$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71b7b1a0-88af-32ef-bbc0-ed41715ae42f.roa File: 71b7b1a0-88af-32ef-bbc0-ed41715ae42f.roa (raw, json) Hash identifier: V9UZfDNMFORPHTx1r0ZyY5nZEaglELh705BG9DIkEG4= Subject key identifier: 03:18:8C:E0:DC:5A:92:3D:44:F3:6F:E7:0A:46:99:E1:C3:4E:70:0E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A6290B977515276D58AED0380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71b7b1a0-88af-32ef-bbc0-ed41715ae42f.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.195.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:b9:77:51:52:76:d5:8a:ed:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=64d117a8-451e-4bb6-8398-abb886a939c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ac:31:ef:76:e2:34:33:16:21:1e:ca:ae:69: 40:b3:ab:a9:54:e8:27:66:00:4e:18:79:fa:34:c2: fe:46:c0:56:8f:c6:a3:a1:8b:53:1f:a5:59:92:7a: 33:b7:57:4b:66:00:5b:26:ea:0e:76:b0:3b:1b:9e: d6:97:ac:66:cf:8e:99:17:51:6c:1b:09:6e:70:5d: 5b:ba:54:e6:fc:0c:40:97:5d:7d:5b:44:28:1d:f6: f0:db:09:12:9f:37:2e:a4:ce:26:13:54:69:9f:0a: 0f:27:8c:2f:17:64:76:90:f5:b6:33:a8:53:3d:02: 71:8a:cb:7e:7e:b3:87:69:aa:4f:37:7a:f1:8a:76: c4:ef:7f:8e:de:33:03:f9:63:78:e6:c5:f6:31:22: 21:86:f5:9c:3f:20:38:d3:19:37:be:70:a1:4a:6b: 15:3c:0f:97:35:b8:0e:eb:38:4b:ff:db:67:2b:69: 2f:1b:aa:17:f8:2b:84:00:34:be:47:f1:e1:64:fb: 2f:2d:20:50:88:1f:a3:d7:87:04:99:31:06:26:c7: 05:58:4a:e9:6a:00:3f:67:e6:27:3e:69:50:c1:b7: 37:42:c1:2a:01:50:9d:60:40:c1:7a:c7:7e:87:8f: da:5c:7e:e5:7c:9a:e6:4c:b1:59:c0:74:8d:ac:f5: 88:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:18:8C:E0:DC:5A:92:3D:44:F3:6F:E7:0A:46:99:E1:C3:4E:70:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71b7b1a0-88af-32ef-bbc0-ed41715ae42f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:06:94:d6:29:f2:b0:0b:2d:f1:86:f2:ef:92:95:d9:b9:8e: 44:97:59:75:e0:bd:9e:f4:90:a4:c2:08:12:47:59:fa:d8:3b: f5:4d:9d:7a:43:dc:a5:e3:53:89:0e:e6:9b:a9:dc:a0:55:f7: 23:67:0f:83:fe:a6:72:ec:8c:17:b2:0f:e7:f4:9e:d7:b2:b1: b7:3c:5e:a4:02:d3:66:52:3a:de:a0:d2:32:b2:2d:5b:37:0d: 44:36:39:6d:ef:6e:e3:37:24:d3:eb:b2:4f:c0:16:8e:7f:70: 8c:a5:56:90:24:32:d7:85:5e:7b:00:fe:6a:02:77:c9:ec:77: c8:65:8f:91:78:93:ff:ab:55:df:85:62:7f:04:2a:10:4d:ae: 54:1e:3a:72:5c:af:67:5a:74:c7:b0:4a:2f:10:7f:1b:3e:0c: fe:7f:46:c2:fc:e0:d5:2e:2b:1e:df:15:fa:58:ec:70:dc:86: 12:d0:f4:2d:9c:15:96:c4:a4:53:30:c7:9d:ba:59:25:e0:0d: f1:cf:d3:5a:3e:8f:1b:1e:50:f1:45:06:3d:af:b8:73:de:97: e1:43:05:90:14:5d:36:b3:78:bd:41:c7:5a:da:ac:d9:91:ba: 9c:bd:36:ce:24:a4:32:4f:61:50:16:a1:bb:29:d0:30:34:9b: ce:ac:b7:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikLl3UVJ21YrtA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk NjRkMTE3YTgtNDUxZS00YmI2LTgzOTgtYWJiODg2YTkzOWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqwx73biNDMWIR7KrmlAs6upVOgnZgBOGHn6 NML+RsBWj8ajoYtTH6VZknozt1dLZgBbJuoOdrA7G57Wl6xmz46ZF1FsGwlucF1b ulTm/AxAl119W0QoHfbw2wkSnzcupM4mE1RpnwoPJ4wvF2R2kPW2M6hTPQJxist+ frOHaapPN3rxinbE73+O3jMD+WN45sX2MSIhhvWcPyA40xk3vnChSmsVPA+XNbgO 6zhL/9tnK2kvG6oX+CuEADS+R/HhZPsvLSBQiB+j14cEmTEGJscFWErpagA/Z+Yn PmlQwbc3QsEqAVCdYEDBesd+h4/aXH7lfJrmTLFZwHSNrPWIIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMYjODcWpI9RPNv5wpGmeHDTnAOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzFiN2IxYTAtODhhZi0z MmVmLWJiYzAtZWQ0MTcxNWFlNDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8P9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4GlNYp8rALLfGG8u+Sldm5jkSXWXXgvZ70kKTCCBJHWfrYO/VNnXpD 3KXjU4kO5pup3KBV9yNnD4P+pnLsjBeyD+f0nteysbc8XqQC02ZSOt6g0jKyLVs3 DUQ2OW3vbuM3JNPrsk/AFo5/cIylVpAkMteFXnsA/moCd8nsd8hlj5F4k/+rVd+F Yn8EKhBNrlQeOnJcr2dadMewSi8Qfxs+DP5/RsL84NUuKx7fFfpY7HDchhLQ9C2c FZbEpFMwx526WSXgDfHP01o+jxseUPFFBj2vuHPel+FDBZAUXTazeL1Bx1rarNmR upy9Ns4kpDJPYVAWobsp0DA0m86st0w= -----END CERTIFICATE-----Generated at Tue Jul 22 19:52:06 2025 by rpki-client