$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ce6a309-2187-3f37-939e-96b7be3448f4.roa File: 5ce6a309-2187-3f37-939e-96b7be3448f4.roa (raw, json) Hash identifier: lZ+sS943RaJinZCAAoBCYseTtw1dxMY+qwhLtGwafjM= Subject key identifier: A3:2E:48:1D:A9:F1:6A:D4:06:9B:37:47:22:A6:1B:C7:95:86:ED:12 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7A4B5893CBCFF796FF6CCA60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ce6a309-2187-3f37-939e-96b7be3448f4.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 34164 IP address blocks: 23.209.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:58:93:cb:cf:f7:96:ff:6c:ca:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=640b87b3-1272-41d3-a52d-bc686801fabc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5c:f6:61:60:30:6b:5f:3b:ee:0a:1b:e2:f4: ba:0e:8a:c4:e7:c0:1a:4f:50:96:60:21:39:3b:97: 7c:de:3b:77:3d:41:1c:a9:af:66:c8:44:4f:c3:2c: 64:03:00:4b:df:48:ad:0d:fd:8e:21:ca:c3:3c:36: d0:0b:83:45:0b:ea:60:62:d8:69:b1:67:88:c7:31: fc:ed:c4:20:6c:e7:82:cd:d3:19:a0:e8:a3:42:e1: a1:ff:8b:dd:ec:df:7d:4e:e5:7e:1b:aa:f4:cd:1c: 17:7c:0b:09:a0:c3:b5:db:02:6a:1e:2c:c0:1e:c8: 9c:92:df:67:c6:fc:07:05:f9:0c:5c:d9:e1:b2:65: 37:01:1d:2c:bd:2a:82:9d:a4:52:17:da:30:0e:63: 3e:f3:37:33:0d:64:11:4f:67:e2:e2:13:98:da:96: 89:7a:fb:fe:9b:fd:72:d7:7c:9f:27:24:be:51:22: 9b:40:ac:e3:58:b2:82:51:c8:82:e6:f6:4e:c4:c1: 43:53:3d:98:90:8d:39:98:66:32:32:33:af:7b:b1: f0:80:07:e4:ab:0e:c7:3b:ba:e3:7f:ed:1c:66:c0: 2f:a1:19:8c:71:b3:8b:05:a5:8f:b3:3e:3c:b6:87: 7e:dd:ba:0c:25:e5:1c:ba:1e:7b:0b:66:10:d1:95: f0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2E:48:1D:A9:F1:6A:D4:06:9B:37:47:22:A6:1B:C7:95:86:ED:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ce6a309-2187-3f37-939e-96b7be3448f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:16:57:b2:1c:00:6e:52:bb:9b:9a:8c:3b:ae:bb:8e:0e:e5: 70:34:89:30:4a:2d:88:3b:44:bf:82:99:42:72:b3:45:63:26: d2:5d:c6:5c:4e:1e:98:d7:65:b9:35:87:e5:ab:70:00:7a:68: e5:81:5d:3a:c2:d8:05:1b:6c:68:28:c4:3c:78:b5:17:dc:5a: 05:72:5a:ee:77:79:38:13:9b:60:f9:67:9e:70:10:d7:df:93: 4f:45:e9:c3:d9:b3:30:ce:9f:c9:ce:7c:23:08:c5:3e:31:55: c3:b7:4e:18:63:19:24:e2:46:2b:4a:3d:b5:ed:15:31:bf:8c: c0:d7:18:95:4b:29:67:8e:ae:41:27:59:9e:ea:96:0f:00:05: 70:4c:8a:79:a0:4f:03:0f:ff:32:3d:ed:59:f5:db:b1:fb:e0: 89:3e:9c:4c:b7:b3:ec:d8:7b:5f:19:92:2c:3c:5a:fc:1b:d2: de:11:a1:86:b1:3a:30:cb:78:70:30:ca:95:03:0f:62:85:db: a2:47:d2:b6:29:47:fb:c0:91:f7:eb:46:e6:ab:fe:e7:5f:ba: c5:9a:c0:80:e7:c5:ee:ac:4d:0f:36:ea:10:7e:9c:aa:09:2e: bf:3e:5d:9f:4e:9a:78:a2:73:19:4f:0d:e5:e2:d2:b5:f8:7c: 93:13:8c:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S1iTy8/3lv9symAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk NjQwYjg3YjMtMTI3Mi00MWQzLWE1MmQtYmM2ODY4MDFmYWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01z2YWAwa1877gob4vS6DorE58AaT1CWYCE5 O5d83jt3PUEcqa9myERPwyxkAwBL30itDf2OIcrDPDbQC4NFC+pgYthpsWeIxzH8 7cQgbOeCzdMZoOijQuGh/4vd7N99TuV+G6r0zRwXfAsJoMO12wJqHizAHsickt9n xvwHBfkMXNnhsmU3AR0svSqCnaRSF9owDmM+8zczDWQRT2fi4hOY2paJevv+m/1y 13yfJyS+USKbQKzjWLKCUciC5vZOxMFDUz2YkI05mGYyMjOve7HwgAfkqw7HO7rj f+0cZsAvoRmMcbOLBaWPsz48tod+3boMJeUcuh57C2YQ0ZXwpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMuSB2p8WrUBps3RyKmG8eVhu0SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWNlNmEzMDktMjE4Ny0z ZjM3LTkzOWUtOTZiN2JlMzQ0OGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9FoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAWV7IcAG5Su5uajDuuu44O5XA0iTBKLYg7RL+CmUJys0VjJtJdxlxO HpjXZbk1h+WrcAB6aOWBXTrC2AUbbGgoxDx4tRfcWgVyWu53eTgTm2D5Z55wENff k09F6cPZszDOn8nOfCMIxT4xVcO3ThhjGSTiRitKPbXtFTG/jMDXGJVLKWeOrkEn WZ7qlg8ABXBMinmgTwMP/zI97Vn127H74Ik+nEy3s+zYe18Zkiw8Wvwb0t4RoYax OjDLeHAwypUDD2KF26JH0rYpR/vAkffrRuar/udfusWawIDnxe6sTQ826hB+nKoJ Lr8+XZ9OmniicxlPDeXi0rX4fJMTjJc= -----END CERTIFICATE-----Generated at Wed Jul 23 01:44:37 2025 by rpki-client