$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c1631b2-8192-3aa6-a0c5-7fe18a0ef5b2.roa File: 3c1631b2-8192-3aa6-a0c5-7fe18a0ef5b2.roa (raw, json) Hash identifier: ywgRHXhxJ9dq5V19idaNk2mB1AtEpSRcTeyofqy76os= Subject key identifier: 9D:2D:C7:1E:CF:D3:6A:E7:D9:01:22:A6:E0:13:42:5A:68:69:FA:32 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7D160A619D28A53E24CFFC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c1631b2-8192-3aa6-a0c5-7fe18a0ef5b2.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.217.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:16:0a:61:9d:28:a5:3e:24:cf:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=62058dc8-a512-48cd-80b9-da02388d42c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2b:06:b7:ae:b1:77:01:04:5c:76:7b:e1:a2: 1f:da:be:bd:f2:b3:66:40:a8:34:15:68:4a:2e:79: 15:c7:d8:2b:44:d8:72:69:43:23:cb:66:03:65:9b: de:ef:d1:56:36:ae:5b:17:2a:40:11:9e:ab:f1:7d: d1:e8:2f:4c:2f:0d:76:f9:2e:aa:e9:4e:7b:d4:bc: f2:c8:09:89:c2:c2:36:3d:d6:2d:c2:24:1c:08:14: 21:09:8d:71:fe:a8:b7:fa:64:6b:b1:20:20:1f:b8: 62:f0:2e:3f:3a:a7:3d:5d:36:80:03:5a:51:63:51: ef:3a:6c:f1:50:63:2f:d5:42:e4:79:56:ab:b7:fd: 46:54:65:23:79:61:f5:16:15:02:06:69:01:84:de: 18:41:84:4d:b2:2f:eb:81:e3:ec:f1:14:24:d1:02: 43:3e:01:62:f4:34:32:cc:97:56:23:e8:97:4d:9b: 76:f4:95:96:c4:9b:a7:8f:1c:ba:d4:3e:7f:88:76: 82:70:f3:46:91:a5:bd:72:55:ab:96:c6:4a:20:c1: 30:99:01:8f:0a:af:ff:38:63:3e:12:a7:1a:79:6a: 3b:f6:4d:74:95:f5:be:94:16:32:5b:89:e9:92:17: 72:c8:31:30:b9:00:f3:7c:83:15:98:d4:33:7b:81: d5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2D:C7:1E:CF:D3:6A:E7:D9:01:22:A6:E0:13:42:5A:68:69:FA:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c1631b2-8192-3aa6-a0c5-7fe18a0ef5b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:27:aa:1e:4f:49:0d:cd:82:0a:7f:9e:21:04:4c:9c:f9:72: 77:56:f6:21:82:d9:08:18:27:9c:e5:1e:9b:9b:49:48:04:97: 09:b6:67:fb:a0:40:a7:3c:20:bb:df:d0:ef:e3:9b:ee:18:8a: 79:bd:1b:45:a9:b4:cb:b6:b8:c8:f2:44:fc:21:f6:7e:fd:a3: 82:6d:e4:1b:2f:b2:bc:33:dc:f7:58:71:cc:5a:c9:9b:8a:82: 43:e1:57:ee:88:95:15:d3:08:80:08:03:ba:84:3c:20:cb:5c: 49:9d:12:3a:67:d5:4a:cf:58:c2:e7:5d:6e:07:a0:48:f4:ff: 84:9b:85:36:4f:5d:b7:c8:1c:61:1e:4e:48:be:86:67:e6:e9: 74:e6:b3:cc:4a:f0:db:04:57:40:e6:3e:70:87:f6:79:4e:94: 85:70:42:1f:c9:cb:23:72:3c:b4:81:fa:b1:75:f9:98:09:05: dd:a8:fe:61:c9:cc:bd:80:1a:e6:dc:03:3c:db:9b:b8:3b:99: 9c:ad:12:a3:1c:8d:28:94:86:6c:65:e3:2b:7b:3c:9e:c4:1e: b2:40:fa:92:fd:f1:5e:e3:25:0e:cf:98:30:47:04:5e:1e:85: 7a:c7:02:d7:d6:25:ca:09:59:9e:4a:18:ab:b1:01:91:93:3d: df:1a:2b:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FgphnSilPiTP/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk NjIwNThkYzgtYTUxMi00OGNkLTgwYjktZGEwMjM4OGQ0MmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSsGt66xdwEEXHZ74aIf2r698rNmQKg0FWhK LnkVx9grRNhyaUMjy2YDZZve79FWNq5bFypAEZ6r8X3R6C9MLw12+S6q6U571Lzy yAmJwsI2PdYtwiQcCBQhCY1x/qi3+mRrsSAgH7hi8C4/Oqc9XTaAA1pRY1HvOmzx UGMv1ULkeVart/1GVGUjeWH1FhUCBmkBhN4YQYRNsi/rgePs8RQk0QJDPgFi9DQy zJdWI+iXTZt29JWWxJunjxy61D5/iHaCcPNGkaW9clWrlsZKIMEwmQGPCq//OGM+ EqcaeWo79k10lfW+lBYyW4npkhdyyDEwuQDzfIMVmNQze4HVvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0txx7P02rn2QEipuATQlpoafoyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2MxNjMxYjItODE5Mi0z YWE2LWEwYzUtN2ZlMThhMGVmNWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9nEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUnqh5PSQ3Nggp/niEETJz5cndW9iGC2QgYJ5zlHpubSUgElwm2Z/ug QKc8ILvf0O/jm+4Yinm9G0WptMu2uMjyRPwh9n79o4Jt5Bsvsrwz3PdYccxayZuK gkPhV+6IlRXTCIAIA7qEPCDLXEmdEjpn1UrPWMLnXW4HoEj0/4SbhTZPXbfIHGEe Tki+hmfm6XTms8xK8NsEV0DmPnCH9nlOlIVwQh/JyyNyPLSB+rF1+ZgJBd2o/mHJ zL2AGubcAzzbm7g7mZytEqMcjSiUhmxl4yt7PJ7EHrJA+pL98V7jJQ7PmDBHBF4e hXrHAtfWJcoJWZ5KGKuxAZGTPd8aKw8= -----END CERTIFICATE-----Generated at Fri Jul 25 06:11:11 2025 by rpki-client