$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65c5ad8b-28ea-3e78-ab05-7ea07b66adc7.roa File: 65c5ad8b-28ea-3e78-ab05-7ea07b66adc7.roa (raw, json) Hash identifier: JQbHof8/NojegjiTkwFkxNgwos2Ml5hrR1IkfvL2NhI= Subject key identifier: FC:C7:1F:19:30:DB:54:48:0F:6D:28:5D:00:57:00:4F:6D:F8:8F:BA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7D160A082378E98703815C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65c5ad8b-28ea-3e78-ab05-7ea07b66adc7.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.217.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:16:0a:08:23:78:e9:87:03:81:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=7ffd0dab-747e-48b3-bdec-e79053470f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2a:4e:f8:47:cc:fc:a3:a5:15:96:85:a7:70: ab:24:01:83:de:0f:b3:0b:1c:ee:69:18:bc:23:18: 95:e9:a0:8d:94:ff:0a:cc:7d:f8:3d:6e:0d:98:d2: b5:49:3a:c2:64:df:81:b0:27:f6:88:fe:32:33:4f: 79:23:5f:d8:d2:34:35:a4:a4:c3:7f:28:e0:8c:d8: a2:ac:ee:f5:eb:fa:d7:ad:5c:df:46:4b:8f:54:1c: 5e:0a:3d:f6:05:07:70:6f:d4:31:d9:05:f6:ba:94: 45:67:1a:d4:60:ea:55:65:2e:9a:67:e3:fc:28:53: 6e:97:04:eb:bb:33:16:33:3e:07:51:64:54:90:5d: da:95:fb:5a:3b:72:43:a5:fb:18:e5:4a:b4:b7:43: cf:83:a9:49:71:f5:10:1e:ef:01:8f:14:30:8b:67: 3f:9c:d3:5b:ab:74:e3:34:bb:78:55:e7:e5:91:5f: 30:ad:ca:f6:45:27:33:d7:65:7b:1f:c8:46:62:b4: 55:8a:c0:65:50:a6:56:92:c8:d1:bd:80:64:71:05: 0a:a6:97:fd:55:3b:14:38:7f:bc:42:1c:b4:2d:5a: 20:a0:7b:f8:98:75:63:eb:ce:1a:c1:a8:9b:87:7f: 66:36:5d:68:62:5c:e6:87:7a:f2:7c:c5:89:53:94: 3a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C7:1F:19:30:DB:54:48:0F:6D:28:5D:00:57:00:4F:6D:F8:8F:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65c5ad8b-28ea-3e78-ab05-7ea07b66adc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:e2:ed:81:47:2b:ad:f4:01:ab:63:18:6a:a3:db:0c:a1:c5: b3:b0:c2:e4:a5:97:97:2c:5f:ba:1b:b5:2c:41:16:77:bf:cb: ef:b1:5b:90:70:60:1d:b4:15:f3:31:37:1c:c6:7a:e3:38:81: 62:5b:6e:8f:10:95:b3:41:b0:ec:a6:ad:b6:33:da:4e:51:7e: cf:cf:fc:b8:c6:e4:3a:b7:cb:98:a3:6f:f4:09:c9:38:ce:8d: 36:e6:bb:ea:a3:bb:7e:ef:d2:9e:04:be:0c:2e:53:6b:02:81: 20:f8:fc:4e:1b:86:ca:04:ac:06:43:40:6a:fe:8c:00:52:5e: ee:e7:e6:c4:73:b7:c2:02:5c:3d:2c:74:88:73:07:53:92:a3: db:d5:04:7f:03:09:fa:7d:97:3b:97:a3:5d:34:86:b7:7c:51: dd:64:bf:fa:5e:d5:33:6a:0d:80:48:58:ae:c2:c7:df:35:e5: 3d:0c:82:c6:02:c1:44:3d:a1:b4:fb:8c:6f:0e:3b:ee:57:01: b7:19:8e:12:57:2d:1a:52:13:e9:84:10:d1:bc:d2:ce:77:14: 86:12:eb:30:8b:5c:5a:34:1b:8c:0a:b5:77:44:57:db:41:df: a4:b1:35:53:56:a8:f4:ce:79:46:7f:1c:fc:88:c6:f4:f9:44: f3:49:a7:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FgoII3jphwOBXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk N2ZmZDBkYWItNzQ3ZS00OGIzLWJkZWMtZTc5MDUzNDcwZjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCpO+EfM/KOlFZaFp3CrJAGD3g+zCxzuaRi8 IxiV6aCNlP8KzH34PW4NmNK1STrCZN+BsCf2iP4yM095I1/Y0jQ1pKTDfyjgjNii rO716/rXrVzfRkuPVBxeCj32BQdwb9Qx2QX2upRFZxrUYOpVZS6aZ+P8KFNulwTr uzMWMz4HUWRUkF3alftaO3JDpfsY5Uq0t0PPg6lJcfUQHu8BjxQwi2c/nNNbq3Tj NLt4VeflkV8wrcr2RScz12V7H8hGYrRVisBlUKZWksjRvYBkcQUKppf9VTsUOH+8 Qhy0LVogoHv4mHVj684awaibh39mNl1oYlzmh3ryfMWJU5Q6vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzHHxkw21RID20oXQBXAE9t+I+6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjVjNWFkOGItMjhlYS0z ZTc4LWFiMDUtN2VhMDdiNjZhZGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9mJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALi7YFHK630AatjGGqj2wyhxbOwwuSll5csX7obtSxBFne/y++xW5Bw YB20FfMxNxzGeuM4gWJbbo8QlbNBsOymrbYz2k5Rfs/P/LjG5Dq3y5ijb/QJyTjO jTbmu+qju37v0p4EvgwuU2sCgSD4/E4bhsoErAZDQGr+jABSXu7n5sRzt8ICXD0s dIhzB1OSo9vVBH8DCfp9lzuXo100hrd8Ud1kv/pe1TNqDYBIWK7Cx9815T0MgsYC wUQ9obT7jG8OO+5XAbcZjhJXLRpSE+mEENG80s53FIYS6zCLXFo0G4wKtXdEV9tB 36SxNVNWqPTOeUZ/HPyIxvT5RPNJp6A= -----END CERTIFICATE-----Generated at Tue Jul 22 19:34:04 2025 by rpki-client