$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5955798-2c41-3417-859f-29edd5d12aa9.roa File: b5955798-2c41-3417-859f-29edd5d12aa9.roa (raw, json) Hash identifier: ZssIc/cyPkaKN7RXIDBDxe/A5gzr5A1NKrk0jsGqIzo= Subject key identifier: 07:81:CF:FC:19:CA:E1:C1:98:0B:0D:4B:6E:07:29:EC:EB:4F:F0:91 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A66C08E48E4EA2BFE23415700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5955798-2c41-3417-859f-29edd5d12aa9.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 20940 IP address blocks: 23.201.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:8e:48:e4:ea:2b:fe:23:41:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=949b6def-e97e-4bea-a1a5-675426b32e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4d:a6:5b:4d:74:27:f9:1c:6f:8e:6c:18:06: 3c:14:40:6c:93:1f:de:26:15:16:dd:b6:af:80:b0: b6:1a:62:38:28:be:c3:ab:2b:4d:98:52:5b:14:a0: 91:9d:e2:bd:ea:18:e9:0f:ed:3b:14:54:ca:19:7f: bd:67:54:34:8c:3e:44:3b:6e:77:a6:91:81:c1:72: d9:3a:38:84:21:a1:76:cb:dc:ec:66:2b:18:83:0e: 25:f6:43:64:14:eb:a1:52:35:d7:1b:1f:9c:8a:bf: 56:1b:b7:e6:3b:b0:fb:44:8c:9a:99:f8:55:dc:90: 95:ab:09:40:0a:44:c6:6e:14:5d:5a:62:d5:76:d0: b4:a3:84:97:d3:81:44:5c:27:3e:ad:81:19:61:ba: fa:50:cd:37:1c:69:e5:a6:eb:9b:20:7b:4f:19:74: bc:df:66:26:5f:a4:8f:36:6c:f1:1e:02:df:7d:c4: 54:a8:fb:0b:80:9a:0d:47:78:bb:bc:fc:5d:e9:b7: 2b:d4:f8:09:6c:bc:68:55:41:d1:32:b8:7e:9d:10: c2:d7:32:60:ef:48:1e:a4:7c:8b:c2:70:f1:f8:c9: 42:0b:ac:8b:b4:77:0b:23:31:bb:cb:0f:cd:1c:bd: 94:4a:b0:15:80:1d:9d:40:4f:d5:8b:f0:8e:af:b3: 1a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:81:CF:FC:19:CA:E1:C1:98:0B:0D:4B:6E:07:29:EC:EB:4F:F0:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5955798-2c41-3417-859f-29edd5d12aa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:60:74:9e:95:e5:fb:bf:2e:e6:6b:03:59:df:95:33:b6:45: 0b:67:81:bd:46:c9:86:f5:66:9c:b0:68:dd:9d:23:06:bb:17: bd:2d:fa:39:18:07:17:c1:81:d5:9e:da:c5:60:59:49:21:34: 83:c0:83:0d:da:a5:8e:c7:22:3f:37:b0:1e:9b:a2:b0:5a:e9: e9:68:61:f3:67:4a:2b:92:71:de:ba:40:c2:68:ca:09:66:e9: 2d:83:af:af:14:75:a1:60:c4:1d:ec:38:7d:16:fe:d3:46:d1: 83:c6:e6:1f:13:39:72:88:c3:f6:0e:32:70:f6:81:14:ae:69: 4a:c8:3c:ad:5d:97:3d:68:ae:86:79:ac:47:34:ae:73:eb:a6: 6e:ca:2c:0d:7b:13:8f:9e:78:64:1d:61:ce:eb:bd:95:46:ef: 44:69:e1:de:13:24:01:d1:bf:87:41:dc:2e:86:81:4a:a8:95: 68:ba:cb:30:11:02:94:76:1a:6f:97:1a:bb:f3:8f:f3:2f:a6: ef:bf:ef:5e:00:23:0b:ba:91:71:18:ff:4c:32:1a:14:14:20: 6b:9e:f9:f0:55:d2:92:bb:b8:fb:e3:67:6e:94:14:b0:c3:e1: 4c:87:4f:52:3e:e7:b7:98:da:3f:d7:aa:a7:9c:11:22:90:97: 30:e8:c2:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwI5I5Oor/iNBVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk OTQ5YjZkZWYtZTk3ZS00YmVhLWExYTUtNjc1NDI2YjMyZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU2mW010J/kcb45sGAY8FEBskx/eJhUW3bav gLC2GmI4KL7DqytNmFJbFKCRneK96hjpD+07FFTKGX+9Z1Q0jD5EO253ppGBwXLZ OjiEIaF2y9zsZisYgw4l9kNkFOuhUjXXGx+cir9WG7fmO7D7RIyamfhV3JCVqwlA CkTGbhRdWmLVdtC0o4SX04FEXCc+rYEZYbr6UM03HGnlpuubIHtPGXS832YmX6SP NmzxHgLffcRUqPsLgJoNR3i7vPxd6bcr1PgJbLxoVUHRMrh+nRDC1zJg70gepHyL wnDx+MlCC6yLtHcLIzG7yw/NHL2USrAVgB2dQE/Vi/COr7Ma2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAeBz/wZyuHBmAsNS24HKezrT/CRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjU5NTU3OTgtMmM0MS0z NDE3LTg1OWYtMjllZGQ1ZDEyYWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8krMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJgdJ6V5fu/LuZrA1nflTO2RQtngb1GyYb1ZpywaN2dIwa7F70t+jkY BxfBgdWe2sVgWUkhNIPAgw3apY7HIj83sB6borBa6eloYfNnSiuScd66QMJoyglm 6S2Dr68UdaFgxB3sOH0W/tNG0YPG5h8TOXKIw/YOMnD2gRSuaUrIPK1dlz1oroZ5 rEc0rnPrpm7KLA17E4+eeGQdYc7rvZVG70Rp4d4TJAHRv4dB3C6GgUqolWi6yzAR ApR2Gm+XGrvzj/Mvpu+/714AIwu6kXEY/0wyGhQUIGue+fBV0pK7uPvjZ26UFLDD 4UyHT1I+57eY2j/XqqecESKQlzDowlw= -----END CERTIFICATE-----Generated at Thu Jul 24 00:04:13 2025 by rpki-client