$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f1ee524-5fe7-3c15-9df3-8cbe16f4d73b.roa File: 8f1ee524-5fe7-3c15-9df3-8cbe16f4d73b.roa (raw, json) Hash identifier: 2JOycbBqEx16e7/+TEUAIf7/x7VkXzRZkBRhFzw8le4= Subject key identifier: B9:C0:A4:05:31:25:94:69:59:33:6B:84:BE:AF:5D:2F:E9:1A:96:FF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A6290A9D7B58DC3543CB6B480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f1ee524-5fe7-3c15-9df3-8cbe16f4d73b.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16625 IP address blocks: 23.198.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:a9:d7:b5:8d:c3:54:3c:b6:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=adf0e71e-44a2-4290-b8ed-28468399417c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:90:f0:88:32:9d:f2:11:5a:59:65:09:d0:3a: dc:65:aa:d7:a0:ec:7f:26:6d:44:d7:13:6a:4e:75: 4c:bb:2b:9b:41:3f:db:ee:bf:ec:bb:dc:5c:b1:c3: 69:3c:4d:b7:d4:9d:33:b5:16:3e:f1:2a:c2:ed:c8: 54:ea:95:62:f3:13:28:1c:26:c7:b8:e6:c1:96:5f: 40:05:25:e5:57:fe:72:a6:ef:eb:9d:0d:03:32:ee: fe:81:92:f5:73:64:d6:fb:37:22:92:3a:f5:2c:45: 5a:43:2d:5d:22:72:49:e4:22:ce:66:c4:8c:8d:57: 3c:21:b7:5f:6f:1a:8b:3a:da:b3:63:4c:f6:51:84: ba:db:18:8d:62:b1:1b:a2:13:3d:cb:5e:93:e7:25: 48:88:0b:58:b0:7f:73:c5:6f:f9:69:d5:44:06:2a: 72:6c:48:80:ba:14:f0:fa:8a:40:42:c1:65:fc:30: 90:3a:ec:c6:f3:51:85:c7:d7:86:41:a2:5b:90:94: d2:f9:81:ed:6a:49:bc:74:c3:11:b8:43:01:94:df: 68:66:ab:51:ce:5d:95:43:86:91:3b:9a:d5:8b:5c: 3a:34:3e:d4:07:fb:95:b6:14:e2:f8:08:c5:99:38: fa:4a:6c:f4:86:19:11:c0:af:6f:58:32:bc:eb:13: c3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C0:A4:05:31:25:94:69:59:33:6B:84:BE:AF:5D:2F:E9:1A:96:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f1ee524-5fe7-3c15-9df3-8cbe16f4d73b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.198.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c9:80:50:73:19:82:f2:b4:8e:14:db:94:c6:36:1f:28:fb: 7a:28:90:14:4d:f0:bd:da:44:dd:a6:39:fa:05:95:5b:3c:a2: 8d:b6:ea:b4:51:f0:a6:69:67:06:00:5a:75:a0:71:8f:fb:5d: 7f:d2:af:45:d4:16:81:50:ab:a9:ef:17:a2:1b:b8:fb:80:53: 79:cf:23:69:f7:ff:6b:c8:51:8c:d7:22:da:51:77:51:cc:01: 87:f7:d5:30:cd:44:88:3d:7e:6e:6e:26:f1:3e:23:e4:32:58: 34:db:10:6d:97:a8:b2:09:80:6d:02:d8:01:5e:fa:05:af:8a: 33:3f:86:89:48:b3:55:9b:f8:ed:39:5b:eb:e0:53:19:fd:a2: 1f:f4:cb:57:16:8a:f2:22:41:92:7f:4a:ce:fc:9a:9f:87:60: b6:9b:17:e6:57:bd:9f:2d:13:6e:8e:db:ba:21:8c:9d:16:9c: dd:a9:50:cc:e6:d6:08:9a:c3:68:cd:ae:19:37:25:3e:20:c8: ac:9b:29:2d:22:f5:1c:88:2c:b7:7f:20:66:16:86:7f:2b:c2: c2:d7:bb:05:c4:61:32:42:b0:34:21:68:38:91:90:16:03:47: b1:3c:d4:54:6a:80:f9:60:10:11:6e:b7:80:8d:1e:ab:c7:4f: 57:39:ae:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikKnXtY3DVDy2tIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk YWRmMGU3MWUtNDRhMi00MjkwLWI4ZWQtMjg0NjgzOTk0MTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJDwiDKd8hFaWWUJ0DrcZarXoOx/Jm1E1xNq TnVMuyubQT/b7r/su9xcscNpPE231J0ztRY+8SrC7chU6pVi8xMoHCbHuObBll9A BSXlV/5ypu/rnQ0DMu7+gZL1c2TW+zcikjr1LEVaQy1dInJJ5CLOZsSMjVc8Ibdf bxqLOtqzY0z2UYS62xiNYrEbohM9y16T5yVIiAtYsH9zxW/5adVEBipybEiAuhTw +opAQsFl/DCQOuzG81GFx9eGQaJbkJTS+YHtakm8dMMRuEMBlN9oZqtRzl2VQ4aR O5rVi1w6ND7UB/uVthTi+AjFmTj6Smz0hhkRwK9vWDK86xPDAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnApAUxJZRpWTNrhL6vXS/pGpb/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGYxZWU1MjQtNWZlNy0z YzE1LTlkZjMtOGNiZTE2ZjRkNzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8aQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHJgFBzGYLytI4U25TGNh8o+3ookBRN8L3aRN2mOfoFlVs8oo226rRR 8KZpZwYAWnWgcY/7XX/Sr0XUFoFQq6nvF6IbuPuAU3nPI2n3/2vIUYzXItpRd1HM AYf31TDNRIg9fm5uJvE+I+QyWDTbEG2XqLIJgG0C2AFe+gWvijM/holIs1Wb+O05 W+vgUxn9oh/0y1cWivIiQZJ/Ss78mp+HYLabF+ZXvZ8tE26O27ohjJ0WnN2pUMzm 1giaw2jNrhk3JT4gyKybKS0i9RyILLd/IGYWhn8rwsLXuwXEYTJCsDQhaDiRkBYD R7E81FRqgPlgEBFut4CNHqvHT1c5roQ= -----END CERTIFICATE-----Generated at Wed Jul 23 01:30:24 2025 by rpki-client