$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9cd5813d-f28e-3f11-ad11-ca59fc05bea4.roa File: 9cd5813d-f28e-3f11-ad11-ca59fc05bea4.roa (raw, json) Hash identifier: g3f0kHTbCZXhtXGH4c8tOE5Ovr/gzwKPGTdHUqQXvQM= Subject key identifier: 91:11:05:54:B3:57:F2:DA:3E:20:39:2D:8E:04:FD:3B:05:91:DC:74 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A6290A72A8120D240B8101380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9cd5813d-f28e-3f11-ad11-ca59fc05bea4.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16625 IP address blocks: 23.196.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:a7:2a:81:20:d2:40:b8:10:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=32830da6-a97c-44a9-a07d-049e4398ea8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:41:e5:93:e5:92:c3:9d:77:11:5c:8a:b3:71: 8c:b7:72:8a:b5:f2:24:7c:a0:d6:1a:ae:5a:d5:99: 32:cc:83:9e:5c:84:fd:e6:c1:79:56:31:29:0f:03: 90:63:8b:23:89:68:ca:30:05:da:25:f3:f3:a5:e0: 24:a2:2d:0b:d1:e5:65:de:26:1d:71:1c:e5:6e:75: fe:39:e1:34:43:80:36:5f:d3:e4:8f:d1:53:36:69: 32:b5:07:82:29:a6:36:82:9f:6d:7c:9c:a0:0c:44: 15:93:e4:0f:82:64:ab:ce:ec:ef:0a:b8:b7:fb:c9: fd:44:b3:b5:6c:76:1c:4e:ac:bf:90:ec:de:7c:63: ce:2e:61:74:0f:6a:2f:be:e7:53:05:d4:7a:0c:ab: 48:b4:55:5a:e1:a9:26:6d:74:73:66:4d:a5:17:0f: cd:9d:0b:05:96:dc:5e:81:d3:49:9b:64:83:70:9f: 26:96:c6:72:ab:d9:df:7e:8a:a7:09:be:a9:ad:81: 0b:1c:9e:f2:45:0f:a1:e4:22:79:9c:14:05:57:84: ec:9a:93:a0:a5:b1:5f:ce:b3:79:94:19:ce:22:98: e6:25:0f:9e:84:dc:cb:0e:da:dd:57:0a:e3:4d:da: be:e1:38:c3:ec:9c:a1:d9:c8:97:f7:96:17:80:15: 91:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:11:05:54:B3:57:F2:DA:3E:20:39:2D:8E:04:FD:3B:05:91:DC:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9cd5813d-f28e-3f11-ad11-ca59fc05bea4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.196.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:65:62:b6:1a:7e:17:25:8d:45:58:9d:12:a0:e7:e1:12:9e: 80:b0:e3:25:c2:eb:05:36:52:60:1a:f6:5f:ea:1f:44:c7:66: ef:27:5f:b1:80:8c:ae:d6:40:7a:a2:b8:93:ff:6b:b4:9e:63: ac:01:4d:4d:11:17:b4:c5:10:ca:b6:ca:f0:89:ea:8a:0f:73: 1d:04:d9:7b:89:c9:ee:b1:b3:5e:df:a6:59:7b:e0:75:f9:64: 45:be:72:fd:8a:28:d1:cd:e2:bc:76:61:3d:3e:6e:92:30:54: 5f:d2:01:49:fd:40:3b:f7:44:92:17:aa:ef:df:57:bb:56:aa: c4:53:c1:bb:d8:f1:c0:28:76:cf:4e:d3:0b:8a:cf:4b:7d:1c: 71:70:35:5b:7f:a1:39:2a:d1:1c:cb:e5:cb:e2:84:2f:54:3d: 27:0e:9e:9c:43:7b:83:17:a3:a9:20:05:3b:02:2d:11:0e:e0: b3:69:51:fd:1d:5d:d8:cf:f9:15:fd:78:bc:8b:c3:3a:64:bd: 8f:2f:bc:b8:9a:df:82:c8:ff:30:fe:fc:d5:08:e7:c2:b0:39: 25:e8:f9:16:4e:01:84:b4:e2:30:7f:f5:e4:49:a3:d1:c5:77: 40:32:e0:c4:b9:79:69:24:da:7b:48:d7:8c:02:59:65:cb:77: d0:b0:c8:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikKcqgSDSQLgQE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk MzI4MzBkYTYtYTk3Yy00NGE5LWEwN2QtMDQ5ZTQzOThlYThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUHlk+WSw513EVyKs3GMt3KKtfIkfKDWGq5a 1ZkyzIOeXIT95sF5VjEpDwOQY4sjiWjKMAXaJfPzpeAkoi0L0eVl3iYdcRzlbnX+ OeE0Q4A2X9Pkj9FTNmkytQeCKaY2gp9tfJygDEQVk+QPgmSrzuzvCri3+8n9RLO1 bHYcTqy/kOzefGPOLmF0D2ovvudTBdR6DKtItFVa4akmbXRzZk2lFw/NnQsFltxe gdNJm2SDcJ8mlsZyq9nffoqnCb6prYELHJ7yRQ+h5CJ5nBQFV4TsmpOgpbFfzrN5 lBnOIpjmJQ+ehNzLDtrdVwrjTdq+4TjD7Jyh2ciX95YXgBWRYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJERBVSzV/LaPiA5LY4E/TsFkdx0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWNkNTgxM2QtZjI4ZS0z ZjExLWFkMTEtY2E1OWZjMDViZWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8S8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFlYrYafhcljUVYnRKg5+ESnoCw4yXC6wU2UmAa9l/qH0THZu8nX7GA jK7WQHqiuJP/a7SeY6wBTU0RF7TFEMq2yvCJ6ooPcx0E2XuJye6xs17fpll74HX5 ZEW+cv2KKNHN4rx2YT0+bpIwVF/SAUn9QDv3RJIXqu/fV7tWqsRTwbvY8cAods9O 0wuKz0t9HHFwNVt/oTkq0RzL5cvihC9UPScOnpxDe4MXo6kgBTsCLREO4LNpUf0d XdjP+RX9eLyLwzpkvY8vvLia34LI/zD+/NUI58KwOSXo+RZOAYS04jB/9eRJo9HF d0Ay4MS5eWkk2ntI14wCWWXLd9CwyNA= -----END CERTIFICATE-----Generated at Tue Jul 22 19:32:51 2025 by rpki-client