$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b4de119c-2baf-3246-a574-c5e91e8e0c8e.roa File: b4de119c-2baf-3246-a574-c5e91e8e0c8e.roa (raw, json) Hash identifier: vDpYHT9ODrQPMwiM81H227CB3TtQnLO2+C4aQb29VIs= Subject key identifier: AD:9A:84:AC:B4:FC:26:35:C2:B6:A2:F6:7A:C4:A9:F0:5A:3B:FB:35 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A778093853C1108365EE50C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b4de119c-2baf-3246-a574-c5e91e8e0c8e.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.204.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:93:85:3c:11:08:36:5e:e5:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=c1ce1c56-827c-4525-89d5-9421ca7295f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cb:4f:a0:48:7a:18:0c:6c:01:ac:14:98:1c: 71:bb:c6:86:3f:65:b3:b1:3e:6c:78:45:60:42:dc: 38:3c:74:c9:4d:06:0e:ea:6d:ca:05:e2:1b:27:b9: 8f:6d:3e:e7:9e:56:19:ca:39:05:6d:c3:d5:4b:44: 1b:ec:15:57:cb:09:30:af:15:37:05:37:ec:cd:9e: 4f:8c:77:ea:91:39:98:52:b6:66:7a:c0:02:9a:2d: a9:ed:ef:c0:1e:c8:f8:e5:06:a5:aa:19:11:98:72: f9:45:29:ca:1b:eb:48:41:0e:49:79:70:8e:37:c7: d1:ee:1d:83:26:95:5c:68:a4:dc:2f:db:13:fa:96: 64:0d:84:05:57:9a:98:34:6b:97:5c:5b:23:a3:47: 83:f9:0f:2f:f8:c6:fb:07:ee:c7:46:6f:42:28:14: 34:19:cb:b9:c1:38:24:c3:98:df:47:52:95:f0:47: 96:88:15:8a:c5:ca:ca:58:6f:41:cc:99:77:51:5c: e8:a7:21:61:75:03:dd:8d:c0:fd:6e:4a:e1:41:f9: 7b:43:0e:94:a9:90:54:47:c3:de:a6:43:94:d3:85: b7:92:95:bf:65:68:bf:fa:6b:7a:a5:c4:5a:c8:44: e8:34:b4:e8:7f:de:d6:fd:84:e4:e3:4d:b3:97:8e: 2e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:9A:84:AC:B4:FC:26:35:C2:B6:A2:F6:7A:C4:A9:F0:5A:3B:FB:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b4de119c-2baf-3246-a574-c5e91e8e0c8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d2:06:23:ab:46:ff:69:e0:06:65:a0:2b:1b:dc:e9:17:6f: 82:7d:2f:8f:5d:af:48:5f:dd:e3:ac:16:45:c7:5d:e6:3c:77: d6:39:7b:02:9a:a5:b7:30:ec:dd:15:e0:ae:4a:9c:d0:07:e2: 0d:90:45:e2:a8:22:cd:48:ce:3b:d7:1b:71:3f:8f:24:d5:eb: 6b:8b:47:04:72:24:cd:fa:b7:27:b6:6e:a0:5e:b3:f8:05:ff: 47:07:73:dd:2f:7d:9a:1e:e0:64:1f:93:c3:66:28:63:6e:a8: 5d:73:55:c5:ea:aa:28:90:c5:d8:28:51:d6:11:f0:18:d7:25: 32:ac:ab:43:86:ba:74:c5:3c:87:73:60:9d:15:46:1f:f9:a1: a0:3d:ca:b7:dd:ac:8c:fc:b7:15:b6:e6:ec:87:79:87:06:29: fa:60:72:b8:6d:9a:69:99:43:4f:27:37:a7:98:bb:48:60:93: 18:88:2d:35:3f:76:28:48:58:0e:4c:7b:34:3d:42:e7:b6:af: dd:36:fc:d3:9c:47:1f:07:a1:63:d3:c3:57:4e:74:ba:06:da: 95:e6:29:f0:6c:e5:e8:89:c1:f2:94:49:ef:eb:e6:e2:43:5c: 8c:10:90:4e:ca:85:2c:84:6b:70:e7:f9:7c:a0:15:20:4d:ca: b8:d7:25:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gJOFPBEINl7lDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk YzFjZTFjNTYtODI3Yy00NTI1LTg5ZDUtOTQyMWNhNzI5NWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ctPoEh6GAxsAawUmBxxu8aGP2WzsT5seEVg Qtw4PHTJTQYO6m3KBeIbJ7mPbT7nnlYZyjkFbcPVS0Qb7BVXywkwrxU3BTfszZ5P jHfqkTmYUrZmesACmi2p7e/AHsj45QalqhkRmHL5RSnKG+tIQQ5JeXCON8fR7h2D JpVcaKTcL9sT+pZkDYQFV5qYNGuXXFsjo0eD+Q8v+Mb7B+7HRm9CKBQ0Gcu5wTgk w5jfR1KV8EeWiBWKxcrKWG9BzJl3UVzopyFhdQPdjcD9bkrhQfl7Qw6UqZBUR8Pe pkOU04W3kpW/ZWi/+mt6pcRayEToNLTof97W/YTk402zl44u4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2ahKy0/CY1wrai9nrEqfBaO/s1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjRkZTExOWMtMmJhZi0z MjQ2LWE1NzQtYzVlOTFlOGUwYzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8x0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzSBiOrRv9p4AZloCsb3OkXb4J9L49dr0hf3eOsFkXHXeY8d9Y5ewKa pbcw7N0V4K5KnNAH4g2QReKoIs1IzjvXG3E/jyTV62uLRwRyJM36tye2bqBes/gF /0cHc90vfZoe4GQfk8NmKGNuqF1zVcXqqiiQxdgoUdYR8BjXJTKsq0OGunTFPIdz YJ0VRh/5oaA9yrfdrIz8txW25uyHeYcGKfpgcrhtmmmZQ08nN6eYu0hgkxiILTU/ dihIWA5MezQ9Que2r902/NOcRx8HoWPTw1dOdLoG2pXmKfBs5eiJwfKUSe/r5uJD XIwQkE7KhSyEa3Dn+XygFSBNyrjXJSw= -----END CERTIFICATE-----Generated at Tue Jul 22 19:34:14 2025 by rpki-client