$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94fa5d9e-a90e-3930-b6c2-97c756a7bcb9.roa File: 94fa5d9e-a90e-3930-b6c2-97c756a7bcb9.roa (raw, json) Hash identifier: Xi4ox0IvB/oj/WDJcJ4MPZkc8c81rQZl9MiKYd+m/lI= Subject key identifier: FD:49:73:00:13:2C:A9:57:EF:C7:73:4D:24:4D:76:54:D1:DA:6D:EA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8146536C603205E8E9753900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94fa5d9e-a90e-3930-b6c2-97c756a7bcb9.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.204.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:53:6c:60:32:05:e8:e9:75:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=d27d9e96-c394-4e3f-a870-55c0316514d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c3:02:70:a9:56:82:a8:be:57:e0:34:88:87: 56:62:e1:d7:a4:1a:1a:6a:1b:67:35:65:85:02:63: 7a:62:27:36:a3:01:8c:cd:3a:66:dd:4e:c5:38:7c: 9f:8d:73:5d:77:8c:d6:8f:7c:e8:cc:10:a8:56:ce: 90:20:e4:ef:26:5f:9f:70:94:2a:85:28:1d:1b:37: bd:94:3c:a1:d1:a3:02:06:0f:1a:32:2f:9b:49:f8: e2:c6:d5:88:b3:49:e0:05:90:4e:33:30:ed:b9:7a: 13:f5:5a:23:77:52:cc:ff:b3:94:83:75:08:3d:f0: 9b:bb:b2:1f:1a:29:96:d2:79:98:00:03:25:ed:a9: 4b:6d:d1:10:bc:ee:24:68:6f:19:5a:fd:f0:1a:a1: b3:12:91:cf:a1:35:c4:46:29:a6:07:35:0c:e7:87: b2:0d:98:38:7c:94:4c:e8:8c:e2:38:77:90:1f:3d: 36:c4:05:30:b7:84:b4:0c:a2:78:64:ae:05:79:10: 20:0f:dd:53:e9:5e:20:82:ae:2e:4d:3c:88:95:1b: 8e:0b:6e:76:be:cd:0a:94:18:69:e8:e3:78:cd:30: 98:d0:43:0c:2e:fc:02:b8:61:63:d0:eb:3d:7d:4a: bf:53:61:f6:90:05:bf:ea:5c:54:dd:b2:41:2c:59: af:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:49:73:00:13:2C:A9:57:EF:C7:73:4D:24:4D:76:54:D1:DA:6D:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94fa5d9e-a90e-3930-b6c2-97c756a7bcb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:38:32:ef:8f:2b:d6:e3:24:19:9d:5b:50:5e:9c:76:64:45: d5:0e:4f:5b:52:50:23:1d:3f:ad:3d:f7:c2:27:37:81:49:e7: 10:98:70:e7:10:a2:14:59:0b:10:2d:ee:fc:85:0a:85:a7:3b: 4f:ec:83:5e:5f:e2:b0:57:79:0e:16:e7:dd:cb:99:8e:0d:6d: 94:92:81:fe:c5:58:03:2c:ac:ad:af:57:6c:1c:e3:57:e2:8c: f8:10:e1:8c:a3:9f:1f:ba:e4:12:17:01:88:1d:03:06:30:6d: 5c:39:06:f8:a7:ee:1f:81:be:d2:43:74:ff:3d:1c:23:57:61: 10:0d:01:b5:14:54:ad:26:e6:9d:45:df:f2:12:57:cf:bb:a2: a7:7e:84:db:ac:03:4e:40:28:fa:ad:60:da:b6:12:df:1a:ba: 39:41:ff:35:45:60:9d:b1:d9:d6:30:48:29:fe:e5:73:78:97: 1a:21:e8:6b:01:4a:95:54:f5:bb:4e:5d:d6:11:c4:4c:33:98: 30:8b:4c:f3:cf:05:65:75:ab:3c:01:59:85:82:21:9a:5b:6a: 66:83:9a:7c:3d:1b:d7:ef:e5:39:ea:17:20:24:15:55:98:52: 88:b1:7e:b1:90:27:2b:40:18:47:5d:a3:a9:b3:3a:2c:ab:b7: 2c:49:a3:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRlNsYDIF6Ol1OQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZDI3ZDllOTYtYzM5NC00ZTNmLWE4NzAtNTVjMDMxNjUxNGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMMCcKlWgqi+V+A0iIdWYuHXpBoaahtnNWWF AmN6Yic2owGMzTpm3U7FOHyfjXNdd4zWj3zozBCoVs6QIOTvJl+fcJQqhSgdGze9 lDyh0aMCBg8aMi+bSfjixtWIs0ngBZBOMzDtuXoT9Vojd1LM/7OUg3UIPfCbu7If GimW0nmYAAMl7alLbdEQvO4kaG8ZWv3wGqGzEpHPoTXERimmBzUM54eyDZg4fJRM 6IziOHeQHz02xAUwt4S0DKJ4ZK4FeRAgD91T6V4ggq4uTTyIlRuOC252vs0KlBhp 6ON4zTCY0EMMLvwCuGFj0Os9fUq/U2H2kAW/6lxU3bJBLFmvZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1JcwATLKlX78dzTSRNdlTR2m3qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTRmYTVkOWUtYTkwZS0z OTMwLWI2YzItOTdjNzU2YTdiY2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8yJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH04Mu+PK9bjJBmdW1BenHZkRdUOT1tSUCMdP60998InN4FJ5xCYcOcQ ohRZCxAt7vyFCoWnO0/sg15f4rBXeQ4W593LmY4NbZSSgf7FWAMsrK2vV2wc41fi jPgQ4Yyjnx+65BIXAYgdAwYwbVw5Bvin7h+BvtJDdP89HCNXYRANAbUUVK0m5p1F 3/ISV8+7oqd+hNusA05AKPqtYNq2Et8aujlB/zVFYJ2x2dYwSCn+5XN4lxoh6GsB SpVU9btOXdYRxEwzmDCLTPPPBWV1qzwBWYWCIZpbamaDmnw9G9fv5TnqFyAkFVWY UoixfrGQJytAGEddo6mzOiyrtyxJoy0= -----END CERTIFICATE-----Generated at Wed Jul 23 01:34:24 2025 by rpki-client