$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/396d3480-dfda-3cab-a48b-9d9d18ea82a2.roa File: 396d3480-dfda-3cab-a48b-9d9d18ea82a2.roa (raw, json) Hash identifier: ddnnz/J43AwhDVZtJhvtgk10tkLmTceWDuGEQiHlszA= Subject key identifier: 69:64:D2:17:ED:57:A4:E0:1B:80:98:27:46:69:12:FE:BC:54:23:3E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A77809F64D0BDB7A719BB9800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/396d3480-dfda-3cab-a48b-9d9d18ea82a2.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.205.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:9f:64:d0:bd:b7:a7:19:bb:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=3a95e1b8-a405-4152-b102-c0f190eddadf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:88:17:1e:42:22:87:80:92:49:c5:8f:53:49: 8f:2a:8d:67:00:9a:ec:f5:77:55:3b:71:b7:23:9a: 2e:dd:43:ed:88:c8:ac:a9:28:60:92:e2:28:45:3d: 04:99:67:a0:5d:b8:72:ca:20:39:9a:cd:05:f4:d4: b2:a6:b5:67:e0:81:73:cc:26:01:6c:a3:1c:b4:c1: 41:50:b5:c7:ba:78:32:38:86:45:49:49:65:85:7d: 0c:de:39:1d:bb:7b:e3:f1:80:d2:89:42:58:cf:29: 56:b7:f8:2a:92:ea:02:ae:64:9e:04:90:22:39:7e: 07:fe:3d:52:f9:5e:7c:63:ef:e7:17:a7:a7:d4:b3: f3:41:88:09:0c:d5:5b:e1:7f:b1:c8:5d:e8:7c:d8: 54:a7:87:63:2a:9f:99:0d:71:89:88:3d:63:2c:16: d8:95:05:55:40:c6:e4:b9:54:f3:51:f2:f4:8e:63: 12:37:97:fa:8a:5e:a8:7b:5d:43:a3:36:db:36:63: 47:c9:e5:a4:5a:75:f6:e2:4b:31:f8:7b:bc:9d:18: 22:dd:b4:67:3d:0a:3d:fc:35:87:ac:e4:6c:91:fb: e2:6d:74:b6:f2:b1:c8:de:37:b5:00:c2:db:5d:be: a5:a1:c0:bb:d3:cb:96:44:5a:67:74:27:b0:dc:9e: 18:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:64:D2:17:ED:57:A4:E0:1B:80:98:27:46:69:12:FE:BC:54:23:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/396d3480-dfda-3cab-a48b-9d9d18ea82a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:53:94:45:0b:33:26:1f:b9:e9:94:48:2c:81:12:8a:47:17: 0a:6a:0c:4d:9c:3e:12:2d:05:09:9e:a1:9b:59:6b:f9:ba:82: 74:e9:cb:64:b1:67:bf:39:49:c3:38:ba:40:e6:1d:a4:1a:84: cc:04:0a:9f:4e:cb:66:86:b5:4f:6a:35:a4:57:c6:15:7f:c1: 4e:d1:d7:63:fd:72:d2:46:be:63:d7:53:33:54:7a:67:87:b8: 89:6d:c5:25:1e:8a:ea:96:a1:fe:84:24:d9:29:11:21:67:62: c3:3e:98:d4:0d:e4:9f:2a:ba:bb:f0:c8:0b:c8:9e:98:48:03: f8:3a:20:66:8a:d6:12:59:09:08:8d:35:73:00:d4:fd:4a:7e: ef:38:72:e7:fc:aa:e8:1f:67:fd:9a:31:e6:2c:00:4f:ec:09: 39:fe:38:c7:46:3a:02:2f:5b:2b:d9:18:69:4b:8c:c0:6a:a4: 15:dd:52:70:d1:03:08:ea:55:05:ad:d8:e0:f4:76:8b:72:c0: 25:12:b1:c8:9c:49:b7:eb:58:aa:52:ad:fa:ba:fd:d0:d8:2f: 87:08:b2:1a:8e:37:af:1e:ac:75:25:93:db:7a:51:70:c0:98: 3f:17:62:84:54:39:9b:61:15:83:38:28:b6:a5:87:81:19:ec: dc:c7:e9:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gJ9k0L23pxm7mAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk M2E5NWUxYjgtYTQwNS00MTUyLWIxMDItYzBmMTkwZWRkYWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4gXHkIih4CSScWPU0mPKo1nAJrs9XdVO3G3 I5ou3UPtiMisqShgkuIoRT0EmWegXbhyyiA5ms0F9NSyprVn4IFzzCYBbKMctMFB ULXHungyOIZFSUllhX0M3jkdu3vj8YDSiUJYzylWt/gqkuoCrmSeBJAiOX4H/j1S +V58Y+/nF6en1LPzQYgJDNVb4X+xyF3ofNhUp4djKp+ZDXGJiD1jLBbYlQVVQMbk uVTzUfL0jmMSN5f6il6oe11DozbbNmNHyeWkWnX24ksx+Hu8nRgi3bRnPQo9/DWH rORskfvibXS28rHI3je1AMLbXb6locC708uWRFpndCew3J4Y5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlk0hftV6TgG4CYJ0ZpEv68VCM+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzk2ZDM0ODAtZGZkYS0z Y2FiLWE0OGItOWQ5ZDE4ZWE4MmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF81sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJTlEULMyYfuemUSCyBEopHFwpqDE2cPhItBQmeoZtZa/m6gnTpy2Sx Z785ScM4ukDmHaQahMwECp9Oy2aGtU9qNaRXxhV/wU7R12P9ctJGvmPXUzNUemeH uIltxSUeiuqWof6EJNkpESFnYsM+mNQN5J8qurvwyAvInphIA/g6IGaK1hJZCQiN NXMA1P1Kfu84cuf8qugfZ/2aMeYsAE/sCTn+OMdGOgIvWyvZGGlLjMBqpBXdUnDR AwjqVQWt2OD0dotywCUSscicSbfrWKpSrfq6/dDYL4cIshqON68erHUlk9t6UXDA mD8XYoRUOZthFYM4KLalh4EZ7NzH6QQ= -----END CERTIFICATE-----Generated at Wed Jul 23 01:29:33 2025 by rpki-client