$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8277b932-488a-3f08-b0e7-eeb983f49960.roa File: 8277b932-488a-3f08-b0e7-eeb983f49960.roa (raw, json) Hash identifier: 22SM1S+T0PR/h8AuHZDcB+VofJePOTAKKQmp5hhoB3I= Subject key identifier: 37:5C:8C:E9:5E:F2:D9:AB:FB:35:5E:CD:15:25:47:A6:6E:3A:5E:8E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A6290BB07F0FBB0147E715040 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8277b932-488a-3f08-b0e7-eeb983f49960.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.197.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:bb:07:f0:fb:b0:14:7e:71:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=0bf4fda7-de52-469c-9000-bede1d75ca09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:26:b7:a9:3a:12:24:62:f4:9a:88:34:47:db: 38:35:ee:2f:43:c3:ba:a1:de:71:d9:a5:33:c8:37: eb:93:3a:c9:52:47:e0:42:f2:af:2f:87:14:9d:90: 3b:01:8e:88:61:8c:3a:b9:d1:9e:28:61:b0:39:fe: 52:7d:68:b4:a3:19:4a:36:d7:8a:a5:61:dd:e5:d8: 0b:95:b0:21:51:c9:53:aa:33:df:20:e4:bd:29:a5: 95:7e:e8:19:58:a8:32:85:be:2c:86:54:b7:7a:d8: 41:1d:db:56:5b:02:3e:81:f5:ef:04:f3:00:02:4d: 83:7f:3f:a3:f3:67:6b:fa:5b:fd:e5:d4:3f:fc:19: 0b:df:9a:34:b0:9e:0e:bf:36:96:bf:8b:74:06:a4: 89:07:a3:48:d0:d4:53:68:2e:e1:37:c6:df:f3:2e: 94:b7:cc:ee:fa:90:06:0b:2a:09:26:56:05:8e:6f: c9:12:5a:3f:46:da:b0:90:e3:57:bc:9f:8a:42:60: 0e:1d:47:d8:b7:e4:5c:69:84:b7:b0:a9:e8:ea:28: 9e:5a:d1:af:e2:2b:dc:44:9b:21:19:3d:b2:73:bb: 98:b9:fa:f1:78:d2:5c:47:b2:16:60:44:f1:fb:13: 95:87:66:2b:bc:41:c1:58:b2:18:69:a9:78:b9:a5: 8a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:5C:8C:E9:5E:F2:D9:AB:FB:35:5E:CD:15:25:47:A6:6E:3A:5E:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8277b932-488a-3f08-b0e7-eeb983f49960.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:28:ad:15:43:d0:6b:65:67:1d:bd:a5:48:a4:15:b9:bc:49: 34:7d:33:c3:27:55:29:2e:c9:06:70:61:4a:db:8c:c3:f3:7b: bc:d1:6e:14:a2:c5:96:b3:b7:ba:2b:db:2c:3c:b1:f9:10:8e: 67:44:a1:aa:5e:c3:64:af:03:c9:8d:c3:92:9e:c8:84:14:06: 97:67:eb:ce:7e:7e:fc:eb:56:88:a8:d3:57:f8:ac:54:c8:c1: af:47:b8:87:08:e7:d0:ff:67:1a:fe:0f:e6:62:01:42:3a:ec: 51:19:66:d1:7e:ae:2b:6e:73:ec:2e:4c:b0:fb:1c:71:a4:22: 24:f1:c6:e8:5b:6d:e2:0f:be:39:aa:7e:22:50:a5:fb:7a:1e: 84:98:1a:9d:81:bb:3f:93:c1:38:a9:15:ea:71:85:f3:79:a5: d2:f6:d8:bc:0c:31:08:22:18:ac:41:70:c5:a2:d5:b4:54:39: 45:68:e3:3b:8e:39:e2:b8:22:44:6b:d0:3c:5d:07:80:cf:29: 7b:79:9d:d7:09:6f:60:ff:1f:13:76:ba:09:a0:f5:03:2a:46: 29:fd:2f:7b:fa:a8:75:c1:f7:08:5a:94:20:d3:f4:81:43:42: dd:e8:5a:10:b5:10:08:e9:d0:85:26:1c:bc:00:4a:08:2f:7b: 20:48:84:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikLsH8PuwFH5xUEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk MGJmNGZkYTctZGU1Mi00NjljLTkwMDAtYmVkZTFkNzVjYTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApya3qToSJGL0mog0R9s4Ne4vQ8O6od5x2aUz yDfrkzrJUkfgQvKvL4cUnZA7AY6IYYw6udGeKGGwOf5SfWi0oxlKNteKpWHd5dgL lbAhUclTqjPfIOS9KaWVfugZWKgyhb4shlS3ethBHdtWWwI+gfXvBPMAAk2Dfz+j 82dr+lv95dQ//BkL35o0sJ4OvzaWv4t0BqSJB6NI0NRTaC7hN8bf8y6Ut8zu+pAG CyoJJlYFjm/JElo/RtqwkONXvJ+KQmAOHUfYt+RcaYS3sKno6iieWtGv4ivcRJsh GT2yc7uYufrxeNJcR7IWYETx+xOVh2YrvEHBWLIYaal4uaWKaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdcjOle8tmr+zVezRUlR6ZuOl6OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODI3N2I5MzItNDg4YS0z ZjA4LWIwZTctZWViOTgzZjQ5OTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8XKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEorRVD0GtlZx29pUikFbm8STR9M8MnVSkuyQZwYUrbjMPze7zRbhSi xZazt7or2yw8sfkQjmdEoapew2SvA8mNw5KeyIQUBpdn685+fvzrVoio01f4rFTI wa9HuIcI59D/Zxr+D+ZiAUI67FEZZtF+rituc+wuTLD7HHGkIiTxxuhbbeIPvjmq fiJQpft6HoSYGp2Buz+TwTipFepxhfN5pdL22LwMMQgiGKxBcMWi1bRUOUVo4zuO OeK4IkRr0DxdB4DPKXt5ndcJb2D/HxN2ugmg9QMqRin9L3v6qHXB9whalCDT9IFD Qt3oWhC1EAjp0IUmHLwASggveyBIhCQ= -----END CERTIFICATE-----Generated at Wed Jul 23 01:30:15 2025 by rpki-client