$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35c9c03e-ecbb-39d7-9784-dd96ab34edb0.roa File: 35c9c03e-ecbb-39d7-9784-dd96ab34edb0.roa (raw, json) Hash identifier: srYkpwrVN0EIwqTx67o3i4aWeWNzxZ7XHCeRXJhnQCM= Subject key identifier: 7E:68:DC:43:D8:76:0D:DA:98:AA:B7:C7:E0:51:13:AA:B5:5B:F4:12 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A84124C7EC997CE2B85CC4500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35c9c03e-ecbb-39d7-9784-dd96ab34edb0.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 16625 IP address blocks: 23.193.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:4c:7e:c9:97:ce:2b:85:cc:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=74a183b0-9c11-4bab-968f-074035d7ed11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:15:ac:23:f6:48:2f:e0:68:da:de:5f:a5:3f: 1a:fb:78:21:df:95:48:12:58:39:db:c1:b9:c0:44: 46:d5:bb:5f:86:f5:68:f5:cc:c4:1a:10:e2:42:b4: 7a:b5:a6:ae:11:5d:b3:23:68:9e:f8:fd:f3:6b:20: d3:65:4e:83:72:8c:53:af:85:d4:67:9f:01:7f:be: c8:0b:9b:e9:ca:10:8d:9c:60:83:ca:b3:75:b0:5c: 1b:30:4f:48:9f:87:fc:9c:f2:71:9a:eb:53:11:91: f4:65:c3:01:75:f3:20:18:98:b9:e2:5b:b3:9f:0b: 2d:a3:07:3c:63:05:04:f2:8c:d6:d0:9f:32:db:e2: 40:a0:68:f8:b1:3b:d6:b8:eb:ad:22:63:31:43:36: 0e:70:e9:84:b8:bb:53:0b:c8:3d:3b:24:bc:df:96: 26:ba:5f:85:39:6b:53:c0:e8:f8:d4:c5:6c:ef:4b: 9c:13:46:6b:0f:d2:52:4e:db:76:74:43:76:f1:65: 9e:f6:71:a0:7d:2b:43:86:ab:3c:46:ab:81:ea:16: 76:82:78:41:35:6f:8b:f6:7c:de:a1:b4:b7:a8:30: 71:17:13:13:53:48:ba:40:f9:1a:0f:c5:e6:4f:58: a5:2a:41:25:0a:f8:62:8a:6b:e6:b5:61:33:b1:47: 3f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:68:DC:43:D8:76:0D:DA:98:AA:B7:C7:E0:51:13:AA:B5:5B:F4:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35c9c03e-ecbb-39d7-9784-dd96ab34edb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.193.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:68:2c:85:91:71:4d:b4:e4:91:ec:b3:ec:e7:90:5e:0b:63: 42:c8:53:ab:2f:5e:c2:56:21:0a:c1:e6:8d:c3:eb:5a:a6:aa: 38:9f:37:9a:c1:b5:ef:6a:74:2e:8f:35:7b:b9:e8:60:2d:8b: 6f:8d:b5:19:2e:05:34:af:89:37:74:91:ad:98:c4:9d:e3:4f: ba:05:25:7a:2c:53:18:1e:c6:84:14:c9:9e:24:46:e8:76:11: f7:7e:6b:08:8f:3b:d7:7d:89:0e:cf:d0:26:22:ec:e1:d9:53: 72:44:0f:43:b3:41:35:74:92:57:d4:93:09:15:b5:d3:6d:a2: 47:b1:9c:eb:f0:1a:e3:22:35:f9:56:b9:49:a5:9c:12:bb:ff: ac:ce:a8:6f:0d:de:62:ea:7b:71:09:df:b8:67:44:1e:90:5c: 76:f9:f7:f2:82:e0:51:d5:47:c7:57:c9:80:ac:51:30:81:88: 65:9d:a4:bb:ab:cf:01:2f:c2:a1:46:67:37:ed:ac:33:cb:8c: 20:81:f1:c8:11:20:6a:a1:15:59:dc:fc:fc:e6:a5:60:4a:dc: da:20:9b:78:8d:2c:7b:ca:49:9d:2d:35:dd:ba:12:19:cc:b0: 7f:fd:4a:dc:af:8b:c2:55:92:48:06:64:17:02:4a:35:10:dd: ee:b3:f7:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEkx+yZfOK4XMRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NzRhMTgzYjAtOWMxMS00YmFiLTk2OGYtMDc0MDM1ZDdlZDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhWsI/ZIL+Bo2t5fpT8a+3gh35VIElg528G5 wERG1btfhvVo9czEGhDiQrR6taauEV2zI2ie+P3zayDTZU6DcoxTr4XUZ58Bf77I C5vpyhCNnGCDyrN1sFwbME9In4f8nPJxmutTEZH0ZcMBdfMgGJi54luznwstowc8 YwUE8ozW0J8y2+JAoGj4sTvWuOutImMxQzYOcOmEuLtTC8g9OyS835Ymul+FOWtT wOj41MVs70ucE0ZrD9JSTtt2dEN28WWe9nGgfStDhqs8RquB6hZ2gnhBNW+L9nze obS3qDBxFxMTU0i6QPkaD8XmT1ilKkElCvhiimvmtWEzsUc/4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5o3EPYdg3amKq3x+BRE6q1W/QSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzVjOWMwM2UtZWNiYi0z OWQ3LTk3ODQtZGQ5NmFiMzRlZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8H4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJoLIWRcU205JHss+znkF4LY0LIU6svXsJWIQrB5o3D61qmqjifN5rB te9qdC6PNXu56GAti2+NtRkuBTSviTd0ka2YxJ3jT7oFJXosUxgexoQUyZ4kRuh2 Efd+awiPO9d9iQ7P0CYi7OHZU3JED0OzQTV0klfUkwkVtdNtokexnOvwGuMiNflW uUmlnBK7/6zOqG8N3mLqe3EJ37hnRB6QXHb59/KC4FHVR8dXyYCsUTCBiGWdpLur zwEvwqFGZzftrDPLjCCB8cgRIGqhFVnc/PzmpWBK3Nogm3iNLHvKSZ0tNd26EhnM sH/9Styvi8JVkkgGZBcCSjUQ3e6z9xI= -----END CERTIFICATE-----Generated at Tue Jul 22 19:31:43 2025 by rpki-client