$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6d7dcd54-96b6-3a05-8e4c-ab7f90c0d6a1.roa File: 6d7dcd54-96b6-3a05-8e4c-ab7f90c0d6a1.roa (raw, json) Hash identifier: 2nueTvbAK2DjarTGcI1/CrQcJiTUGxnV1HRoivWiUfc= Subject key identifier: 9D:E1:7B:8A:B1:1E:D3:3B:6B:5E:37:42:01:A2:93:B9:C3:A0:9F:29 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7A4B58760159B60DC7E2F400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6d7dcd54-96b6-3a05-8e4c-ab7f90c0d6a1.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.209.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:58:76:01:59:b6:0d:c7:e2:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=37487004-3961-4141-ab46-ed33efd20cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:07:21:78:ce:b1:57:5c:fe:a0:b2:99:26:05: dd:21:f7:b6:9a:a3:28:06:f3:6f:ff:5e:cc:c5:91: 34:f9:8a:5a:5f:10:61:42:fa:15:95:6a:e4:fd:06: 02:6d:c2:23:3b:99:70:39:25:37:f2:27:29:be:cb: cc:92:5f:55:b6:97:e2:28:b1:d2:93:94:91:b7:1c: d1:fb:f0:94:16:ed:36:17:8e:06:b5:c6:57:a1:e9: d6:ff:13:d5:c3:46:d1:84:cc:10:e8:7b:37:e4:88: b8:0f:13:61:e6:ba:49:19:f3:2c:85:dd:23:f9:f9: 95:eb:7a:35:85:90:56:84:41:05:c4:af:dc:13:c0: 8d:26:52:ad:85:36:61:42:32:2a:8a:b2:45:48:d0: d3:11:f9:7f:11:a2:0b:06:ce:6b:29:00:24:74:6e: 6f:67:31:c6:69:85:14:4f:5b:ec:26:b4:c2:7e:b9: 43:2a:52:de:ca:d5:45:4d:bb:02:4b:f3:8a:aa:7b: fc:ee:3f:6b:08:55:49:9c:86:a4:df:d2:bc:3c:8b: 9d:33:99:87:41:01:68:24:e1:30:20:0f:ca:1f:5d: 18:e7:15:87:96:e6:d9:db:90:af:7f:a5:0b:e0:fa: 72:40:37:05:5e:7f:64:1a:85:d2:81:d4:b4:33:5a: c4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E1:7B:8A:B1:1E:D3:3B:6B:5E:37:42:01:A2:93:B9:C3:A0:9F:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6d7dcd54-96b6-3a05-8e4c-ab7f90c0d6a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:c6:06:01:4a:b4:9a:7d:31:07:3c:ac:b9:e6:6f:ee:39:ed: 8a:cc:fc:02:12:d7:e1:b7:c8:1f:7a:a8:3d:05:8b:21:46:83: 90:92:33:cc:48:89:f0:ef:a3:a1:01:9c:34:53:df:47:44:b2: ae:52:e0:7a:be:5d:56:29:f8:4c:d2:7c:06:66:a1:73:6f:26: 78:ca:78:b9:23:f1:55:16:de:8b:99:b5:2d:eb:89:41:48:86: fd:c0:51:de:13:04:66:67:88:38:10:2e:cf:65:cd:ec:ad:82: bd:d9:bf:16:d1:be:24:22:72:64:57:b0:b5:0d:58:af:5e:ad: 96:e5:75:1b:de:be:33:ad:52:65:83:57:0d:8c:51:03:af:e9: cd:44:25:ee:91:c0:f7:4c:37:63:a4:db:3b:fd:29:fa:d3:6f: d4:fc:a9:43:99:08:8e:5a:4e:01:b3:69:0d:98:5a:e4:eb:ff: c6:5b:ac:01:64:24:c8:f4:4b:f5:53:7a:48:d6:ac:3f:5c:d7: 13:be:de:51:28:21:97:b4:7f:8c:96:b3:27:db:42:17:ac:aa: 93:11:8e:ea:ba:67:6a:10:f9:9b:85:10:63:6d:f9:4c:d6:0f: 76:f7:7d:94:06:a9:92:b1:ff:e1:36:22:04:4f:ea:39:9c:af: be:ee:75:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S1h2AVm2Dcfi9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk Mzc0ODcwMDQtMzk2MS00MTQxLWFiNDYtZWQzM2VmZDIwY2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgcheM6xV1z+oLKZJgXdIfe2mqMoBvNv/17M xZE0+YpaXxBhQvoVlWrk/QYCbcIjO5lwOSU38icpvsvMkl9VtpfiKLHSk5SRtxzR +/CUFu02F44GtcZXoenW/xPVw0bRhMwQ6Hs35Ii4DxNh5rpJGfMshd0j+fmV63o1 hZBWhEEFxK/cE8CNJlKthTZhQjIqirJFSNDTEfl/EaILBs5rKQAkdG5vZzHGaYUU T1vsJrTCfrlDKlLeytVFTbsCS/OKqnv87j9rCFVJnIak39K8PIudM5mHQQFoJOEw IA/KH10Y5xWHlubZ25Cvf6UL4PpyQDcFXn9kGoXSgdS0M1rEwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3he4qxHtM7a143QgGik7nDoJ8pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmQ3ZGNkNTQtOTZiNi0z YTA1LThlNGMtYWI3ZjkwYzBkNmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9FkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7GBgFKtJp9MQc8rLnmb+457YrM/AIS1+G3yB96qD0FiyFGg5CSM8xI ifDvo6EBnDRT30dEsq5S4Hq+XVYp+EzSfAZmoXNvJnjKeLkj8VUW3ouZtS3riUFI hv3AUd4TBGZniDgQLs9lzeytgr3ZvxbRviQicmRXsLUNWK9erZbldRvevjOtUmWD Vw2MUQOv6c1EJe6RwPdMN2Ok2zv9KfrTb9T8qUOZCI5aTgGzaQ2YWuTr/8ZbrAFk JMj0S/VTekjWrD9c1xO+3lEoIZe0f4yWsyfbQhesqpMRjuq6Z2oQ+ZuFEGNt+UzW D3b3fZQGqZKx/+E2IgRP6jmcr77udb8= -----END CERTIFICATE-----Generated at Tue Jul 22 19:31:52 2025 by rpki-client