$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90857b20-031d-3aeb-a13c-938067df36b1.roa File: 90857b20-031d-3aeb-a13c-938067df36b1.roa (raw, json) Hash identifier: 3ikw7LmMFYYqscwAqfsL8BMign1LayNwaDsaTCvJg9Y= Subject key identifier: A2:1C:B3:2C:63:2F:08:5E:71:33:2C:F9:39:50:46:4D:91:B2:BF:C0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A6290BB68FF8475995B5C3400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90857b20-031d-3aeb-a13c-938067df36b1.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.198.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:bb:68:ff:84:75:99:5b:5c:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=ddf8bfaf-a849-4b11-b0de-18f45f3717bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9d:77:1d:0a:b8:1b:26:4d:f8:90:d3:21:ae: 5a:21:b1:99:04:ff:ea:6c:dd:69:e7:e3:14:7e:43: ad:10:ac:69:89:d6:c9:86:a1:30:95:d9:ef:98:71: da:d0:df:2b:92:c5:76:18:d5:8c:b3:f6:a2:fe:7f: 46:13:77:0d:3d:8a:41:76:04:00:62:9b:f4:99:43: 94:46:30:0a:56:df:06:6b:aa:7b:28:67:84:56:35: 37:4e:3e:ce:ce:82:c1:ba:8c:ca:d4:4c:05:64:50: 13:b0:93:54:26:40:39:89:1d:04:6a:39:a6:01:35: 51:c5:1c:8a:f8:d4:42:47:49:af:61:dd:b7:29:4d: 71:7d:2a:4c:29:d4:20:6d:0c:b4:43:b8:ec:df:c0: 81:c1:bc:ed:4a:79:8d:3d:de:d2:cf:4d:38:f0:73: 8c:93:c7:b1:c8:ab:32:f0:23:b8:04:ea:1d:8d:5b: fd:e2:c9:ab:8b:d7:50:54:61:97:b5:6c:76:1f:6e: 9b:e8:22:25:5b:97:0d:0d:cb:db:d1:e9:dd:c7:f2: 24:bd:4f:35:be:0e:fb:d1:e1:cf:07:58:f2:24:c5: 61:fb:e9:c0:75:51:1a:f1:4c:b0:c6:92:24:51:46: 05:20:9f:4a:d4:7c:df:d8:2b:fb:2e:19:8e:7a:14: b1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1C:B3:2C:63:2F:08:5E:71:33:2C:F9:39:50:46:4D:91:B2:BF:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90857b20-031d-3aeb-a13c-938067df36b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.198.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:61:58:61:b6:3f:c3:25:20:e1:50:2c:0b:d0:18:95:cb:87: b6:93:91:5d:d0:81:7f:90:6c:e9:ad:c4:f7:9f:2b:0d:ed:4a: 1d:5e:f9:d1:9f:be:ac:fc:89:d6:b4:58:bc:07:ee:a8:3b:6a: c1:fb:a8:5c:58:0a:7b:e0:9b:56:e3:d4:99:c6:09:19:db:ef: 9d:14:b2:b5:f8:35:b7:4c:c8:6b:2e:f1:35:49:35:98:e0:d3: 2c:6c:94:e2:d4:86:1c:ad:6b:5b:79:fe:81:cc:da:6d:50:c4: 64:03:e5:e0:04:68:26:6f:be:0b:b5:d3:8f:bb:df:70:40:63: 0b:fc:7c:af:62:f7:84:d1:57:6a:12:91:1a:72:36:30:66:a8: 15:b3:ae:00:03:41:51:ac:87:94:18:d9:f4:d8:d4:a2:42:23: c9:80:02:9e:71:65:28:63:92:65:f7:c0:17:c1:8e:f5:c1:14: 6a:c5:0b:e6:ef:f2:16:5f:63:8a:ec:ad:17:40:a3:70:ac:7f: 10:e1:b6:6e:65:3f:a1:84:fe:49:09:59:9a:13:5d:10:fa:39: d9:04:cf:4e:d5:c9:67:68:9a:74:8b:98:8c:38:9a:51:0f:47: 5d:3f:38:40:7d:2b:68:28:eb:4c:d8:8b:19:93:9d:6a:45:c1: b6:c3:72:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikLto/4R1mVtcNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk ZGRmOGJmYWYtYTg0OS00YjExLWIwZGUtMThmNDVmMzcxN2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZ13HQq4GyZN+JDTIa5aIbGZBP/qbN1p5+MU fkOtEKxpidbJhqEwldnvmHHa0N8rksV2GNWMs/ai/n9GE3cNPYpBdgQAYpv0mUOU RjAKVt8Ga6p7KGeEVjU3Tj7OzoLBuozK1EwFZFATsJNUJkA5iR0EajmmATVRxRyK +NRCR0mvYd23KU1xfSpMKdQgbQy0Q7js38CBwbztSnmNPd7Sz0048HOMk8exyKsy 8CO4BOodjVv94smri9dQVGGXtWx2H26b6CIlW5cNDcvb0endx/IkvU81vg770eHP B1jyJMVh++nAdVEa8UywxpIkUUYFIJ9K1Hzf2Cv7LhmOehSx5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIcsyxjLwhecTMs+TlQRk2Rsr/AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTA4NTdiMjAtMDMxZC0z YWViLWExM2MtOTM4MDY3ZGYzNmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8YJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlhWGG2P8MlIOFQLAvQGJXLh7aTkV3QgX+QbOmtxPefKw3tSh1e+dGf vqz8ida0WLwH7qg7asH7qFxYCnvgm1bj1JnGCRnb750UsrX4NbdMyGsu8TVJNZjg 0yxslOLUhhyta1t5/oHM2m1QxGQD5eAEaCZvvgu104+733BAYwv8fK9i94TRV2oS kRpyNjBmqBWzrgADQVGsh5QY2fTY1KJCI8mAAp5xZShjkmX3wBfBjvXBFGrFC+bv 8hZfY4rsrRdAo3CsfxDhtm5lP6GE/kkJWZoTXRD6OdkEz07VyWdomnSLmIw4mlEP R10/OEB9K2go60zYixmTnWpFwbbDclU= -----END CERTIFICATE-----Generated at Wed Jul 23 01:40:01 2025 by rpki-client