$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8494392-2429-300d-b88c-e55e1544c7b2.roa File: a8494392-2429-300d-b88c-e55e1544c7b2.roa (raw, json) Hash identifier: q2rBdHdUMa4ZZEz8KSIjKa52pTd+p0PXgKzyZRGK7VY= Subject key identifier: 1A:7C:A6:0B:F8:51:67:06:30:B8:F0:54:7B:DD:61:64:AA:DE:8B:6B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A778093569DE6B77567045760 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8494392-2429-300d-b88c-e55e1544c7b2.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.204.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:93:56:9d:e6:b7:75:67:04:57:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=239d8532-0350-44df-b83a-e0c14907b0d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:dd:ea:4d:29:65:59:81:16:8c:ea:d3:97:48: fc:1c:96:49:a1:df:c1:5d:87:5b:50:f6:00:56:4c: f7:35:e8:bb:17:97:22:ae:a7:b4:4e:c8:2d:6b:1c: 87:4c:b7:9b:b4:d2:76:d7:04:77:f9:e5:ec:48:1e: bd:84:27:13:80:92:2a:5e:1e:2d:85:0d:44:68:e8: b3:f6:8d:8d:b9:6d:1f:4a:96:2a:8c:98:e1:b6:1d: 81:de:a7:1e:32:7c:e2:c5:08:4a:6c:e4:2a:06:df: bd:98:8e:08:8a:9a:ee:97:28:3f:68:67:15:86:43: 4a:94:1b:34:f1:20:4b:6c:54:06:db:00:5d:a9:76: 4c:f8:97:3f:38:e1:12:ad:f0:30:0c:be:c9:30:95: bf:dc:06:ff:06:1d:7e:94:cf:e5:37:33:06:36:e5: 7c:4e:f4:d7:e0:28:96:ce:81:3c:77:80:85:5f:9b: c2:b2:2b:7f:52:b8:0e:99:7e:2a:94:18:05:56:bb: d9:34:4e:58:0d:a9:24:14:6b:11:81:1c:ed:5f:99: 21:69:2e:5b:a6:40:88:f2:ff:f9:d5:da:f3:3d:92: e6:ab:d0:c1:01:f0:c6:67:f6:23:a2:35:28:a3:30: 7b:ae:b1:64:7c:0c:f1:66:01:44:a2:ed:3c:4c:45: ee:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7C:A6:0B:F8:51:67:06:30:B8:F0:54:7B:DD:61:64:AA:DE:8B:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8494392-2429-300d-b88c-e55e1544c7b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:c3:99:ae:a9:f8:c1:16:6d:3e:36:55:9f:d4:4d:11:55:89: 5d:10:6c:20:3c:43:3d:c3:a2:53:42:96:12:d5:9a:8e:5b:fa: 3d:f7:0c:46:ff:5d:d5:90:dc:5a:c1:88:3d:0c:76:75:3f:f3: a3:5d:79:b8:20:39:8d:21:2d:60:00:2c:8b:e8:d9:d4:2a:a5: 96:97:04:09:d1:40:d6:ed:f9:70:8e:4a:3f:2f:a8:20:20:4a: a9:d9:9f:f7:6f:bd:ea:aa:9e:22:d6:20:a3:8a:b7:c8:62:a4: ce:ae:45:34:e9:32:5e:45:7f:10:99:af:e0:89:59:ef:1a:f2: 1e:6e:a2:e9:f8:eb:21:06:e7:f1:8e:7c:2c:6e:bf:ff:1b:02: ea:ee:ea:95:7a:6b:aa:1c:1d:34:42:ce:8f:b8:b2:e7:f0:47: d4:70:ac:35:c1:af:6e:ab:37:c8:aa:ae:1c:d4:43:51:c2:42: 35:f9:55:42:c8:54:ee:d2:0b:04:77:db:51:d8:c6:57:89:ee: e9:f6:32:7a:0a:a1:ed:b1:41:60:95:1e:51:02:e5:38:f7:6d: bd:00:7e:94:b9:3a:80:40:f7:fc:56:69:4e:18:e1:87:ed:d8: 71:7d:b4:7d:39:d8:6d:8e:19:f6:ec:a4:6e:15:35:83:2a:49: c8:f2:75:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gJNWnea3dWcEV2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk MjM5ZDg1MzItMDM1MC00NGRmLWI4M2EtZTBjMTQ5MDdiMGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhd3qTSllWYEWjOrTl0j8HJZJod/BXYdbUPYA Vkz3Nei7F5cirqe0TsgtaxyHTLebtNJ21wR3+eXsSB69hCcTgJIqXh4thQ1EaOiz 9o2NuW0fSpYqjJjhth2B3qceMnzixQhKbOQqBt+9mI4Iiprulyg/aGcVhkNKlBs0 8SBLbFQG2wBdqXZM+Jc/OOESrfAwDL7JMJW/3Ab/Bh1+lM/lNzMGNuV8TvTX4CiW zoE8d4CFX5vCsit/UrgOmX4qlBgFVrvZNE5YDakkFGsRgRztX5khaS5bpkCI8v/5 1drzPZLmq9DBAfDGZ/YjojUoozB7rrFkfAzxZgFEou08TEXuywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBp8pgv4UWcGMLjwVHvdYWSq3otrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTg0OTQzOTItMjQyOS0z MDBkLWI4OGMtZTU1ZTE1NDRjN2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8xyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArDma6p+MEWbT42VZ/UTRFViV0QbCA8Qz3DolNClhLVmo5b+j33DEb/ XdWQ3FrBiD0MdnU/86NdebggOY0hLWAALIvo2dQqpZaXBAnRQNbt+XCOSj8vqCAg SqnZn/dvveqqniLWIKOKt8hipM6uRTTpMl5FfxCZr+CJWe8a8h5uoun46yEG5/GO fCxuv/8bAuru6pV6a6ocHTRCzo+4sufwR9RwrDXBr26rN8iqrhzUQ1HCQjX5VULI VO7SCwR321HYxleJ7un2MnoKoe2xQWCVHlEC5Tj3bb0AfpS5OoBA9/xWaU4Y4Yft 2HF9tH052G2OGfbspG4VNYMqScjydW4= -----END CERTIFICATE-----Generated at Thu Jul 24 00:04:06 2025 by rpki-client