$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c85bad1-cb05-31c0-9e44-4272a7b78bb7.roa File: 8c85bad1-cb05-31c0-9e44-4272a7b78bb7.roa (raw, json) Hash identifier: 7Qek3ZHCFxVMrmzI2uerwslp8fwWD/Y29e95ijNaoQ0= Subject key identifier: 68:7B:9A:D9:9A:CE:5E:CC:CA:0E:11:FC:C6:44:84:1A:07:FF:96:14 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8840A725BA5D8343DC1539C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c85bad1-cb05-31c0-9e44-4272a7b78bb7.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 16625 IP address blocks: 23.218.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:a7:25:ba:5d:83:43:dc:15:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=f9a48280-5585-42e2-89a6-0ffdbe7ec4cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e6:ac:6a:b5:d6:cb:f0:32:49:b7:91:ce:35: 4d:af:17:eb:2b:1c:c7:6d:fc:70:37:56:b7:ab:f2: 57:eb:c8:a1:d0:4f:33:44:49:7c:27:85:04:1a:f9: 09:18:16:0c:b5:5a:b5:79:6c:a6:d6:e8:39:30:02: 01:a3:6b:f3:b9:c3:26:51:a7:91:fa:5e:f6:7a:0e: d4:d3:72:4d:b1:f1:cb:e1:76:19:cf:18:48:0b:ad: e7:8a:b2:0e:46:9c:15:19:5c:85:71:45:16:6a:45: 47:cc:a2:85:51:55:f5:f0:76:17:59:4c:31:8c:ca: f1:fb:d4:93:77:3e:7f:24:4e:66:5d:aa:4e:a1:ff: 53:17:ad:fc:26:50:79:da:97:75:2c:2c:16:f9:ba: 49:a5:60:4c:04:d3:18:95:1b:07:bc:e9:73:49:ad: 0f:a8:d4:34:8f:ab:14:15:ff:e8:1a:27:8f:03:f5: 1e:c3:ce:85:9a:25:85:82:d6:38:a0:98:6f:6c:fc: 6d:11:a0:3c:66:d7:6a:cc:5f:61:3a:1f:8d:80:e9: 50:4d:4b:d8:db:fa:5b:e7:0a:25:0d:78:ab:e1:30: 85:7b:a1:f4:32:5a:db:0a:87:04:a7:50:21:bb:93: 74:da:5b:19:6f:d6:e5:ab:63:80:90:f1:85:69:8f: a5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7B:9A:D9:9A:CE:5E:CC:CA:0E:11:FC:C6:44:84:1A:07:FF:96:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c85bad1-cb05-31c0-9e44-4272a7b78bb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:9c:0e:fd:52:37:f6:bb:e8:47:f7:d4:98:4c:01:d8:0c:c0: 84:bf:07:c7:fd:ca:b0:c5:3e:ad:ff:bf:3b:a3:be:ed:99:d1: fc:8f:6e:29:ac:43:ad:3f:6d:7d:df:c9:26:0f:34:fe:16:7d: 01:0e:54:09:13:ae:11:f2:4d:3e:0d:03:95:b9:8d:99:91:38: d2:cf:2b:a6:e1:b9:a2:a2:ca:4b:91:14:f6:59:1a:8f:42:b9: 47:ef:3c:38:90:0a:04:7d:e0:24:6d:59:d7:8f:84:b4:ce:3b: 35:61:2f:01:1e:5c:b9:f5:d1:49:40:86:4c:55:b3:ce:80:cb: 43:21:a3:5e:0f:82:5f:45:df:df:94:ef:71:ce:fd:1e:7c:d4: ce:1b:03:61:ab:bb:e8:47:1b:e0:ef:8f:aa:ae:86:e5:1f:c6: 55:68:c9:ba:38:fc:eb:51:33:ee:5d:2f:22:f7:ae:75:fd:64: af:e7:99:1f:77:11:04:d2:19:b9:53:7d:ed:63:1e:aa:3e:d6: 1f:ee:dd:43:7b:3e:d6:0d:b9:23:38:98:aa:e8:71:2d:34:a7: 06:e6:9a:1e:0d:8b:65:cf:06:44:02:bd:ac:4c:32:9a:8e:54: 8c:d2:e4:09:aa:ca:f9:75:77:76:23:7c:3b:06:7f:ec:95:f4: 45:a2:10:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQKclul2DQ9wVOcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk ZjlhNDgyODAtNTU4NS00MmUyLTg5YTYtMGZmZGJlN2VjNGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOasarXWy/AySbeRzjVNrxfrKxzHbfxwN1a3 q/JX68ih0E8zREl8J4UEGvkJGBYMtVq1eWym1ug5MAIBo2vzucMmUaeR+l72eg7U 03JNsfHL4XYZzxhIC63nirIORpwVGVyFcUUWakVHzKKFUVX18HYXWUwxjMrx+9ST dz5/JE5mXapOof9TF638JlB52pd1LCwW+bpJpWBMBNMYlRsHvOlzSa0PqNQ0j6sU Ff/oGiePA/Uew86FmiWFgtY4oJhvbPxtEaA8ZtdqzF9hOh+NgOlQTUvY2/pb5wol DXir4TCFe6H0MlrbCocEp1Ahu5N02lsZb9blq2OAkPGFaY+lDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGh7mtmazl7Myg4R/MZEhBoH/5YUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGM4NWJhZDEtY2IwNS0z MWMwLTllNDQtNDI3MmE3Yjc4YmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9qAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHacDv1SN/a76Ef31JhMAdgMwIS/B8f9yrDFPq3/vzujvu2Z0fyPbims Q60/bX3fySYPNP4WfQEOVAkTrhHyTT4NA5W5jZmRONLPK6bhuaKiykuRFPZZGo9C uUfvPDiQCgR94CRtWdePhLTOOzVhLwEeXLn10UlAhkxVs86Ay0Mho14Pgl9F39+U 73HO/R581M4bA2Gru+hHG+Dvj6quhuUfxlVoybo4/OtRM+5dLyL3rnX9ZK/nmR93 EQTSGblTfe1jHqo+1h/u3UN7PtYNuSM4mKrocS00pwbmmh4Ni2XPBkQCvaxMMpqO VIzS5Amqyvl1d3YjfDsGf+yV9EWiEGw= -----END CERTIFICATE-----Generated at Wed Jul 23 01:35:00 2025 by rpki-client