$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3948bfce-cf0d-34b8-a338-abb3c1af453e.roa File: 3948bfce-cf0d-34b8-a338-abb3c1af453e.roa (raw, json) Hash identifier: A/dnoTtaUJ9OHb3H0oIpCgOp3O5m7MTv9k5ox4Z2/Ws= Subject key identifier: 68:EF:B3:2D:55:B2:D1:65:82:F9:96:C9:51:62:37:6F:7B:B7:C2:23 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A6290B706D374F18C4F90BCC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3948bfce-cf0d-34b8-a338-abb3c1af453e.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.194.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:b7:06:d3:74:f1:8c:4f:90:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=5b895565-3d26-49c2-88be-70d672065d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a1:b3:22:e0:48:c6:13:a0:90:ef:ff:85:4c: e5:88:4c:14:61:1e:47:ce:9e:56:8a:28:cb:8c:64: 5f:e9:cd:c4:d1:ff:ed:15:d8:c5:9c:94:21:ed:e9: 71:0a:f0:a8:ef:7b:1e:93:50:3c:bf:d9:6d:1d:17: b3:4c:6d:e5:9b:a9:75:8d:66:73:4a:19:a7:71:30: 80:1d:53:3b:d2:14:44:25:a8:1c:40:82:a5:67:14: 4f:b6:6f:52:cc:dd:b0:f8:ce:f2:f2:bd:15:0b:e3: 7c:81:e4:5f:64:5c:85:8d:a2:b9:2e:40:70:a0:e6: d6:56:4e:f0:89:c3:40:42:12:62:ab:8e:55:90:5e: f7:68:10:b0:20:a6:ea:c2:92:29:3c:74:bb:e3:d0: 66:49:74:99:11:8c:93:78:1e:c4:07:72:89:e3:87: ba:ee:06:cf:ee:c2:07:15:e1:22:30:e1:64:92:b1: 7c:74:58:f0:2e:a1:f8:07:38:36:76:ed:f1:45:2e: 1d:74:27:ba:37:7d:6b:f9:dc:ae:27:ce:f8:97:f3: 99:75:68:dd:e4:c1:2f:1d:2d:44:43:39:37:9e:12: 49:7e:00:26:f3:44:3a:bf:07:cf:bd:4a:51:ef:17: 94:75:0c:e3:34:40:ad:b7:77:9a:25:60:7f:9f:c2: 19:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:EF:B3:2D:55:B2:D1:65:82:F9:96:C9:51:62:37:6F:7B:B7:C2:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3948bfce-cf0d-34b8-a338-abb3c1af453e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.194.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:da:b3:af:5b:a1:c3:fb:ed:0d:db:39:6b:df:6e:66:af:97: bc:66:a2:30:a2:b7:4c:1a:f7:d8:e9:b5:2a:89:a3:68:5c:7f: f0:f0:eb:2f:4c:44:74:fa:21:bd:e9:c5:9d:f8:04:83:0f:ff: 7d:1b:b5:5a:e2:a6:11:96:44:12:a9:1e:e3:09:ff:1a:e1:fe: 3e:4f:78:ee:81:cc:65:31:be:1b:6f:e2:41:85:83:51:69:53: 41:e3:4d:1a:0e:1e:d8:9d:64:0a:6d:ee:0f:93:1a:ef:1b:54: 1d:dd:e1:35:00:d1:d1:b6:ca:66:fe:f0:c1:10:e2:7d:e9:74: af:ac:be:bf:08:77:4d:71:e2:f2:53:49:a4:5d:b2:dc:af:45: 68:8b:10:53:24:9a:3c:e5:44:6a:96:b9:08:d4:0d:8f:6a:11: 65:29:0e:94:33:24:63:26:ca:ea:d8:63:0e:c0:02:29:f5:19: a8:76:1f:f0:15:5f:18:0f:b0:aa:d9:0f:12:f1:98:00:f0:1e: 0f:85:87:96:3d:5c:e1:01:de:19:63:96:e8:f5:c1:64:0e:04: 8e:d7:82:bd:67:40:68:16:22:d5:d8:76:32:0c:06:33:59:2d: 7c:fc:15:84:2b:46:54:b6:b0:b8:6d:64:fe:fc:28:79:6d:b6: a3:ad:00:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikLcG03TxjE+QvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk NWI4OTU1NjUtM2QyNi00OWMyLTg4YmUtNzBkNjcyMDY1ZDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qGzIuBIxhOgkO//hUzliEwUYR5Hzp5WiijL jGRf6c3E0f/tFdjFnJQh7elxCvCo73sek1A8v9ltHRezTG3lm6l1jWZzShmncTCA HVM70hREJagcQIKlZxRPtm9SzN2w+M7y8r0VC+N8geRfZFyFjaK5LkBwoObWVk7w icNAQhJiq45VkF73aBCwIKbqwpIpPHS749BmSXSZEYyTeB7EB3KJ44e67gbP7sIH FeEiMOFkkrF8dFjwLqH4Bzg2du3xRS4ddCe6N31r+dyuJ874l/OZdWjd5MEvHS1E Qzk3nhJJfgAm80Q6vwfPvUpR7xeUdQzjNECtt3eaJWB/n8IZ2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjvsy1VstFlgvmWyVFiN297t8IjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzk0OGJmY2UtY2YwZC0z NGI4LWEzMzgtYWJiM2MxYWY0NTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8JzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7as69bocP77Q3bOWvfbmavl7xmojCit0wa99jptSqJo2hcf/Dw6y9M RHT6Ib3pxZ34BIMP/30btVriphGWRBKpHuMJ/xrh/j5PeO6BzGUxvhtv4kGFg1Fp U0HjTRoOHtidZApt7g+TGu8bVB3d4TUA0dG2ymb+8MEQ4n3pdK+svr8Id01x4vJT SaRdstyvRWiLEFMkmjzlRGqWuQjUDY9qEWUpDpQzJGMmyurYYw7AAin1Gah2H/AV XxgPsKrZDxLxmADwHg+Fh5Y9XOEB3hljluj1wWQOBI7Xgr1nQGgWItXYdjIMBjNZ LXz8FYQrRlS2sLhtZP78KHlttqOtAL8= -----END CERTIFICATE-----Generated at Wed Jul 23 01:31:05 2025 by rpki-client