$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3329c827-9d99-36c2-a05b-17df5d1b17e1.roa File: 3329c827-9d99-36c2-a05b-17df5d1b17e1.roa (raw, json) Hash identifier: 21TGxBbxeF1ZjZLlujrxMq4Fz7ATgAh3RAJy86gYSM4= Subject key identifier: 45:A5:F4:BD:6D:F4:3C:8F:A4:57:0B:4F:F8:03:22:6A:43:48:1F:D1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A78E600E4E95F24C1A67A6E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3329c827-9d99-36c2-a05b-17df5d1b17e1.roa Signing time: Thu 10 Jul 2025 13:01:02 +0000 ROA not before: Thu 10 Jul 2025 13:01:02 +0000 ROA not after: Wed 08 Oct 2025 13:01:02 +0000 asID: 16625 IP address blocks: 23.208.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:e6:00:e4:e9:5f:24:c1:a6:7a:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 10 13:01:02 2025 GMT Not After : Oct 8 13:01:02 2025 GMT Subject: CN=0c03d543-49c0-4126-bc50-6fd1344b8606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1c:19:06:0a:65:24:83:58:54:d4:66:ff:57: 8b:ef:c5:51:ba:5b:b7:63:2e:42:72:f2:94:0e:ef: a8:34:86:07:82:af:b8:e4:b6:31:ef:39:c2:68:12: f8:01:4a:c9:0e:c0:4b:b0:a1:43:38:4e:88:fc:1c: e5:ee:45:67:17:95:54:ec:01:00:82:c3:1c:d3:19: c2:78:26:96:31:14:85:92:e1:35:a2:b1:68:75:ed: ce:38:9b:a3:0b:31:fe:f9:c2:b3:e0:2b:06:4c:d4: ec:3c:c8:d7:78:24:a6:be:2c:b3:c0:f3:83:6a:c1: 79:08:29:59:ee:ef:7b:22:40:3a:d0:37:56:c9:ce: 2e:d3:cf:95:93:db:38:b6:71:d1:17:1a:a0:a7:b2: f2:8c:71:4d:9c:82:62:69:2c:02:4f:a9:c5:b9:56: 04:7d:ad:e0:34:30:c1:ef:83:33:5e:77:73:41:34: f8:bf:9c:17:af:60:ed:0c:ee:55:2d:d2:9d:5b:87: 60:db:8b:0a:b7:ed:1a:aa:3b:58:19:8b:06:2e:5f: 29:89:ec:6d:08:67:49:75:48:f1:65:da:ea:c9:be: 2b:fb:5b:34:fe:9b:0a:04:79:d5:28:62:bc:5e:52: 9a:b0:04:d8:56:91:92:bb:b3:d9:15:75:d7:85:7b: 6e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A5:F4:BD:6D:F4:3C:8F:A4:57:0B:4F:F8:03:22:6A:43:48:1F:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3329c827-9d99-36c2-a05b-17df5d1b17e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d2:e2:e5:8c:f1:fb:57:7e:a6:9c:ae:69:f6:89:be:f9:05: df:b7:19:55:00:df:31:06:5e:36:b8:2f:b6:28:ae:eb:19:0e: 81:6b:47:cc:54:9d:27:45:44:e4:24:58:f5:c8:a5:a7:3a:ef: 33:2d:53:72:5d:f4:81:69:e0:74:35:9b:65:25:32:20:2f:60: aa:e9:f9:dd:1b:cf:7b:65:cc:d6:ab:ad:a4:9c:81:14:3e:08: db:df:eb:b6:bf:6a:2f:e4:fe:80:31:1d:aa:e7:d2:8b:d9:6b: db:6d:fd:09:24:0e:fd:53:23:67:76:88:b8:ed:98:9c:c1:0f: fd:5d:70:38:34:d4:d2:4a:72:80:86:a8:fc:a7:e3:7d:25:d6: fe:db:b4:de:9c:ac:e9:fd:75:04:ca:3a:52:ab:fb:ae:86:2b: 9d:48:e4:fa:c1:bc:f9:9f:02:f6:84:29:53:fa:88:8a:75:a7: 56:2e:f5:61:c7:84:b3:04:b2:fa:98:40:94:b3:21:4b:ed:eb: a9:7b:38:2e:83:e4:f4:38:d3:47:68:07:99:87:b6:2d:a1:64: 66:bd:29:64:56:84:88:33:58:4f:61:87:e3:50:90:c5:69:7c: b0:19:fe:c1:29:8e:50:96:ae:dd:3e:3f:d3:1e:f8:c9:38:fe: 58:1d:0c:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp45gDk6V8kwaZ6bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMDEzMDEwMloXDTI1MTAwODEzMDEwMlowLzEtMCsGA1UEAxMk MGMwM2Q1NDMtNDljMC00MTI2LWJjNTAtNmZkMTM0NGI4NjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRwZBgplJINYVNRm/1eL78VRulu3Yy5CcvKU Du+oNIYHgq+45LYx7znCaBL4AUrJDsBLsKFDOE6I/Bzl7kVnF5VU7AEAgsMc0xnC eCaWMRSFkuE1orFode3OOJujCzH++cKz4CsGTNTsPMjXeCSmviyzwPODasF5CClZ 7u97IkA60DdWyc4u08+Vk9s4tnHRFxqgp7LyjHFNnIJiaSwCT6nFuVYEfa3gNDDB 74MzXndzQTT4v5wXr2DtDO5VLdKdW4dg24sKt+0aqjtYGYsGLl8piextCGdJdUjx Zdrqyb4r+1s0/psKBHnVKGK8XlKasATYVpGSu7PZFXXXhXtuFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWl9L1t9DyPpFcLT/gDImpDSB/RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzMyOWM4MjctOWQ5OS0z NmMyLWEwNWItMTdkZjVkMWIxN2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9BQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3S4uWM8ftXfqacrmn2ib75Bd+3GVUA3zEGXja4L7YorusZDoFrR8xU nSdFROQkWPXIpac67zMtU3Jd9IFp4HQ1m2UlMiAvYKrp+d0bz3tlzNarraScgRQ+ CNvf67a/ai/k/oAxHarn0ovZa9tt/QkkDv1TI2d2iLjtmJzBD/1dcDg01NJKcoCG qPyn430l1v7btN6crOn9dQTKOlKr+66GK51I5PrBvPmfAvaEKVP6iIp1p1Yu9WHH hLMEsvqYQJSzIUvt66l7OC6D5PQ400doB5mHti2hZGa9KWRWhIgzWE9hh+NQkMVp fLAZ/sEpjlCWrt0+P9Me+Mk4/lgdDBI= -----END CERTIFICATE-----Generated at Wed Jul 23 01:29:23 2025 by rpki-client