$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e568b94-1e61-3986-97a2-699b44624f1f.roa File: 7e568b94-1e61-3986-97a2-699b44624f1f.roa (raw, json) Hash identifier: 3uG08itPDJyL4tEG0TjDiWUEu7B2VeX4AkHhf3R+UDA= Subject key identifier: 07:B7:88:E3:29:9E:57:8B:A1:9A:A6:24:CC:95:38:92:A6:61:E3:CF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7A4B570336D48AA483498880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e568b94-1e61-3986-97a2-699b44624f1f.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.213.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:57:03:36:d4:8a:a4:83:49:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=b4f5f295-df89-4572-8232-3107859c3013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bb:eb:44:eb:fe:c5:ec:0d:ff:ef:06:75:21: 87:02:f8:1d:3f:70:a4:a5:6b:ce:ed:3c:92:5c:99: 2e:83:e7:3d:16:63:52:bb:d0:34:61:b4:36:bd:15: ab:53:84:57:d6:dc:32:7e:70:ee:20:55:de:c0:07: 85:ee:84:1c:43:f6:6e:63:1a:eb:9c:ee:6d:ac:3c: ec:d4:da:e9:85:c4:7b:18:2f:68:69:69:e6:eb:88: d8:09:f4:c6:3e:8a:00:87:03:77:c2:af:0b:fb:c1: e8:fe:5a:a4:7c:8c:20:5c:81:c9:f6:3d:1c:a6:9e: ba:07:ae:7e:d7:02:e0:a2:96:f1:01:1a:92:dd:c2: 71:24:9c:70:4d:c2:c7:99:85:70:d4:56:06:84:79: af:6f:cf:82:9c:d3:88:20:09:bc:22:04:f6:dd:07: 12:dd:dc:b6:b9:15:73:8b:52:62:13:04:c1:31:83: fc:3f:05:d2:f3:87:72:db:17:60:63:4c:80:46:0c: 21:11:4d:64:c8:3d:d4:4e:0b:10:5b:47:c5:3c:cf: 0f:0d:77:5d:34:60:07:f8:c8:7f:6b:93:c4:d4:a2: cf:26:f5:cb:29:43:8b:28:d8:1e:ed:93:12:7b:ef: f2:85:81:4f:12:13:77:4d:5d:e9:d8:58:b0:d4:29: f3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B7:88:E3:29:9E:57:8B:A1:9A:A6:24:CC:95:38:92:A6:61:E3:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e568b94-1e61-3986-97a2-699b44624f1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:de:70:b6:66:12:72:26:f5:3d:79:f4:86:86:16:5c:4e:df: 2b:c5:9f:90:20:ee:22:c6:eb:34:71:4a:67:d6:50:74:9a:29: 09:14:55:23:64:df:29:d1:ee:26:f0:76:5a:4c:8c:97:64:9e: f8:90:2f:b2:19:04:f4:46:12:a3:a5:ff:78:9b:52:71:07:d3: 02:75:16:05:41:4c:04:e1:1f:60:77:f8:6e:b6:b6:22:14:a1: eb:90:72:8d:84:f1:be:ff:92:cc:20:d9:43:95:1a:c0:34:7e: 12:da:14:04:52:4b:a8:f3:f7:f8:3f:81:69:4f:43:ef:5d:af: e0:04:63:42:eb:27:8c:3e:7d:2f:b2:c5:de:10:92:1d:dd:92: 66:70:8d:2e:bb:8e:59:f1:c2:71:d6:42:35:76:5e:16:bc:2e: af:1f:b3:98:84:54:dd:8e:92:48:a6:4c:f7:49:ca:b1:a5:e3: 5b:5b:66:5d:b7:c6:ed:c6:c8:5f:b6:ac:3c:e5:01:4a:6c:41: 07:7d:aa:71:28:69:19:01:0b:94:a4:8f:b6:f3:0b:fc:2f:16: da:51:96:f0:d8:2a:d6:b8:24:65:00:a2:75:7b:5e:b2:47:35: f4:b9:df:b0:15:68:37:51:90:ba:55:4a:43:e8:29:22:c7:4c: bb:04:0c:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S1cDNtSKpINJiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk YjRmNWYyOTUtZGY4OS00NTcyLTgyMzItMzEwNzg1OWMzMDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7vrROv+xewN/+8GdSGHAvgdP3CkpWvO7TyS XJkug+c9FmNSu9A0YbQ2vRWrU4RX1twyfnDuIFXewAeF7oQcQ/ZuYxrrnO5trDzs 1NrphcR7GC9oaWnm64jYCfTGPooAhwN3wq8L+8Ho/lqkfIwgXIHJ9j0cpp66B65+ 1wLgopbxARqS3cJxJJxwTcLHmYVw1FYGhHmvb8+CnNOIIAm8IgT23QcS3dy2uRVz i1JiEwTBMYP8PwXS84dy2xdgY0yARgwhEU1kyD3UTgsQW0fFPM8PDXddNGAH+Mh/ a5PE1KLPJvXLKUOLKNge7ZMSe+/yhYFPEhN3TV3p2Fiw1CnzpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAe3iOMpnleLoZqmJMyVOJKmYePPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2U1NjhiOTQtMWU2MS0z OTg2LTk3YTItNjk5YjQ0NjI0ZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9XmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbecLZmEnIm9T159IaGFlxO3yvFn5Ag7iLG6zRxSmfWUHSaKQkUVSNk 3ynR7ibwdlpMjJdknviQL7IZBPRGEqOl/3ibUnEH0wJ1FgVBTAThH2B3+G62tiIU oeuQco2E8b7/kswg2UOVGsA0fhLaFARSS6jz9/g/gWlPQ+9dr+AEY0LrJ4w+fS+y xd4Qkh3dkmZwjS67jlnxwnHWQjV2Xha8Lq8fs5iEVN2OkkimTPdJyrGl41tbZl23 xu3GyF+2rDzlAUpsQQd9qnEoaRkBC5Skj7bzC/wvFtpRlvDYKta4JGUAonV7XrJH NfS537AVaDdRkLpVSkPoKSLHTLsEDKg= -----END CERTIFICATE-----Generated at Wed Jul 23 01:45:15 2025 by rpki-client