$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6187d422-02c7-38e0-8cd8-3e120fa5e1d0.roa File: 6187d422-02c7-38e0-8cd8-3e120fa5e1d0.roa (raw, json) Hash identifier: JntVJdqjLSt9Cq9QNDXgpN1wWbt8QWPf9ez/K9ym9j8= Subject key identifier: 57:B5:9B:35:00:51:C1:16:E5:DD:F8:26:78:53:F4:2E:A7:C1:0F:78 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A698B117C139079DA4769E040 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6187d422-02c7-38e0-8cd8-3e120fa5e1d0.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.52.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:11:7c:13:90:79:da:47:69:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=8b9e7b02-db65-4dbb-b856-6125f755af51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:50:9a:d8:95:2f:7e:3a:25:da:81:80:47:31: 6a:0b:1b:f1:93:2d:aa:67:46:f0:86:66:22:38:07: cb:40:51:4c:b5:aa:16:60:44:4f:7f:76:b4:c4:dc: f8:e8:59:f2:45:a7:2a:0a:d7:64:bd:ca:94:40:af: 11:25:fd:07:2a:96:09:0e:ab:fa:8a:e3:a3:bb:39: 5c:19:92:20:af:dc:63:68:12:93:ff:a3:62:f8:ae: fc:cd:6b:db:ab:07:12:55:7d:88:26:f5:cf:99:04: 9b:55:cd:d3:5b:de:01:d9:e2:ea:ee:66:9c:9f:0f: 85:fe:65:83:bc:20:d9:ab:06:83:2d:79:d5:a5:fd: 0c:e7:12:5d:ca:9b:f7:8d:2a:5e:f6:70:29:7d:fa: 72:fd:97:d5:61:3d:bd:43:17:9f:d9:73:46:f5:9b: f8:e7:1d:64:4f:77:14:6c:db:ec:54:0d:e8:15:39: f1:2c:8d:91:b2:a6:88:76:bb:6d:d0:5a:f3:d5:c8: f1:15:93:f0:09:60:34:21:00:2c:f1:b0:60:ee:98: 39:27:b4:6d:4f:d3:92:dc:47:f6:7e:e0:e6:fc:06: 1f:41:b3:fc:36:21:b5:89:7e:3d:2e:3a:98:e5:f2: 77:73:ea:81:3a:f2:fb:91:a2:f6:6e:52:8f:0d:26: b9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B5:9B:35:00:51:C1:16:E5:DD:F8:26:78:53:F4:2E:A7:C1:0F:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6187d422-02c7-38e0-8cd8-3e120fa5e1d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:45:9e:a6:9b:76:71:9a:39:00:2c:ab:ca:66:82:51:74:0f: fe:64:65:d4:bb:7f:ed:97:43:e1:0b:b6:57:f4:e4:92:86:a5: c1:bf:b1:f4:cd:51:9c:2c:1f:9d:14:7d:70:06:03:a4:db:fa: 37:04:92:07:ae:17:7b:7e:aa:dc:da:77:7f:f6:e5:c8:01:f5: 49:3c:93:fe:c6:52:79:b2:6c:70:b0:e7:19:2a:40:4f:c7:de: 42:b5:fd:60:2c:e9:f3:7f:e8:44:ae:76:0b:53:57:d7:0f:c6: 9b:09:a7:e7:9d:99:f7:26:44:bf:6e:ae:9d:15:d1:b9:e1:2c: 18:81:ee:c7:f2:9b:96:ae:3b:a7:88:43:72:9b:83:dc:2b:d4: 31:7f:59:df:b4:be:1c:24:5b:d6:97:10:e3:1d:5c:72:88:76: 89:2d:69:ba:d8:b7:a1:64:10:9d:47:e0:3d:4a:f7:4c:7a:41: 06:5a:7f:02:39:60:78:42:9c:cf:c7:12:03:7f:7c:93:a8:d5: d0:39:42:29:22:4a:9e:6c:e8:fb:19:0b:4b:a9:5f:1b:c4:b1: c4:18:fc:19:89:6c:f0:e6:03:92:a8:77:b2:25:74:ed:b7:67: aa:dc:91:4c:3b:aa:c4:87:43:ed:48:c3:6e:9e:00:33:f8:1f: 24:d2:21:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppixF8E5B52kdp4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk OGI5ZTdiMDItZGI2NS00ZGJiLWI4NTYtNjEyNWY3NTVhZjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylCa2JUvfjol2oGARzFqCxvxky2qZ0bwhmYi OAfLQFFMtaoWYERPf3a0xNz46FnyRacqCtdkvcqUQK8RJf0HKpYJDqv6iuOjuzlc GZIgr9xjaBKT/6Ni+K78zWvbqwcSVX2IJvXPmQSbVc3TW94B2eLq7macnw+F/mWD vCDZqwaDLXnVpf0M5xJdypv3jSpe9nApffpy/ZfVYT29Qxef2XNG9Zv45x1kT3cU bNvsVA3oFTnxLI2RsqaIdrtt0Frz1cjxFZPwCWA0IQAs8bBg7pg5J7RtT9OS3Ef2 fuDm/AYfQbP8NiG1iX49LjqY5fJ3c+qBOvL7kaL2blKPDSa5EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFe1mzUAUcEW5d34JnhT9C6nwQ94MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjE4N2Q0MjItMDJjNy0z OGUwLThjZDgtM2UxMjBmYTVlMWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzRrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpFnqabdnGaOQAsq8pmglF0D/5kZdS7f+2XQ+ELtlf05JKGpcG/sfTN UZwsH50UfXAGA6Tb+jcEkgeuF3t+qtzad3/25cgB9Uk8k/7GUnmybHCw5xkqQE/H 3kK1/WAs6fN/6ESudgtTV9cPxpsJp+edmfcmRL9urp0V0bnhLBiB7sfym5auO6eI Q3Kbg9wr1DF/Wd+0vhwkW9aXEOMdXHKIdoktabrYt6FkEJ1H4D1K90x6QQZafwI5 YHhCnM/HEgN/fJOo1dA5QikiSp5s6PsZC0upXxvEscQY/BmJbPDmA5Kod7IldO23 Z6rckUw7qsSHQ+1Iw26eADP4HyTSIWo= -----END CERTIFICATE-----Generated at Wed Jul 23 01:34:14 2025 by rpki-client