$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/632c2ffe-d0ed-3d02-a1d0-b9dae0d713ee.roa File: 632c2ffe-d0ed-3d02-a1d0-b9dae0d713ee.roa (raw, json) Hash identifier: vHbv7L3OOWe/2Q3tzMJwSQ2OD8S7CLXN7GZMh/XNGEE= Subject key identifier: 79:59:27:66:CB:20:EA:B6:83:4A:B6:8C:C5:03:AA:19:37:14:BB:29 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8840AA85D9142247D1099080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/632c2ffe-d0ed-3d02-a1d0-b9dae0d713ee.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 16625 IP address blocks: 23.219.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:aa:85:d9:14:22:47:d1:09:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=9e5216cd-8ab0-4588-9058-a7cab308e6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:77:b6:1a:ec:70:3e:d8:6e:da:f6:61:c3:b1: ce:4b:27:a2:f1:dc:7c:1e:e6:5c:a8:76:c2:2f:2b: 99:fb:cf:30:d8:d4:68:3e:f6:82:2b:18:99:58:9e: f4:1d:5d:33:bc:b7:38:44:13:6e:d6:ff:16:9b:ec: c8:69:61:f4:d0:93:44:03:ae:b8:2c:92:ad:39:6b: ec:b3:b1:0d:55:f6:a0:fd:1b:bb:78:e5:9b:47:b8: 0b:cf:e7:6c:53:33:70:c5:41:02:f5:43:e6:72:62: 80:73:20:8e:5e:79:75:33:5f:1d:86:b7:e1:f7:52: ea:98:f4:a4:74:23:e5:16:1e:5e:c4:12:32:7a:5e: 05:c9:10:f1:8f:0d:ef:df:33:17:41:d8:04:db:cf: e2:dd:50:66:ff:79:fd:61:25:51:7f:c4:d5:42:20: 89:b2:73:c8:bd:7e:55:78:c5:63:0c:30:83:65:a9: 73:51:de:97:2f:d6:5f:d1:62:c8:94:ac:b1:5f:59: 8e:9b:4c:bf:d5:b2:b5:12:c2:cd:72:9c:77:a6:c7: 13:0c:a0:58:ba:30:70:a5:47:bb:9b:9b:2d:8d:8f: 67:6b:43:c2:25:f5:cd:ab:18:68:fa:bc:30:4a:13: f6:97:e5:61:ea:c5:ff:9f:83:2b:93:3b:41:5e:34: 68:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:59:27:66:CB:20:EA:B6:83:4A:B6:8C:C5:03:AA:19:37:14:BB:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/632c2ffe-d0ed-3d02-a1d0-b9dae0d713ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:da:71:a0:ef:6c:97:4b:03:dc:4a:a4:d0:95:66:b7:91:a9: f6:86:94:0c:fd:1c:55:af:8d:85:4b:b5:7b:73:84:45:0f:07: e2:16:d6:66:1c:16:39:6a:18:8e:bd:c2:48:05:99:b3:83:69: a0:41:93:1a:63:53:69:61:a3:0b:4a:fc:ce:d8:a9:db:fd:d2: d1:5b:04:c1:50:18:d2:c6:06:08:76:6d:c8:45:e2:a1:1f:0b: 73:77:85:6c:3d:59:14:b1:be:6b:96:bc:3e:e9:41:3f:aa:a9: 7a:28:c7:50:37:b0:06:ee:ab:3d:8b:e9:ba:7e:02:a0:46:2f: 22:16:4a:03:02:29:46:90:9f:19:8a:35:6a:d0:17:ef:70:dd: bb:4f:25:92:02:a6:2e:12:6b:80:26:be:d0:c6:20:42:4e:d3: 74:71:e5:7c:18:40:2e:50:b8:ed:90:3b:58:a3:65:85:a1:ac: d9:b3:73:68:86:d3:ba:cc:ef:49:04:a4:16:10:7a:b6:37:95: e4:b7:97:7c:31:41:20:09:5c:f5:6d:88:fd:66:8d:ed:32:a2: 2b:f7:9d:61:a1:62:ae:7c:30:7c:f6:0b:e3:e9:3a:27:96:fc: 63:11:cd:06:45:f8:14:3f:26:e9:bb:43:12:e5:57:fa:14:46: fe:67:7e:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQKqF2RQiR9EJkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk OWU1MjE2Y2QtOGFiMC00NTg4LTkwNTgtYTdjYWIzMDhlNmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHe2GuxwPthu2vZhw7HOSyei8dx8HuZcqHbC LyuZ+88w2NRoPvaCKxiZWJ70HV0zvLc4RBNu1v8Wm+zIaWH00JNEA664LJKtOWvs s7ENVfag/Ru7eOWbR7gLz+dsUzNwxUEC9UPmcmKAcyCOXnl1M18dhrfh91LqmPSk dCPlFh5exBIyel4FyRDxjw3v3zMXQdgE28/i3VBm/3n9YSVRf8TVQiCJsnPIvX5V eMVjDDCDZalzUd6XL9Zf0WLIlKyxX1mOm0y/1bK1EsLNcpx3pscTDKBYujBwpUe7 m5stjY9na0PCJfXNqxho+rwwShP2l+Vh6sX/n4MrkztBXjRo/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlZJ2bLIOq2g0q2jMUDqhk3FLspMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjMyYzJmZmUtZDBlZC0z ZDAyLWExZDAtYjlkYWUwZDcxM2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9vQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLacaDvbJdLA9xKpNCVZreRqfaGlAz9HFWvjYVLtXtzhEUPB+IW1mYc FjlqGI69wkgFmbODaaBBkxpjU2lhowtK/M7Yqdv90tFbBMFQGNLGBgh2bchF4qEf C3N3hWw9WRSxvmuWvD7pQT+qqXoox1A3sAbuqz2L6bp+AqBGLyIWSgMCKUaQnxmK NWrQF+9w3btPJZICpi4Sa4AmvtDGIEJO03Rx5XwYQC5QuO2QO1ijZYWhrNmzc2iG 07rM70kEpBYQerY3leS3l3wxQSAJXPVtiP1mje0yoiv3nWGhYq58MHz2C+PpOieW /GMRzQZF+BQ/Jum7QxLlV/oURv5nfqA= -----END CERTIFICATE-----Generated at Tue Jul 22 19:33:31 2025 by rpki-client