$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84ede65c-4335-3c12-87ae-b64d3bde44f6.roa File: 84ede65c-4335-3c12-87ae-b64d3bde44f6.roa (raw, json) Hash identifier: 9GP0RJBkfPg5s2M7t7f2R/1fFlGc8Q8841i+vaYHVwo= Subject key identifier: F4:9A:8D:C0:37:69:EE:C4:21:A9:91:E5:C0:2F:ED:2C:66:8E:2A:9D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A94D0DEEA31274410E051D7C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84ede65c-4335-3c12-87ae-b64d3bde44f6.roa Signing time: Sun 20 Jul 2025 13:01:04 +0000 ROA not before: Sun 20 Jul 2025 13:01:04 +0000 ROA not after: Sat 18 Oct 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.219.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:de:ea:31:27:44:10:e0:51:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 20 13:01:04 2025 GMT Not After : Oct 18 13:01:04 2025 GMT Subject: CN=35222508-a4ed-49da-a995-74d390c8d891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1a:55:72:22:cc:1f:8e:68:ab:37:d2:08:0b: 82:04:67:6b:fe:86:75:29:74:1a:9e:e1:09:db:82: 84:af:f9:68:16:25:2f:f1:ae:c0:9b:0d:99:8c:c4: 65:ea:a5:69:df:d5:b4:73:76:93:c4:b5:81:8a:2c: 6b:b2:f8:c0:c9:2b:25:a2:1b:26:d7:33:b3:f3:69: 39:05:6f:fe:d0:1c:c7:10:2e:38:2a:c2:b3:0a:b1: 16:c6:c4:07:a4:bc:89:e4:1f:c8:63:4b:83:5f:72: 2a:67:e2:fd:32:2e:11:d2:b9:ab:39:af:a0:b6:2a: d4:72:42:8a:e4:16:59:7f:f9:d6:3d:26:b7:00:b5: cf:1d:b3:f0:80:1e:a8:10:9a:e5:42:62:cb:a1:da: de:c2:93:0a:7d:12:77:93:86:3e:69:1c:ba:5c:ec: 64:5a:6d:d3:63:5c:8d:53:9f:23:be:0e:ac:cb:99: 00:eb:b0:b4:1f:5a:e2:e8:5a:92:65:9b:86:55:5a: fa:d4:35:d5:9c:73:59:28:77:64:57:bc:ef:99:5d: 8d:8e:7e:5e:26:b5:be:cf:fe:6b:3a:1a:52:bd:4d: fc:90:c2:a4:b8:21:87:78:90:af:d9:34:10:42:7f: 44:3b:fa:39:bf:50:37:06:d8:0f:df:1e:0c:61:d9: 81:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9A:8D:C0:37:69:EE:C4:21:A9:91:E5:C0:2F:ED:2C:66:8E:2A:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84ede65c-4335-3c12-87ae-b64d3bde44f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:1b:53:4c:fa:c8:a6:79:6e:3e:87:ca:64:37:fb:1b:11:2a: 45:71:38:d9:35:c8:e9:71:fd:93:03:5b:48:65:eb:eb:33:f1: 0d:d5:7a:68:95:50:77:0b:11:d8:3a:d4:58:15:7a:90:59:3f: ad:73:14:a1:84:06:28:df:64:66:72:8f:39:ce:e5:0f:4d:e5: 2b:c1:7e:51:26:4c:c2:f5:8e:54:3a:3a:4a:6a:3a:de:ac:7a: 22:6d:17:3c:47:53:4c:57:cb:65:14:11:22:d5:70:d3:be:95: d2:d1:bc:a4:f9:b2:33:dd:b3:74:94:4b:51:e7:50:76:01:96: 4b:8e:72:67:df:35:97:f1:f8:37:8b:d0:ae:dd:01:f6:d2:02: c3:44:3a:0c:a1:f2:fa:e9:1e:c1:34:94:ca:79:e2:d3:20:72: 27:88:89:6b:4f:90:52:ec:8b:a4:ec:c8:f3:4d:ea:84:0d:62: c4:7c:0a:bc:4d:37:27:0d:4f:7a:f3:9c:dc:a6:4d:44:0a:be: 26:a9:b3:ce:0e:f1:32:16:3e:5e:c6:4f:54:13:c9:47:75:6f: 3c:8e:0a:8e:b8:3f:a4:09:75:04:ac:2f:db:9f:5c:96:64:4c: 3e:04:f0:b1:c2:bc:3a:37:47:c8:f0:ea:fa:d3:ce:74:0b:10: a3:a8:d8:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0N7qMSdEEOBR18AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk MzUyMjI1MDgtYTRlZC00OWRhLWE5OTUtNzRkMzkwYzhkODkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhpVciLMH45oqzfSCAuCBGdr/oZ1KXQanuEJ 24KEr/loFiUv8a7Amw2ZjMRl6qVp39W0c3aTxLWBiixrsvjAySslohsm1zOz82k5 BW/+0BzHEC44KsKzCrEWxsQHpLyJ5B/IY0uDX3IqZ+L9Mi4R0rmrOa+gtirUckKK 5BZZf/nWPSa3ALXPHbPwgB6oEJrlQmLLodrewpMKfRJ3k4Y+aRy6XOxkWm3TY1yN U58jvg6sy5kA67C0H1ri6FqSZZuGVVr61DXVnHNZKHdkV7zvmV2Njn5eJrW+z/5r OhpSvU38kMKkuCGHeJCv2TQQQn9EO/o5v1A3BtgP3x4MYdmBbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSajcA3ae7EIamR5cAv7SxmjiqdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODRlZGU2NWMtNDMzNS0z YzEyLTg3YWUtYjY0ZDNiZGU0NGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9snMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMbU0z6yKZ5bj6HymQ3+xsRKkVxONk1yOlx/ZMDW0hl6+sz8Q3VemiV UHcLEdg61FgVepBZP61zFKGEBijfZGZyjznO5Q9N5SvBflEmTML1jlQ6OkpqOt6s eiJtFzxHU0xXy2UUESLVcNO+ldLRvKT5sjPds3SUS1HnUHYBlkuOcmffNZfx+DeL 0K7dAfbSAsNEOgyh8vrpHsE0lMp54tMgcieIiWtPkFLsi6TsyPNN6oQNYsR8CrxN NycNT3rznNymTUQKviaps84O8TIWPl7GT1QTyUd1bzyOCo64P6QJdQSsL9ufXJZk TD4E8LHCvDo3R8jw6vrTznQLEKOo2Ec= -----END CERTIFICATE-----Generated at Thu Jul 24 11:49:27 2025 by rpki-client