7b:1e:12:da:2e:7e:51:fe:0a:14:4b:71:76:db:69: 13:f3:63:28:5b:59:17:02:e6:e0:79:de:27:75:87: 3e:40:86:aa:24:fa:58:1f:71:58:81:b5:3e:63:c4: e9:c3:b7:65:ca:b3:d2:4d:49:96:e2:6b:fc:3d:51: fa:5f:e9:25:c4:a7:d1:aa:53:49:3b:c2:f5:30:5e: e3:4b:d7:cc:91:3c:a6:bd:4b:9b:94:69:7b:5e:56: 86:a6:ba:3e:58:03:62:14:04:2d:cd:59:bb:1a:1e: 48:5a:11:c1:91:cf:35:d5:8c:ed:64:5f:71:ea:3c: 88:95:4b:f5:88:25:89:94:97:d2:83:e1:14:30:bf: e3:71:0f:39:1b:42:7e:96:0d:98:f4:45:7a:c4:22: 97:e4:67:f2:2c:da:45:ec:63:4a:aa:e3:dd:ab:c9: 62:da:78:1c:38:81:96:78:ec:42:2e:93:04:99:de: ae:76:f7:df:5a:1b:b2:ac:6e:c4:9f:65:fe:18:2b: 26:f2:cc:cd:79:0a:d8:1f:5a:e8:c1:a4:c7:e5:c0: 20:dc:25:bb:78:b9:b0:00:0c:91:92:19:b3:f8:ac: 61:bb:63:6a:55:e8:59:0d:8e:2d:ab:9b:0c:3e:1a: 7a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:02:9F:CA:90:18:8C:2F:4B:DF:C6:65:A7:39:DC:D6:BD:62:FF:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20074cc1-0147-3ae4-99ab-511d33ec8edb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:c7:97:54:a8:ec:ca:af:e7:46:85:55:14:17:07:a2:ea:8b: 8f:5f:e9:31:51:d4:e8:19:0a:b5:16:6f:06:01:56:be:56:b5: 44:01:7d:7c:cf:be:c7:12:14:d3:34:74:c8:96:ef:4e:0b:fc: 48:b0:93:b9:ae:bb:f0:ea:30:bd:ca:0b:af:ff:5e:9a:ea:ec: 27:00:13:2d:cc:6c:2c:47:98:f6:e4:b0:49:10:f6:88:79:a5: 83:fa:e4:4e:55:4a:26:61:81:8b:19:f1:af:dd:fc:1a:c1:a5: a8:53:00:2e:0e:25:97:fe:46:0a:4a:41:5f:a8:a1:ed:55:32: 57:57:56:1c:37:0f:42:12:19:b3:72:c9:fa:e3:a1:1f:f5:8c: 55:c0:e6:0d:5a:0f:d4:73:ca:df:07:d7:b9:57:8b:29:b8:62: a2:6d:93:41:14:4f:7d:b7:01:32:97:85:af:dd:85:62:25:fd: ef:b2:78:b5:b0:fc:da:16:58:da:51:26:6c:6b:a9:aa:d7:6d: 66:d7:0b:1e:7b:1f:60:19:6b:34:66:96:be:51:80:3c:7d:09: 93:9f:36:a5:a0:f6:45:b8:57:08:2f:62:d7:48:08:a2:86:74: 54:e9:f7:e8:bb:47:9a:cf:4d:56:60:40:2b:ec:43:db:07:f6: 84:74:37:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FhByKG90WESMnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk YWZmODg1YzktODE2NS00NTY3LTllZGQtNDc0MmM1OTFhMzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQa4naZ5DI43nd7cqO57HhLaLn5R/goUS3F2 22kT82MoW1kXAubged4ndYc+QIaqJPpYH3FYgbU+Y8Tpw7dlyrPSTUmW4mv8PVH6 X+klxKfRqlNJO8L1MF7jS9fMkTymvUublGl7XlaGpro+WANiFAQtzVm7Gh5IWhHB kc811YztZF9x6jyIlUv1iCWJlJfSg+EUML/jcQ85G0J+lg2Y9EV6xCKX5GfyLNpF 7GNKquPdq8li2ngcOIGWeOxCLpMEmd6udvffWhuyrG7En2X+GCsm8szNeQrYH1ro waTH5cAg3CW7eLmwAAyRkhmz+Kxhu2NqVehZDY4tq5sMPhp6DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsCn8qQGIwvS9/GZac53Na9Yv88MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjAwNzRjYzEtMDE0Ny0z YWU0LTk5YWItNTExZDMzZWM4ZWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9mMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHHl1So7Mqv50aFVRQXB6Lqi49f6TFR1OgZCrUWbwYBVr5WtUQBfXzP vscSFNM0dMiW704L/Eiwk7muu/DqML3KC6//Xprq7CcAEy3MbCxHmPbksEkQ9oh5 pYP65E5VSiZhgYsZ8a/d/BrBpahTAC4OJZf+RgpKQV+ooe1VMldXVhw3D0ISGbNy yfrjoR/1jFXA5g1aD9Rzyt8H17lXiym4YqJtk0EUT323ATKXha/dhWIl/e+yeLWw /NoWWNpRJmxrqarXbWbXCx57H2AZazRmlr5RgDx9CZOfNqWg9kW4VwgvYtdICKKG dFTp9+i7R5rPTVZgQCvsQ9sH9oR0N98= -----END CERTIFICATE-----Generated at Tue Jul 22 19:31:18 2025 by rpki-client