$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32e28cf4-8b69-33c5-949b-4a1b3ac71d19.roa File: 32e28cf4-8b69-33c5-949b-4a1b3ac71d19.roa (raw, json) Hash identifier: 61sOGOvRBf/vMhe1twVrXaKo2gg3553VTNg6EoQBcYw= Subject key identifier: 3C:2F:5A:0D:4C:74:3F:89:63:0D:F1:A0:3B:3C:AD:1C:1E:80:D3:75 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A778097CAAEC0166379272680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32e28cf4-8b69-33c5-949b-4a1b3ac71d19.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 9498 IP address blocks: 23.206.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:97:ca:ae:c0:16:63:79:27:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=8d32d48d-f3f2-4a25-b906-d98d88769263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:26:c7:a4:e8:46:04:ed:b0:9f:e6:1a:93:6f: c8:e6:3f:06:06:6b:31:67:84:a2:39:fb:dc:bd:72: 55:73:e0:ec:da:cc:f6:1b:e3:ca:67:5c:f7:fb:7a: 4a:ae:b9:f0:d9:72:c9:97:94:ba:3f:1c:49:18:a7: 49:04:46:73:59:b5:1a:f0:b2:ad:6b:80:5d:c8:ce: e3:2d:f3:7f:15:e3:9a:e2:dd:53:d2:0a:5b:96:ac: da:ae:24:a1:e8:80:10:8b:7b:39:49:95:0b:ff:e5: 25:66:6d:3e:9a:07:b1:04:7d:59:16:f7:92:a9:b0: 8b:38:45:3f:73:49:4a:40:32:68:78:f6:be:0e:7e: 8a:c3:57:2d:46:22:74:96:4e:df:77:15:be:5e:f2: da:30:bc:a8:c1:10:e4:82:92:9a:31:63:60:b2:f1: 42:ef:10:b8:cd:4c:30:98:7d:a8:0a:df:63:ec:2e: c0:77:a4:38:5e:b8:67:78:85:af:94:fd:1a:29:09: d8:35:f4:81:7c:4e:c6:9f:62:7d:d7:b9:18:8c:1b: 55:cd:b0:47:aa:79:bd:16:c5:0d:09:d7:8f:b9:ae: 7d:d7:c6:9c:e4:66:3f:a6:26:24:20:a0:c2:65:15: 0e:89:45:66:7f:e1:91:34:80:90:d5:2c:2a:6b:cd: 61:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2F:5A:0D:4C:74:3F:89:63:0D:F1:A0:3B:3C:AD:1C:1E:80:D3:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32e28cf4-8b69-33c5-949b-4a1b3ac71d19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:cf:cf:c0:ae:e4:e8:7f:bd:9a:43:6b:1f:76:ab:9a:fa:18: 45:a6:7e:82:db:0e:c3:26:e3:83:66:03:2d:c3:a7:a5:f3:1b: 2f:60:b2:ee:28:bc:d7:80:90:ed:6d:c5:da:da:fe:f7:7d:29: 03:d7:e2:84:3b:08:0d:e6:93:20:20:b1:7e:12:93:3b:67:1c: 7a:5b:27:7d:6c:10:81:51:fd:c0:f2:31:a9:dc:2b:4e:3d:1c: a3:5b:89:31:ad:96:32:b9:ec:17:16:88:b7:73:f8:e6:9d:18: 25:b0:6e:63:96:82:22:b2:fd:60:d4:44:c2:74:d2:6c:82:5f: 46:60:0d:45:5d:91:bf:44:5b:dd:0b:d0:a5:f9:0f:03:1c:b6: ac:28:7c:e3:d2:d0:1f:75:6f:9f:fc:58:0a:ae:3c:c4:6a:a7: b9:d6:5c:6f:79:f4:1b:9e:75:c8:67:d5:6b:01:f0:af:02:da: b2:14:83:0c:43:a7:9b:be:8a:e6:19:75:75:9e:52:2a:87:82: 79:37:d4:55:fe:1a:ea:c0:58:4c:c7:7e:14:dc:b8:b8:71:3a: 49:2c:51:04:8c:a2:b0:07:ce:d4:c2:c2:4b:0b:b8:94:39:ee: b1:f5:02:41:01:de:3c:ef:05:e3:ca:e4:2a:86:b0:bf:ec:81: c8:ce:dd:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gJfKrsAWY3knJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk OGQzMmQ0OGQtZjNmMi00YTI1LWI5MDYtZDk4ZDg4NzY5MjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SbHpOhGBO2wn+Yak2/I5j8GBmsxZ4SiOfvc vXJVc+Ds2sz2G+PKZ1z3+3pKrrnw2XLJl5S6PxxJGKdJBEZzWbUa8LKta4BdyM7j LfN/FeOa4t1T0gpblqzariSh6IAQi3s5SZUL/+UlZm0+mgexBH1ZFveSqbCLOEU/ c0lKQDJoePa+Dn6Kw1ctRiJ0lk7fdxW+XvLaMLyowRDkgpKaMWNgsvFC7xC4zUww mH2oCt9j7C7Ad6Q4XrhneIWvlP0aKQnYNfSBfE7Gn2J917kYjBtVzbBHqnm9FsUN CdePua5918ac5GY/piYkIKDCZRUOiUVmf+GRNICQ1Swqa81h3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwvWg1MdD+JYw3xoDs8rRwegNN1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzJlMjhjZjQtOGI2OS0z M2M1LTk0OWItNGExYjNhYzcxZDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF869MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfPz8Cu5Oh/vZpDax92q5r6GEWmfoLbDsMm44NmAy3Dp6XzGy9gsu4o vNeAkO1txdra/vd9KQPX4oQ7CA3mkyAgsX4SkztnHHpbJ31sEIFR/cDyMancK049 HKNbiTGtljK57BcWiLdz+OadGCWwbmOWgiKy/WDURMJ00myCX0ZgDUVdkb9EW90L 0KX5DwMctqwofOPS0B91b5/8WAquPMRqp7nWXG959Buedchn1WsB8K8C2rIUgwxD p5u+iuYZdXWeUiqHgnk31FX+GurAWEzHfhTcuLhxOkksUQSMorAHztTCwksLuJQ5 7rH1AkEB3jzvBePK5CqGsL/sgcjO3ZQ= -----END CERTIFICATE-----Generated at Tue Jul 22 19:32:55 2025 by rpki-client