$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/254b66fe-32ed-32d6-8ece-59e39ff5e240.roa File: 254b66fe-32ed-32d6-8ece-59e39ff5e240.roa (raw, json) Hash identifier: C1bImTL5zqNtAfTLFhPGJJJddlRHdZoQQ9SSKTfmxag= Subject key identifier: 98:4C:13:AF:37:EE:0C:94:3D:A1:F1:02:F7:E7:8B:94:32:68:F3:CF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7780943713607E270A24CA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/254b66fe-32ed-32d6-8ece-59e39ff5e240.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 16625 IP address blocks: 23.204.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:94:37:13:60:7e:27:0a:24:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=b5d2a20f-ddb4-407c-9eae-fae7dd466eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8a:34:f6:3a:76:7d:f4:60:8a:54:f5:92:36: 95:be:7a:5d:5d:0e:b8:4c:77:57:36:a0:d7:09:f3: b3:32:35:ed:c2:bb:70:d1:aa:3b:ea:a1:20:92:22: 51:48:f3:d6:53:8f:34:d8:84:98:15:9e:77:8d:ef: 27:dc:7e:40:a4:29:7e:2b:6d:ae:be:39:18:c9:39: 27:3d:71:b2:86:dd:c6:0f:ab:87:31:9e:12:6a:97: c4:08:fc:36:a6:48:3a:35:45:6e:78:12:06:b8:cc: 15:f9:2f:7a:e9:a7:05:ef:c7:8f:70:58:31:b7:85: 81:d6:f3:e0:f9:ae:f7:b9:a1:af:df:fc:6c:8d:7e: 18:d3:6a:92:5e:92:64:1e:2c:30:ed:5d:65:e7:07: 25:45:d2:a6:87:83:8b:65:61:77:db:ff:f0:fc:10: 1b:86:ee:07:de:e6:3d:1f:b8:be:ac:cb:e6:a4:e1: 3d:77:02:14:4f:0c:e0:20:93:de:5b:1f:08:e6:53: 4a:12:1c:13:e8:3e:af:2a:55:2a:ff:5d:4b:ed:62: e9:70:00:9e:3d:29:c4:6e:b3:bd:e0:3f:4d:0d:36: 99:5d:f4:f9:a4:97:89:c3:d1:d8:f8:ab:b0:5d:01: 70:cd:7f:24:27:96:29:a1:74:97:51:bd:0c:41:e9: 91:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4C:13:AF:37:EE:0C:94:3D:A1:F1:02:F7:E7:8B:94:32:68:F3:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/254b66fe-32ed-32d6-8ece-59e39ff5e240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:9f:49:e9:59:c3:57:62:7e:aa:5c:18:16:61:18:8a:c6:db: ab:6e:b6:c9:f8:01:0e:26:62:f4:b7:ba:e7:35:f8:08:b4:a0: e0:4f:dd:e1:38:03:58:0b:1c:48:95:23:a3:9b:6a:fa:63:3d: 56:9f:09:f2:dc:7e:39:a2:f1:9d:3a:75:3c:65:ff:a8:82:69: d9:41:9b:f4:90:88:9e:67:29:37:c5:94:43:5a:a8:76:e2:10: 05:f4:7b:ae:52:9d:a6:43:e5:e7:0b:a2:87:29:c5:f4:f7:26: de:e8:e5:78:28:eb:c0:18:50:8e:dc:69:f8:33:8d:85:c2:19: 4a:3a:1e:35:ef:de:0e:2a:b1:e8:cb:b8:e2:9f:74:e6:c3:e2: 99:7f:3a:eb:b8:f4:0a:12:f0:3f:e4:8b:fd:e0:43:ac:01:17: 6a:c0:e2:28:b5:89:43:03:0e:ed:6b:84:9f:21:24:48:6b:2e: 1e:fb:70:ba:34:c4:6d:22:88:dc:e0:45:ab:77:5f:20:8d:ca: 68:61:49:1f:e8:82:10:3e:fd:6c:3c:18:2d:7f:63:cc:c8:74: 12:52:67:02:d2:d7:30:9c:01:70:da:71:c6:37:4b:5f:e7:d4: 8f:6c:2b:4c:21:b5:ed:95:6a:9d:1b:38:9c:73:66:82:d1:fb: 17:05:a8:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gJQ3E2B+JwokyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk YjVkMmEyMGYtZGRiNC00MDdjLTllYWUtZmFlN2RkNDY2ZWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoo09jp2ffRgilT1kjaVvnpdXQ64THdXNqDX CfOzMjXtwrtw0ao76qEgkiJRSPPWU4802ISYFZ53je8n3H5ApCl+K22uvjkYyTkn PXGyht3GD6uHMZ4SapfECPw2pkg6NUVueBIGuMwV+S966acF78ePcFgxt4WB1vPg +a73uaGv3/xsjX4Y02qSXpJkHiww7V1l5wclRdKmh4OLZWF32//w/BAbhu4H3uY9 H7i+rMvmpOE9dwIUTwzgIJPeWx8I5lNKEhwT6D6vKlUq/11L7WLpcACePSnEbrO9 4D9NDTaZXfT5pJeJw9HY+KuwXQFwzX8kJ5YpoXSXUb0MQemRvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhME6837gyUPaHxAvfni5QyaPPPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjU0YjY2ZmUtMzJlZC0z MmQ2LThlY2UtNTllMzlmZjVlMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8zgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmfSelZw1difqpcGBZhGIrG26tutsn4AQ4mYvS3uuc1+Ai0oOBP3eE4 A1gLHEiVI6ObavpjPVafCfLcfjmi8Z06dTxl/6iCadlBm/SQiJ5nKTfFlENaqHbi EAX0e65SnaZD5ecLoocpxfT3Jt7o5Xgo68AYUI7cafgzjYXCGUo6HjXv3g4qsejL uOKfdObD4pl/Ouu49AoS8D/ki/3gQ6wBF2rA4ii1iUMDDu1rhJ8hJEhrLh77cLo0 xG0iiNzgRat3XyCNymhhSR/oghA+/Ww8GC1/Y8zIdBJSZwLS1zCcAXDaccY3S1/n 1I9sK0whte2Vap0bOJxzZoLR+xcFqFg= -----END CERTIFICATE-----Generated at Wed Jul 23 01:28:32 2025 by rpki-client