$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6e8eef54-7701-33da-9d18-f9c3f58f2348.roa File: 6e8eef54-7701-33da-9d18-f9c3f58f2348.roa (raw, json) Hash identifier: tFvFU5UYQK72lzedfDAaS6ksMJ1mhwlDMSncA+XWKLE= Subject key identifier: 01:DD:11:CE:86:A4:AB:A6:B3:BD:B3:94:01:6B:22:AC:89:B7:36:D0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7A4B53D58217218CA570A280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6e8eef54-7701-33da-9d18-f9c3f58f2348.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.212.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:53:d5:82:17:21:8c:a5:70:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=233c9c25-e394-4a00-89d3-7ea393d3241e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6a:b6:50:e4:26:55:2e:c6:0c:72:fc:03:69: 6f:16:55:d7:dd:49:4d:16:18:82:dc:1e:a4:71:07: 17:47:a0:50:5a:3d:c0:ab:26:c4:43:38:0a:67:93: 82:1e:be:d3:06:84:55:e0:5d:35:a5:bb:f1:03:73: 14:70:c0:01:d4:80:91:93:22:62:d3:09:a2:2f:7c: 92:a4:de:54:ce:34:05:e1:00:fe:d2:ae:e4:36:b7: cc:51:b2:51:76:85:8e:a6:3c:f7:71:e6:1b:d5:2a: 1d:b5:60:d4:2a:be:8a:c5:ed:52:72:bb:b3:b3:ab: 36:43:91:00:f6:e5:2c:cd:82:2c:de:98:93:df:d5: d4:9e:0a:56:96:7d:80:58:13:92:7d:a2:28:86:8c: 3c:e2:bd:eb:d7:47:e7:7f:7a:4d:9e:25:f8:34:aa: 27:7f:02:6c:3e:85:56:14:40:85:5d:58:8e:fe:84: 45:97:bc:42:5e:c3:c0:26:5c:fa:38:70:26:60:55: 56:c6:3b:14:9d:6e:aa:a7:f5:2c:9a:13:04:4a:5e: 2a:02:ec:77:cb:4b:d1:67:59:b8:68:8e:e5:f9:89: f3:43:48:10:3e:2b:4e:0c:e4:14:27:2b:cb:77:2a: b3:67:61:aa:07:fc:9a:f3:21:f2:65:60:8b:12:2d: 40:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:DD:11:CE:86:A4:AB:A6:B3:BD:B3:94:01:6B:22:AC:89:B7:36:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6e8eef54-7701-33da-9d18-f9c3f58f2348.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:86:7f:ed:4a:57:21:db:7a:fc:61:26:a6:ac:e9:ae:41:e9: 5d:c7:5b:6b:85:e4:0d:ca:fa:01:b2:3a:07:98:ae:6c:5c:4b: 96:79:3f:56:a4:56:fd:c4:69:b2:22:b4:33:7c:1d:b3:d8:72: b8:f2:99:c7:ac:70:7b:bd:96:d7:a3:67:93:18:a3:5d:ee:21: c1:2f:6b:f0:4c:bb:ca:2c:d9:7c:44:1b:f5:a7:9a:69:e7:9a: a1:16:f3:17:d1:20:fd:0f:7e:41:31:65:b8:13:1b:df:ea:84: 6d:49:c8:8f:4e:d2:17:d9:0a:70:da:51:f3:cb:80:56:3a:6a: d7:f4:80:55:4e:0d:3d:e0:f2:0b:db:8a:dd:ad:76:3e:1e:dd: 2b:45:0b:b7:92:81:63:9b:4c:f8:83:e3:2d:88:a7:58:8c:83: 35:08:26:95:4f:94:9f:9a:66:43:da:37:72:62:f4:d1:0f:21: 29:a7:58:7b:b1:26:81:8d:8d:88:7f:f6:ad:65:81:b2:43:9d: 18:15:9a:46:6f:13:bb:0b:b3:7d:56:84:d3:1e:45:ca:71:a2: 31:03:59:18:3e:0b:a3:71:f3:c6:8d:b3:80:68:cd:15:48:08: 74:0a:9b:35:1d:6c:6e:80:96:4c:01:48:21:8d:10:61:ab:28: c5:ef:a4:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S1PVghchjKVwooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk MjMzYzljMjUtZTM5NC00YTAwLTg5ZDMtN2VhMzkzZDMyNDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2q2UOQmVS7GDHL8A2lvFlXX3UlNFhiC3B6k cQcXR6BQWj3AqybEQzgKZ5OCHr7TBoRV4F01pbvxA3MUcMAB1ICRkyJi0wmiL3yS pN5UzjQF4QD+0q7kNrfMUbJRdoWOpjz3ceYb1SodtWDUKr6Kxe1Scruzs6s2Q5EA 9uUszYIs3piT39XUngpWln2AWBOSfaIohow84r3r10fnf3pNniX4NKonfwJsPoVW FECFXViO/oRFl7xCXsPAJlz6OHAmYFVWxjsUnW6qp/UsmhMESl4qAux3y0vRZ1m4 aI7l+YnzQ0gQPitODOQUJyvLdyqzZ2GqB/ya8yHyZWCLEi1AnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHdEc6GpKums72zlAFrIqyJtzbQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmU4ZWVmNTQtNzcwMS0z M2RhLTlkMTgtZjljM2Y1OGYyMzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9SkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6Gf+1KVyHbevxhJqas6a5B6V3HW2uF5A3K+gGyOgeYrmxcS5Z5P1ak Vv3EabIitDN8HbPYcrjymcescHu9ltejZ5MYo13uIcEva/BMu8os2XxEG/Wnmmnn mqEW8xfRIP0PfkExZbgTG9/qhG1JyI9O0hfZCnDaUfPLgFY6atf0gFVODT3g8gvb it2tdj4e3StFC7eSgWObTPiD4y2Ip1iMgzUIJpVPlJ+aZkPaN3Ji9NEPISmnWHux JoGNjYh/9q1lgbJDnRgVmkZvE7sLs31WhNMeRcpxojEDWRg+C6Nx88aNs4BozRVI CHQKmzUdbG6AlkwBSCGNEGGrKMXvpOM= -----END CERTIFICATE-----Generated at Wed Jul 23 01:49:00 2025 by rpki-client