$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3692b8b2-92fe-39a7-8c02-963a9d5ae527.roa File: 3692b8b2-92fe-39a7-8c02-963a9d5ae527.roa (raw, json) Hash identifier: uogjIOn1PD69rNBm09ac8zVap//Z0Z8ZXzG+NjpVBlw= Subject key identifier: 9B:00:1E:37:91:1E:62:BE:47:68:B1:D0:AA:F3:46:76:C0:FD:B5:42 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A6290B5740BCB8172B94A3BC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3692b8b2-92fe-39a7-8c02-963a9d5ae527.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.193.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:b5:74:0b:cb:81:72:b9:4a:3b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=74809db8-f8b8-4533-b41d-77067d344173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:dd:63:e5:f0:43:91:cc:56:9f:6c:d2:04:35: ca:b7:8d:9e:82:5a:25:f9:30:eb:8a:53:00:21:dc: 3f:b4:84:5c:d2:d8:58:cc:71:9b:32:ea:9f:9b:10: e1:e5:20:c9:5f:93:67:b9:fd:cb:ef:32:f5:c0:4a: 65:eb:41:44:9b:22:65:28:2f:25:7c:8d:9b:13:35: e8:70:c5:93:bf:4a:e8:f0:d5:a6:b9:30:40:f4:7b: 85:7e:7c:be:bd:11:a5:00:11:15:73:29:af:b1:6d: cc:4b:36:41:0c:61:09:c1:7b:bb:d8:0e:98:54:e9: c1:55:1f:91:f0:6f:cf:65:df:32:82:40:c7:48:8e: 1c:fb:f7:64:93:2f:1b:9e:2f:93:82:51:87:44:34: c2:ce:fa:27:ad:27:d6:f5:19:3e:f0:ee:3c:43:da: 69:e2:28:e5:2d:18:a7:c8:5c:c3:bf:91:1a:98:8c: 1b:59:e0:f3:19:5c:d7:1f:cf:76:9a:3a:01:ed:ac: 64:c3:43:37:5a:f9:ca:bb:b4:dd:56:bc:55:77:4c: 4b:21:18:9b:44:98:fb:21:4e:57:dc:9d:17:52:43: a5:ab:9f:0f:79:79:99:76:f8:bc:6f:7a:ad:5e:03: 23:a2:0f:a0:ed:22:22:62:3f:31:b9:19:78:4c:27: 9a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:00:1E:37:91:1E:62:BE:47:68:B1:D0:AA:F3:46:76:C0:FD:B5:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3692b8b2-92fe-39a7-8c02-963a9d5ae527.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.193.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:7d:41:fc:ae:9a:7a:a1:e8:41:95:1a:3d:8b:32:b9:44:67: 4d:84:57:13:ad:89:13:24:dd:24:15:27:e1:f4:6b:ab:e8:9f: e0:57:b8:a4:0c:d6:69:15:17:26:29:29:14:8b:61:04:20:1c: 60:8e:d2:0a:b1:62:5e:f4:21:db:20:08:8b:dd:aa:03:09:6f: 37:b6:cb:b2:42:00:02:56:a7:37:94:4c:9a:38:b8:37:02:29: f9:5b:9f:3e:ff:08:4b:6b:ae:32:8f:f4:ab:3a:fa:ca:0e:c8: 4a:94:44:24:ce:c9:f0:ae:37:c0:8e:4c:96:b8:f7:b6:3d:b5: 25:5f:de:91:84:b4:50:e9:93:fc:b2:bb:7d:65:5d:6f:00:09: 08:53:d8:a8:f8:9d:34:cb:e6:62:67:c3:21:63:c5:80:07:17: ab:3a:1f:98:29:0c:4c:f4:10:96:15:29:0f:e4:b6:df:f8:19: df:01:e3:c6:58:67:49:61:89:9f:7c:e1:ae:9e:65:fe:2d:7c: db:58:95:5e:39:34:5c:ef:25:e7:5b:67:9f:e4:73:86:2b:6f: 26:19:76:67:cb:b5:bb:a0:1f:7c:da:1a:39:36:df:44:3d:0c: b3:11:9b:a9:1b:5c:98:80:bf:d1:8e:e7:7b:96:e2:c9:a6:8c: 3d:9f:cd:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikLV0C8uBcrlKO8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk NzQ4MDlkYjgtZjhiOC00NTMzLWI0MWQtNzcwNjdkMzQ0MTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot1j5fBDkcxWn2zSBDXKt42eglol+TDrilMA Idw/tIRc0thYzHGbMuqfmxDh5SDJX5Nnuf3L7zL1wEpl60FEmyJlKC8lfI2bEzXo cMWTv0ro8NWmuTBA9HuFfny+vRGlABEVcymvsW3MSzZBDGEJwXu72A6YVOnBVR+R 8G/PZd8ygkDHSI4c+/dkky8bni+TglGHRDTCzvonrSfW9Rk+8O48Q9pp4ijlLRin yFzDv5EamIwbWeDzGVzXH892mjoB7axkw0M3WvnKu7TdVrxVd0xLIRibRJj7IU5X 3J0XUkOlq58PeXmZdvi8b3qtXgMjog+g7SIiYj8xuRl4TCeaJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJsAHjeRHmK+R2ix0KrzRnbA/bVCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzY5MmI4YjItOTJmZS0z OWE3LThjMDItOTYzYTlkNWFlNTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8FyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEB9Qfyumnqh6EGVGj2LMrlEZ02EVxOtiRMk3SQVJ+H0a6von+BXuKQM 1mkVFyYpKRSLYQQgHGCO0gqxYl70IdsgCIvdqgMJbze2y7JCAAJWpzeUTJo4uDcC Kflbnz7/CEtrrjKP9Ks6+soOyEqURCTOyfCuN8COTJa497Y9tSVf3pGEtFDpk/yy u31lXW8ACQhT2Kj4nTTL5mJnwyFjxYAHF6s6H5gpDEz0EJYVKQ/ktt/4Gd8B48ZY Z0lhiZ984a6eZf4tfNtYlV45NFzvJedbZ5/kc4YrbyYZdmfLtbugH3zaGjk230Q9 DLMRm6kbXJiAv9GO53uW4smmjD2fzbs= -----END CERTIFICATE-----Generated at Wed Jul 23 01:31:02 2025 by rpki-client