$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2fa42c65-5c36-3392-a659-7b1a174a41e1.roa File: 2fa42c65-5c36-3392-a659-7b1a174a41e1.roa (raw, json) Hash identifier: TwRmhxsTaKRcczeS1PDgQB1Hw+gzHjO1THSFX7C6aaY= Subject key identifier: 43:BF:29:62:81:32:03:B4:F8:93:6E:B2:3D:D4:24:D3:39:FB:3D:6D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A761B69D55098FEE5225A2E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2fa42c65-5c36-3392-a659-7b1a174a41e1.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.38.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:69:d5:50:98:fe:e5:22:5a:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=fdb2a4f3-7488-4895-b168-6e69f4fa508d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:36:f7:89:e9:87:32:fd:f5:58:e7:a5:0b:30: b7:a3:f4:5b:15:03:91:eb:53:cf:03:6a:00:2b:a4: 7a:c0:66:ce:d8:42:94:2e:b2:8d:94:06:64:9a:61: a3:aa:b4:15:12:92:c1:0e:b8:6d:cb:75:7d:4f:65: 48:1a:78:d1:00:01:bd:81:8f:92:46:63:6e:06:d8: 55:45:6f:5f:4b:36:80:65:36:27:99:d7:c3:9b:43: 41:ad:55:5c:05:10:ce:43:18:99:73:a5:a8:b5:4d: a3:86:1d:98:fa:bb:ba:e3:51:98:de:97:68:53:0c: 19:6b:57:5e:ee:95:c8:d0:55:78:e7:3a:4d:f9:13: 81:fe:f5:49:3e:01:68:33:e2:72:50:0d:70:55:e7: 76:1a:41:48:0c:78:71:e3:b3:54:cd:f3:c0:c0:6a: 3e:4c:5a:b8:3f:d2:5b:00:1d:3a:05:be:64:87:d6: 75:03:7b:7e:64:d1:ed:fb:6e:1d:8a:27:16:a9:a6: 53:14:97:80:f9:3b:ea:fe:ed:1d:8d:17:10:b5:90: f7:18:4d:16:78:fa:fc:56:e4:2f:67:5e:5e:b5:4e: 04:68:19:4d:10:9a:19:ac:51:b4:bc:d9:db:7a:b2: 23:ed:a4:58:f1:4d:2f:73:69:78:af:b0:69:76:3f: e7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BF:29:62:81:32:03:B4:F8:93:6E:B2:3D:D4:24:D3:39:FB:3D:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2fa42c65-5c36-3392-a659-7b1a174a41e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ae:a9:15:b1:97:4d:21:36:6a:87:a8:1e:d6:a0:84:e1:56: 6a:77:86:6d:48:0b:2c:7d:c4:86:a8:2c:f2:b2:12:49:2c:23: 79:c2:ea:17:f9:18:18:13:69:71:61:df:6a:1b:fe:50:59:31: 4a:bf:0d:50:37:b4:08:f8:33:b4:56:cc:0e:a3:d8:1c:f8:08: f7:00:7f:8b:b4:52:f4:c7:4e:ed:d8:fd:5c:6d:f1:65:65:f5: 34:1f:c3:0b:63:68:3b:02:c1:fa:82:5b:8f:1e:0f:fd:78:b4: 7a:d0:85:f7:9d:f6:25:08:df:dd:dc:08:00:e5:43:f8:b6:92: cb:00:87:46:58:32:f2:98:2d:17:41:a2:c5:f4:9d:53:35:d5: 97:4f:61:f2:c2:db:77:79:f1:5d:7c:67:0a:6a:38:1e:41:f9: 26:d1:c4:3b:16:bc:d4:8f:24:04:86:22:3e:e6:e9:f2:fa:82: 54:a7:fb:1d:1b:82:c9:e5:68:5d:ea:91:a7:70:34:93:7a:d5: df:14:43:0c:c6:d1:c1:0f:b4:79:e7:bd:6d:b0:a0:8e:53:55: 58:3e:cd:b3:0c:33:ff:91:68:6b:8f:15:83:9d:35:dd:43:94: 3f:68:7b:f6:b7:66:cd:be:47:a7:4a:65:41:83:16:a7:59:31: 57:70:2c:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp2G2nVUJj+5SJaLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk ZmRiMmE0ZjMtNzQ4OC00ODk1LWIxNjgtNmU2OWY0ZmE1MDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzb3iemHMv31WOelCzC3o/RbFQOR61PPA2oA K6R6wGbO2EKULrKNlAZkmmGjqrQVEpLBDrhty3V9T2VIGnjRAAG9gY+SRmNuBthV RW9fSzaAZTYnmdfDm0NBrVVcBRDOQxiZc6WotU2jhh2Y+ru641GY3pdoUwwZa1de 7pXI0FV45zpN+ROB/vVJPgFoM+JyUA1wVed2GkFIDHhx47NUzfPAwGo+TFq4P9Jb AB06Bb5kh9Z1A3t+ZNHt+24diicWqaZTFJeA+Tvq/u0djRcQtZD3GE0WePr8VuQv Z15etU4EaBlNEJoZrFG0vNnberIj7aRY8U0vc2l4r7Bpdj/ntwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEO/KWKBMgO0+JNusj3UJNM5+z1tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmZhNDJjNjUtNWMzNi0z MzkyLWE2NTktN2IxYTE3NGE0MWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyakMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAquqRWxl00hNmqHqB7WoIThVmp3hm1ICyx9xIaoLPKyEkksI3nC6hf5 GBgTaXFh32ob/lBZMUq/DVA3tAj4M7RWzA6j2Bz4CPcAf4u0UvTHTu3Y/Vxt8WVl 9TQfwwtjaDsCwfqCW48eD/14tHrQhfed9iUI393cCADlQ/i2kssAh0ZYMvKYLRdB osX0nVM11ZdPYfLC23d58V18ZwpqOB5B+SbRxDsWvNSPJASGIj7m6fL6glSn+x0b gsnlaF3qkadwNJN61d8UQwzG0cEPtHnnvW2woI5TVVg+zbMMM/+RaGuPFYOdNd1D lD9oe/a3Zs2+R6dKZUGDFqdZMVdwLHg= -----END CERTIFICATE-----Generated at Wed Jul 23 02:00:28 2025 by rpki-client