$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5448a240-83e8-32ee-8db0-e26396fb2b3f.roa File: 5448a240-83e8-32ee-8db0-e26396fb2b3f.roa (raw, json) Hash identifier: MiEpGJ5EsRMb0LbTNODLpH1xen3Btb3tCKhrJTHyZMg= Subject key identifier: B1:62:8D:6F:6D:17:C9:60:9B:59:FD:91:8D:2B:88:B2:FA:42:E5:43 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A6290A39170B95AD919DAF5D0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5448a240-83e8-32ee-8db0-e26396fb2b3f.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16625 IP address blocks: 23.194.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:a3:91:70:b9:5a:d9:19:da:f5:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=c2058b4a-2082-4d0f-b98a-e5df24d04f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a7:75:9d:73:79:cb:45:bb:7d:84:c8:4d:dc: 4e:f6:b4:56:ff:a6:91:09:cb:70:fe:6c:be:9a:7d: 2c:7a:8b:8d:d2:95:08:a4:46:ca:1d:f6:c8:a0:21: 9d:7c:ba:64:3d:87:d4:7b:ac:0e:3d:65:c2:a2:be: ee:97:21:2d:6e:00:07:fa:d1:91:14:ca:69:cf:9d: 7a:4d:c5:0a:bf:52:bd:62:7b:ac:d3:10:33:23:af: 78:d7:4a:19:11:88:7e:67:e9:74:05:0d:d1:74:f8: c4:ad:5c:5e:ad:a8:83:0c:a3:1f:98:7d:84:81:c6: 7f:46:55:9e:42:62:3b:ce:e1:ed:b8:e0:f4:5d:88: 8a:e0:e8:3c:b3:10:20:40:ab:52:56:f3:b1:48:e2: 4f:04:a8:aa:b0:18:bf:57:0b:f5:90:89:11:06:31: 56:e4:71:6a:12:2e:ca:6f:ba:df:d8:10:87:b6:78: f5:54:57:8a:19:c4:8b:18:41:4d:44:a4:60:4c:50: c3:5b:5b:e9:d9:64:29:64:1a:d3:5b:2c:74:43:27: cf:3b:93:65:6c:fc:c9:af:c0:38:c8:ae:c0:08:5b: 9b:96:bd:7c:07:15:78:f2:b3:31:00:71:38:60:a6: 8a:24:b5:6f:94:f9:fe:6f:99:c7:2f:ec:19:09:5b: df:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:62:8D:6F:6D:17:C9:60:9B:59:FD:91:8D:2B:88:B2:FA:42:E5:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5448a240-83e8-32ee-8db0-e26396fb2b3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.194.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:09:5a:21:1f:02:c7:65:de:92:45:2a:9d:d9:03:a8:c9:f0: 53:e6:8a:72:34:f9:f6:39:6b:e2:41:80:a6:f5:71:e4:6c:45: 40:67:25:44:2f:24:2a:1e:26:15:88:61:07:19:0b:de:1b:61: 3c:5e:05:ba:2e:cc:24:0c:03:6c:a0:d8:a0:12:ac:88:c9:a9: 1e:cc:df:d1:e7:a5:72:62:66:3e:1c:98:33:30:5c:84:f1:26: 9a:eb:22:dd:c5:49:8c:e4:45:7c:8b:52:8a:5d:e6:b5:5a:99: a7:ac:dc:d2:b2:61:8f:1a:12:75:73:87:d7:a0:02:40:b0:2f: 25:71:48:45:a8:ee:e2:6a:03:92:33:80:95:36:37:57:5c:f5: 18:61:db:b1:6e:a3:e0:9f:b3:86:eb:70:5e:e4:bd:36:d5:3b: 29:33:cd:37:b4:ad:16:cb:c2:f5:b7:bd:be:01:13:13:ad:de: a6:4a:38:10:fb:6b:4a:22:a2:48:58:a4:4d:02:69:15:ca:38: 25:c6:30:b9:31:40:85:3e:1d:8f:1f:22:f4:be:92:01:cb:29: ce:d7:27:26:4a:3e:3d:a1:4b:38:29:19:72:60:5c:48:0c:29: e2:83:a1:e8:05:f9:15:02:20:66:be:1a:dc:b7:b0:1b:43:63: ed:b4:33:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikKORcLla2Rna9dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk YzIwNThiNGEtMjA4Mi00ZDBmLWI5OGEtZTVkZjI0ZDA0Zjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6d1nXN5y0W7fYTITdxO9rRW/6aRCctw/my+ mn0seouN0pUIpEbKHfbIoCGdfLpkPYfUe6wOPWXCor7ulyEtbgAH+tGRFMppz516 TcUKv1K9Ynus0xAzI69410oZEYh+Z+l0BQ3RdPjErVxeraiDDKMfmH2EgcZ/RlWe QmI7zuHtuOD0XYiK4Og8sxAgQKtSVvOxSOJPBKiqsBi/Vwv1kIkRBjFW5HFqEi7K b7rf2BCHtnj1VFeKGcSLGEFNRKRgTFDDW1vp2WQpZBrTWyx0QyfPO5NlbPzJr8A4 yK7ACFublr18BxV48rMxAHE4YKaKJLVvlPn+b5nHL+wZCVvfuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFijW9tF8lgm1n9kY0riLL6QuVDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTQ0OGEyNDAtODNlOC0z MmVlLThkYjAtZTI2Mzk2ZmIyYjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8JsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8JWiEfAsdl3pJFKp3ZA6jJ8FPminI0+fY5a+JBgKb1ceRsRUBnJUQv JCoeJhWIYQcZC94bYTxeBbouzCQMA2yg2KASrIjJqR7M39HnpXJiZj4cmDMwXITx JprrIt3FSYzkRXyLUopd5rVamaes3NKyYY8aEnVzh9egAkCwLyVxSEWo7uJqA5Iz gJU2N1dc9Rhh27Fuo+Cfs4brcF7kvTbVOykzzTe0rRbLwvW3vb4BExOt3qZKOBD7 a0oiokhYpE0CaRXKOCXGMLkxQIU+HY8fIvS+kgHLKc7XJyZKPj2hSzgpGXJgXEgM KeKDoegF+RUCIGa+Gty3sBtDY+20M+g= -----END CERTIFICATE-----Generated at Wed Jul 23 01:46:19 2025 by rpki-client