$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2284a2ff-a865-3d99-bda9-1a23013d6589.roa File: 2284a2ff-a865-3d99-bda9-1a23013d6589.roa (raw, json) Hash identifier: M0+tEgcQ4wOJ4DZiUyywr8FLaiElUsVLeNdX6BuF6tg= Subject key identifier: 15:C5:8F:7F:CF:8B:B2:7A:DF:04:E9:A6:E1:35:A5:20:D3:1D:DF:D3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A6290B81F15C021AB27099340 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2284a2ff-a865-3d99-bda9-1a23013d6589.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.195.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:b8:1f:15:c0:21:ab:27:09:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=6b9b14d0-46ac-4ece-9a59-d0c94e7d9008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b6:58:98:39:a2:0f:20:69:c4:26:c8:97:0b: 1e:25:90:cf:eb:1c:01:8f:e4:77:8f:5c:56:20:00: 0e:8f:a5:ae:98:32:9c:45:1d:c5:b8:19:a2:82:53: 0c:9b:d8:3a:ef:12:65:66:5f:97:f7:e0:2e:b8:15: 3a:52:6e:da:21:2b:1b:6b:63:41:b5:67:ac:aa:13: 24:49:f4:07:ac:c3:d0:b9:8a:d5:2c:17:60:2a:3a: 73:74:ea:b3:81:7f:c3:aa:79:a2:e6:ac:1f:51:c5: 7d:6a:72:90:e0:cf:cd:74:f1:e8:f8:a4:7b:ff:08: d8:5d:7e:f6:67:c4:c2:57:02:03:00:72:b3:75:44: 1d:11:49:89:ee:32:34:44:24:42:ed:9b:88:94:23: 4a:1d:ed:c0:38:f3:5b:fb:b9:d0:ae:93:10:96:30: f0:55:1f:6b:fc:34:25:a4:78:2b:39:2f:a5:21:64: 5b:a1:3a:94:41:27:02:2d:a0:42:23:01:5f:97:97: 7c:98:57:8c:48:5b:a6:a9:72:b2:27:67:48:83:25: 2a:c7:87:77:dd:7c:26:45:3f:2c:c8:07:cc:a2:c5: 60:71:30:cc:54:29:6a:43:c3:af:64:07:8d:ef:5d: c5:98:3c:c6:dd:22:cf:e9:a0:e6:84:e8:dd:7d:ea: c9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C5:8F:7F:CF:8B:B2:7A:DF:04:E9:A6:E1:35:A5:20:D3:1D:DF:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2284a2ff-a865-3d99-bda9-1a23013d6589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:c7:db:04:0e:08:94:72:bf:61:40:54:a6:31:12:0b:a5:7c: ef:93:93:f5:5e:27:8a:0a:d5:6a:fb:c6:a8:70:1c:46:f2:66: 87:4d:42:47:a9:84:3e:99:77:66:aa:cc:1d:36:92:47:56:51: 14:9a:e7:e0:60:b8:3f:61:5a:7d:1e:b9:4a:71:b5:6b:3f:20: a8:74:10:b6:d4:25:11:c8:f0:4c:27:cf:e2:a1:34:80:d3:d6: 88:8f:bd:0e:be:7d:49:e9:b8:e2:da:8a:20:a3:f8:38:e0:23: 9d:6d:bc:5a:61:82:d1:15:91:b0:fc:ad:59:a1:4f:b2:c7:50: 73:b6:72:6c:02:0e:2a:41:65:03:a8:39:85:98:2b:24:56:98: b8:63:e8:3b:45:b3:bf:18:2d:b3:21:67:5a:f9:5a:67:0f:7d: e1:ad:04:fa:6b:c2:9a:f7:0c:07:1e:6b:d7:bb:d8:8b:a5:cb: 13:f6:72:a4:61:23:63:d9:0f:31:63:2b:9a:26:dd:c1:28:e5: 52:3b:44:bf:d2:49:1c:63:e8:f0:a4:b1:f1:d7:f3:f0:6a:1e: 0a:73:ff:0f:a0:fb:c7:8b:81:8b:7e:6f:99:9b:82:1b:e1:83: f3:f5:b3:c5:8d:de:f2:a0:74:c6:4b:49:98:56:58:78:e1:ed: af:72:d7:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikLgfFcAhqycJk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk NmI5YjE0ZDAtNDZhYy00ZWNlLTlhNTktZDBjOTRlN2Q5MDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLZYmDmiDyBpxCbIlwseJZDP6xwBj+R3j1xW IAAOj6WumDKcRR3FuBmiglMMm9g67xJlZl+X9+AuuBU6Um7aISsba2NBtWesqhMk SfQHrMPQuYrVLBdgKjpzdOqzgX/Dqnmi5qwfUcV9anKQ4M/NdPHo+KR7/wjYXX72 Z8TCVwIDAHKzdUQdEUmJ7jI0RCRC7ZuIlCNKHe3AOPNb+7nQrpMQljDwVR9r/DQl pHgrOS+lIWRboTqUQScCLaBCIwFfl5d8mFeMSFumqXKyJ2dIgyUqx4d33XwmRT8s yAfMosVgcTDMVClqQ8OvZAeN713FmDzG3SLP6aDmhOjdferJrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXFj3/Pi7J63wTppuE1pSDTHd/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjI4NGEyZmYtYTg2NS0z ZDk5LWJkYTktMWEyMzAxM2Q2NTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8MtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTH2wQOCJRyv2FAVKYxEgulfO+Tk/VeJ4oK1Wr7xqhwHEbyZodNQkep hD6Zd2aqzB02kkdWURSa5+BguD9hWn0euUpxtWs/IKh0ELbUJRHI8Ewnz+KhNIDT 1oiPvQ6+fUnpuOLaiiCj+DjgI51tvFphgtEVkbD8rVmhT7LHUHO2cmwCDipBZQOo OYWYKyRWmLhj6DtFs78YLbMhZ1r5WmcPfeGtBPprwpr3DAcea9e72IulyxP2cqRh I2PZDzFjK5om3cEo5VI7RL/SSRxj6PCksfHX8/BqHgpz/w+g+8eLgYt+b5mbghvh g/P1s8WN3vKgdMZLSZhWWHjh7a9y11c= -----END CERTIFICATE-----Generated at Thu Jul 24 11:49:20 2025 by rpki-client