$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/404a12b4-51a5-354c-8dea-8ad8ceaf8b2c.roa File: 404a12b4-51a5-354c-8dea-8ad8ceaf8b2c.roa (raw, json) Hash identifier: N2+6QEIGhFARMRL2L+g/Rl+HepGQZtNiOgMUF5G7Zbw= Subject key identifier: 12:69:C7:85:65:96:8B:96:8F:78:CC:0C:E0:F8:23:0B:FD:C7:5E:20 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7D160D8AEFAB40DFFCEDF980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/404a12b4-51a5-354c-8dea-8ad8ceaf8b2c.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.215.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:16:0d:8a:ef:ab:40:df:fc:ed:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=b1ba3bed-a98b-4077-8c73-16614ca6c757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:02:da:a3:dd:f3:32:39:79:60:21:c2:77:bf: ba:e7:bc:f4:1a:25:98:12:5e:ef:f4:7a:bf:44:8f: c3:3c:b6:6b:d6:91:a8:8b:d2:d9:b0:36:a8:13:45: ce:d3:1c:77:4a:66:83:e7:7e:25:d8:53:e4:51:95: ba:c7:88:1e:59:90:5b:97:6f:07:d4:33:9f:40:0d: 3b:ff:93:61:83:1c:08:71:ad:f4:59:1c:ce:1b:18: 78:d7:7f:bf:94:0f:44:52:c3:16:89:b0:87:b7:83: 2f:03:b6:3c:6d:72:f1:dd:ac:40:d3:ed:9d:f8:60: 8f:0c:00:f0:9f:1b:a7:2b:51:e3:a7:7b:fe:74:06: 38:6a:be:c4:bc:2f:7c:10:33:e5:a9:5e:be:66:68: 3e:f4:22:f7:09:c7:22:e9:5c:e2:d8:ac:33:d8:82: e3:41:54:42:6e:f9:51:32:8b:c4:b3:c5:84:e0:3b: d6:4d:39:38:33:47:59:73:b4:26:be:69:75:77:78: 36:e5:c4:6e:51:89:e9:4a:c7:fd:b6:6f:83:4d:a3: b8:89:3f:ae:07:98:f4:52:9d:13:2b:8c:b6:19:b6: 11:75:cf:ce:3d:4e:3e:ba:ba:06:36:12:b6:03:60: 6a:53:44:b4:56:da:17:b0:be:fd:4a:a4:ba:45:ac: 0a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:69:C7:85:65:96:8B:96:8F:78:CC:0C:E0:F8:23:0B:FD:C7:5E:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/404a12b4-51a5-354c-8dea-8ad8ceaf8b2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:a9:c9:cd:79:fe:40:73:1d:bc:2b:ae:13:67:d5:7f:e0:f9: 92:09:bc:ce:13:60:2a:a8:de:5f:ba:f2:b3:8b:18:5e:b2:1d: f4:44:15:b9:63:94:d6:a4:d6:fd:56:d7:7a:ce:7c:4f:aa:45: a1:ff:07:2e:96:1c:1d:c2:16:15:24:6e:44:4d:64:f8:84:5b: 33:4a:02:5a:bf:32:9a:0a:a8:2f:7c:7c:0f:87:a7:08:99:0f: 9c:18:b0:1c:e6:5b:89:83:65:ca:83:c5:97:68:27:24:89:b0: aa:6b:d9:ba:25:a1:58:fa:eb:95:28:a1:5b:7f:42:cf:42:ac: 37:d7:19:1e:83:0d:8e:60:01:25:52:f5:93:0b:0d:fb:05:2f: 58:94:2f:de:87:d0:39:04:bc:24:71:ec:50:9d:b8:24:8f:04: c4:99:d2:52:a1:ea:43:ef:40:88:5a:57:1d:84:a0:2d:f4:a5: 33:f1:67:41:a1:64:e9:40:bf:cd:b7:ea:16:30:cd:a0:3a:90: 95:17:1a:c0:eb:4c:44:d0:3d:bb:5c:45:7f:d4:e4:90:3c:cd: e1:da:09:ba:29:76:28:ea:c2:01:a2:c9:5e:aa:7c:bc:9c:1f: d7:32:51:4d:75:fe:27:70:d2:0f:4d:b7:4a:df:2a:61:f4:9f: 27:5b:d5:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9Fg2K76tA3/zt+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk YjFiYTNiZWQtYTk4Yi00MDc3LThjNzMtMTY2MTRjYTZjNzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQLao93zMjl5YCHCd7+657z0GiWYEl7v9Hq/ RI/DPLZr1pGoi9LZsDaoE0XO0xx3SmaD534l2FPkUZW6x4geWZBbl28H1DOfQA07 /5NhgxwIca30WRzOGxh413+/lA9EUsMWibCHt4MvA7Y8bXLx3axA0+2d+GCPDADw nxunK1Hjp3v+dAY4ar7EvC98EDPlqV6+Zmg+9CL3Ccci6Vzi2Kwz2ILjQVRCbvlR MovEs8WE4DvWTTk4M0dZc7Qmvml1d3g25cRuUYnpSsf9tm+DTaO4iT+uB5j0Up0T K4y2GbYRdc/OPU4+uroGNhK2A2BqU0S0VtoXsL79SqS6RawKSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJpx4VllouWj3jMDOD4Iwv9x14gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDA0YTEyYjQtNTFhNS0z NTRjLThkZWEtOGFkOGNlYWY4YjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9ecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWpyc15/kBzHbwrrhNn1X/g+ZIJvM4TYCqo3l+68rOLGF6yHfREFblj lNak1v1W13rOfE+qRaH/By6WHB3CFhUkbkRNZPiEWzNKAlq/MpoKqC98fA+HpwiZ D5wYsBzmW4mDZcqDxZdoJySJsKpr2boloVj665UooVt/Qs9CrDfXGR6DDY5gASVS 9ZMLDfsFL1iUL96H0DkEvCRx7FCduCSPBMSZ0lKh6kPvQIhaVx2EoC30pTPxZ0Gh ZOlAv8236hYwzaA6kJUXGsDrTETQPbtcRX/U5JA8zeHaCbopdijqwgGiyV6qfLyc H9cyUU11/idw0g9Nt0rfKmH0nydb1Ys= -----END CERTIFICATE-----Generated at Tue Jul 22 19:33:41 2025 by rpki-client