$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/541236f6-a9d7-3663-9c11-216ac3c64097.roa File: 541236f6-a9d7-3663-9c11-216ac3c64097.roa (raw, json) Hash identifier: xUiq0K1ZZFqXSvv43uiJKCkfgiH/a0sA58B2iuiSLUI= Subject key identifier: 93:65:E8:85:66:35:62:F0:96:BF:C9:56:DB:08:BE:24:D5:0D:66:5C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A90A10CC442C88EA3B4A1D100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/541236f6-a9d7-3663-9c11-216ac3c64097.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 20940 IP address blocks: 23.39.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:0c:c4:42:c8:8e:a3:b4:a1:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=688b23c4-b511-4545-a7d1-2823802581ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:22:7e:8a:0b:5c:1f:18:f5:11:33:89:c2:ad: 11:20:d1:e7:0c:ec:11:75:32:68:c1:00:4a:11:3c: c6:26:29:00:5a:75:85:88:41:b5:1b:1c:c9:7b:f6: 44:13:da:42:42:6e:81:ad:16:3d:63:67:fe:42:0f: ab:d3:f7:9b:9a:93:52:dc:7c:bd:cf:73:75:89:56: fd:5f:62:5f:9b:5f:be:12:d7:9a:c5:3b:d7:1e:d8: 79:9b:85:ac:95:5c:45:2a:d6:ea:6e:59:3c:bd:b1: 28:ca:a0:0d:9b:1d:1e:1b:d6:c0:6f:a2:c4:84:0a: 60:54:fa:29:69:6c:2d:34:8c:f3:dc:30:7d:05:86: d6:34:cf:50:f5:ab:fd:40:3b:76:e2:15:ba:88:13: ab:e6:54:ef:75:6a:45:41:1e:e8:41:12:1a:25:9c: 52:1b:04:f4:5f:a4:a1:b5:58:99:75:33:34:76:9d: 9a:42:fa:5f:59:22:fb:fd:15:34:fc:03:75:6d:61: 2c:38:c3:9b:74:c4:3f:a0:dc:07:2a:0e:f5:1b:b8: 51:78:6c:17:84:6e:72:40:7a:85:c2:2e:5f:78:41: 7f:24:62:62:77:fa:57:71:3d:73:b3:d6:83:31:f3: 1d:dd:e8:60:d4:5a:dd:ed:fa:48:ba:4c:d7:5e:80: b9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:65:E8:85:66:35:62:F0:96:BF:C9:56:DB:08:BE:24:D5:0D:66:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/541236f6-a9d7-3663-9c11-216ac3c64097.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:d0:cf:e9:8a:95:7d:87:36:f7:f8:e1:d6:42:55:29:aa:7d: 9a:b5:6c:66:d0:31:03:53:73:53:c1:59:ef:c5:31:67:12:c1: 6e:fa:5d:e6:33:08:a8:5e:29:34:a1:91:58:ee:ef:1b:e6:e9: 74:6d:5e:64:38:74:5e:01:45:1b:35:c1:4c:ad:87:55:65:73: ed:3c:d9:c2:9e:ae:4c:27:a4:72:e4:ad:c8:0b:3e:56:7d:1f: 7a:1c:f3:93:9d:93:05:33:e6:ea:f5:e4:22:47:fc:61:ce:10: 8f:31:f2:4e:a2:67:55:b3:b3:25:68:0d:8c:4b:d6:98:bc:f6: 86:bc:cb:5c:b3:d9:46:39:59:7a:5d:1d:79:f4:90:08:f1:b6: 67:90:f5:3a:06:bb:ac:6b:7b:22:78:55:45:d9:05:b2:2c:a5: 14:19:00:3e:a9:61:a7:39:24:55:a5:b7:2e:ca:55:1c:cc:52: 55:ac:84:fa:d3:e7:ac:9f:7b:ad:6d:40:bf:05:b7:15:e3:20: 06:db:78:b0:53:30:39:09:82:05:94:ef:dd:13:66:0b:cd:74: d0:ec:2f:7b:80:40:3a:df:21:de:57:5e:79:3c:e2:71:dd:95: 4d:65:87:36:26:ec:6a:6c:59:38:38:f0:e0:bc:73:67:d4:17: 06:71:66:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoQzEQsiOo7Sh0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk Njg4YjIzYzQtYjUxMS00NTQ1LWE3ZDEtMjgyMzgwMjU4MWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCJ+igtcHxj1ETOJwq0RINHnDOwRdTJowQBK ETzGJikAWnWFiEG1GxzJe/ZEE9pCQm6BrRY9Y2f+Qg+r0/ebmpNS3Hy9z3N1iVb9 X2Jfm1++EteaxTvXHth5m4WslVxFKtbqblk8vbEoyqANmx0eG9bAb6LEhApgVPop aWwtNIzz3DB9BYbWNM9Q9av9QDt24hW6iBOr5lTvdWpFQR7oQRIaJZxSGwT0X6Sh tViZdTM0dp2aQvpfWSL7/RU0/AN1bWEsOMObdMQ/oNwHKg71G7hReGwXhG5yQHqF wi5feEF/JGJid/pXcT1zs9aDMfMd3ehg1Frd7fpIukzXXoC5YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNl6IVmNWLwlr/JVtsIviTVDWZcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTQxMjM2ZjYtYTlkNy0z NjYzLTljMTEtMjE2YWMzYzY0MDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFydvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3Qz+mKlX2HNvf44dZCVSmqfZq1bGbQMQNTc1PBWe/FMWcSwW76XeYz CKheKTShkVju7xvm6XRtXmQ4dF4BRRs1wUyth1Vlc+082cKerkwnpHLkrcgLPlZ9 H3oc85OdkwUz5ur15CJH/GHOEI8x8k6iZ1WzsyVoDYxL1pi89oa8y1yz2UY5WXpd HXn0kAjxtmeQ9ToGu6xreyJ4VUXZBbIspRQZAD6pYac5JFWlty7KVRzMUlWshPrT 56yfe61tQL8FtxXjIAbbeLBTMDkJggWU790TZgvNdNDsL3uAQDrfId5XXnk84nHd lU1lhzYm7GpsWTg48OC8c2fUFwZxZgQ= -----END CERTIFICATE-----Generated at Wed Jul 23 01:48:45 2025 by rpki-client