$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ce07ef4-2a15-381e-89af-8c051d2cabf8.roa File: 5ce07ef4-2a15-381e-89af-8c051d2cabf8.roa (raw, json) Hash identifier: n6VxBV4POKLrYJ1JFs4PTgOvm53gC3GRuT3E/Gp5uJk= Subject key identifier: 00:FD:9A:78:D7:8F:9E:E1:EB:CD:87:08:97:82:51:45:20:48:B5:14 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7A4B5EB532EC88AB7978AC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ce07ef4-2a15-381e-89af-8c051d2cabf8.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.213.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:5e:b5:32:ec:88:ab:79:78:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=6bae8df6-f471-429a-9b66-2988c96bca76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d0:22:ee:3b:9c:99:66:f2:ce:2e:48:d8:a9: 27:01:43:00:bf:3c:d0:07:65:40:1b:b5:17:cd:b0: e9:71:15:97:43:44:16:05:c9:14:58:a4:dc:3b:6c: b2:73:58:a6:63:75:b8:c2:c4:65:87:90:8d:e2:87: e8:33:25:97:3f:64:0c:c2:59:f5:53:22:fe:c3:73: ee:8e:0d:0b:af:ba:14:ec:71:55:28:0f:bf:1b:1c: c4:b9:27:65:ac:24:bb:d2:3a:20:d6:8f:80:33:4f: 25:0f:4a:24:8e:34:3a:86:ce:41:9b:2f:62:21:50: 9d:3b:e0:06:89:93:c6:5b:6c:a1:24:1e:29:cc:79: 92:d0:9a:d2:0e:3c:3e:01:92:5e:3e:a2:7b:b2:13: 07:f5:d8:fd:03:aa:07:09:48:25:d0:03:4c:aa:6e: 84:d8:b5:2f:37:3c:b6:72:6a:6a:e7:66:c8:bb:54: cc:c6:1d:6f:94:2f:b9:11:bb:4d:d4:dc:20:84:ed: fd:a9:c3:44:60:0f:68:6f:2d:af:da:eb:2c:69:55: 5f:d4:16:5f:a8:b6:85:7c:c6:f0:d8:02:44:51:85: 1e:73:26:29:8a:00:e2:0f:5d:51:c6:0d:99:03:9d: 3c:37:74:ff:ad:ad:ac:43:d4:77:30:28:56:d9:89: 8e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FD:9A:78:D7:8F:9E:E1:EB:CD:87:08:97:82:51:45:20:48:B5:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ce07ef4-2a15-381e-89af-8c051d2cabf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ed:09:bc:8e:9f:73:1a:ac:63:ea:e5:2f:9b:3f:8a:81:f2: d4:46:4a:20:55:f5:a3:c9:a5:11:90:96:31:d9:1e:b8:e3:15: 5d:75:83:17:8e:3b:a0:a6:ca:4e:ce:31:d7:22:ac:54:2f:3c: 16:68:3e:28:41:8d:09:bc:34:d5:14:7d:4f:2a:06:68:91:8b: 55:d4:82:f3:0f:8b:63:79:ee:29:63:51:92:07:c9:d7:c9:14: b8:3d:77:04:ae:25:96:27:36:e1:ea:9a:61:8a:55:99:3e:72: 58:86:ef:ed:51:94:e9:47:ea:5a:cb:8c:31:64:f1:a0:64:0b: b0:32:b4:a2:0d:f1:f2:3a:89:7d:df:a6:1e:1a:a0:e3:16:14: 64:dc:c1:5f:82:f6:47:03:70:d9:0f:62:b9:93:94:da:12:0d: ba:0a:84:2c:20:79:8f:ba:f6:ac:ed:de:87:93:fd:33:b9:31: 8a:c6:b8:77:00:f8:1e:47:67:79:03:6d:4d:cb:29:7e:93:89: d1:2c:31:0d:66:94:9e:f2:14:51:95:87:fd:42:24:2f:eb:a5: e4:3d:9c:16:6c:26:c1:3d:88:86:97:62:2c:9d:fa:b4:c4:c2: 1e:8f:55:e4:a2:c3:3e:35:ff:20:fa:79:02:f6:aa:e6:43:a4: b5:99:92:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S161MuyIq3l4rAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk NmJhZThkZjYtZjQ3MS00MjlhLTliNjYtMjk4OGM5NmJjYTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodAi7jucmWbyzi5I2KknAUMAvzzQB2VAG7UX zbDpcRWXQ0QWBckUWKTcO2yyc1imY3W4wsRlh5CN4ofoMyWXP2QMwln1UyL+w3Pu jg0Lr7oU7HFVKA+/GxzEuSdlrCS70jog1o+AM08lD0okjjQ6hs5Bmy9iIVCdO+AG iZPGW2yhJB4pzHmS0JrSDjw+AZJePqJ7shMH9dj9A6oHCUgl0ANMqm6E2LUvNzy2 cmpq52bIu1TMxh1vlC+5EbtN1NwghO39qcNEYA9oby2v2ussaVVf1BZfqLaFfMbw 2AJEUYUecyYpigDiD11Rxg2ZA508N3T/ra2sQ9R3MChW2YmONQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAD9mnjXj57h682HCJeCUUUgSLUUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWNlMDdlZjQtMmExNS0z ODFlLTg5YWYtOGMwNTFkMmNhYmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9WAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7tCbyOn3MarGPq5S+bP4qB8tRGSiBV9aPJpRGQljHZHrjjFV11gxeO O6Cmyk7OMdcirFQvPBZoPihBjQm8NNUUfU8qBmiRi1XUgvMPi2N57iljUZIHydfJ FLg9dwSuJZYnNuHqmmGKVZk+cliG7+1RlOlH6lrLjDFk8aBkC7AytKIN8fI6iX3f ph4aoOMWFGTcwV+C9kcDcNkPYrmTlNoSDboKhCwgeY+69qzt3oeT/TO5MYrGuHcA +B5HZ3kDbU3LKX6TidEsMQ1mlJ7yFFGVh/1CJC/rpeQ9nBZsJsE9iIaXYiyd+rTE wh6PVeSiwz41/yD6eQL2quZDpLWZkhg= -----END CERTIFICATE-----Generated at Wed Jul 23 01:38:59 2025 by rpki-client