$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba6dcec1-bf78-38d3-bc4e-cf33413daa20.roa File: ba6dcec1-bf78-38d3-bc4e-cf33413daa20.roa (raw, json) Hash identifier: 4bpfnfcmU+RmKEvneEweUEc6ULcKKHFqIwhbos5Rw/I= Subject key identifier: 0C:AC:5E:50:A8:61:7A:C6:D6:9E:CA:42:73:98:60:E8:24:65:50:E8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A682641D53AEADE984B5C3300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba6dcec1-bf78-38d3-bc4e-cf33413daa20.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 34164 IP address blocks: 23.202.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:41:d5:3a:ea:de:98:4b:5c:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=53dab54c-573c-47c3-a7ca-1974bbef484b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9e:5c:e4:35:7d:19:f0:12:6d:94:0e:fb:5f: a2:65:0f:90:e9:0f:14:81:8d:6e:25:d3:c6:80:a3: be:28:5b:24:8b:59:7e:91:f8:31:c8:65:66:49:28: 7b:8c:56:ae:67:52:51:14:cd:61:c6:d1:95:d6:6c: c3:aa:d0:a3:ee:db:0a:1a:95:21:fe:1d:87:28:47: ff:4c:43:9b:60:17:ba:74:44:63:d7:c9:f8:54:85: fa:f4:fe:a5:ee:71:c9:ea:d8:60:95:0c:4f:c0:91: 9a:43:dc:44:8c:46:12:7c:a9:2f:33:a3:bb:6f:49: 04:ea:47:d5:54:5c:0b:0b:50:c0:fd:f9:a2:71:80: d0:12:f3:10:2e:84:25:04:f7:37:cd:4d:b3:c7:f2: d3:43:3e:8c:1d:20:9a:13:a4:67:51:70:8b:f3:48: 31:a2:ec:45:99:04:03:d3:45:56:6b:f7:30:30:cf: d0:b7:8e:bc:fc:0f:81:e4:20:5d:84:5b:7f:f7:d6: c7:48:14:3a:78:55:0b:82:58:f5:25:a1:5e:d4:e3: b6:08:66:94:76:c8:e5:b5:5e:d9:b0:ce:03:99:ba: e5:2e:0a:62:3b:36:82:4c:9d:69:7e:ef:7f:94:e1: 7a:47:d0:00:35:69:d6:c7:7f:4d:a1:ca:80:0c:f6: 38:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AC:5E:50:A8:61:7A:C6:D6:9E:CA:42:73:98:60:E8:24:65:50:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba6dcec1-bf78-38d3-bc4e-cf33413daa20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:f7:62:26:25:f1:e8:70:8a:5d:56:b7:da:e4:39:13:72:fe: cc:fb:7a:76:b6:3c:4a:c2:e1:b5:92:eb:fa:e1:47:e9:97:09: f1:2c:5f:10:dd:63:ad:38:13:25:c4:f3:ac:0d:52:5d:ed:1d: 0a:b8:27:b1:52:66:93:63:75:2c:88:78:0e:6f:f0:0f:f6:02: be:2b:e3:fe:af:f2:62:35:71:6c:cb:96:ff:ae:00:8f:a5:82: 1c:0f:d3:0b:4d:65:fd:1e:e8:dc:50:51:05:e9:ec:15:8f:05: 5a:06:76:4c:99:1e:7a:c3:ea:39:96:3e:f2:87:c3:1d:5f:35: 53:6c:c0:8e:51:5a:c2:2a:ec:0d:61:a6:d3:33:5b:5e:63:df: 56:55:bf:12:bd:bc:01:36:c2:f0:a1:05:29:98:52:40:e3:d4: 98:4b:ba:f8:1a:dd:63:91:40:5e:59:90:32:24:ed:5d:22:94: a0:6a:5d:0b:f1:bd:0f:65:56:62:fa:cb:68:ae:3c:57:91:c9: 80:89:99:1e:9f:50:ff:bc:58:d2:f3:2a:ee:2d:97:b1:a2:4c: 11:07:3d:cc:74:d3:d6:4e:0f:ac:01:d9:fd:31:47:6a:8f:8f: 12:b6:54:32:5e:dc:47:6c:c4:0b:64:fe:aa:8e:d9:e6:82:2a: f8:78:d2:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJkHVOuremEtcMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NTNkYWI1NGMtNTczYy00N2MzLWE3Y2EtMTk3NGJiZWY0ODRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp5c5DV9GfASbZQO+1+iZQ+Q6Q8UgY1uJdPG gKO+KFski1l+kfgxyGVmSSh7jFauZ1JRFM1hxtGV1mzDqtCj7tsKGpUh/h2HKEf/ TEObYBe6dERj18n4VIX69P6l7nHJ6thglQxPwJGaQ9xEjEYSfKkvM6O7b0kE6kfV VFwLC1DA/fmicYDQEvMQLoQlBPc3zU2zx/LTQz6MHSCaE6RnUXCL80gxouxFmQQD 00VWa/cwMM/Qt468/A+B5CBdhFt/99bHSBQ6eFULglj1JaFe1OO2CGaUdsjltV7Z sM4DmbrlLgpiOzaCTJ1pfu9/lOF6R9AANWnWx39NocqADPY4tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAysXlCoYXrG1p7KQnOYYOgkZVDoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmE2ZGNlYzEtYmY3OC0z OGQzLWJjNGUtY2YzMzQxM2RhYTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8qdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACH3YiYl8ehwil1Wt9rkORNy/sz7ena2PErC4bWS6/rhR+mXCfEsXxDd Y604EyXE86wNUl3tHQq4J7FSZpNjdSyIeA5v8A/2Ar4r4/6v8mI1cWzLlv+uAI+l ghwP0wtNZf0e6NxQUQXp7BWPBVoGdkyZHnrD6jmWPvKHwx1fNVNswI5RWsIq7A1h ptMzW15j31ZVvxK9vAE2wvChBSmYUkDj1JhLuvga3WORQF5ZkDIk7V0ilKBqXQvx vQ9lVmL6y2iuPFeRyYCJmR6fUP+8WNLzKu4tl7GiTBEHPcx009ZOD6wB2f0xR2qP jxK2VDJe3EdsxAtk/qqO2eaCKvh40vY= -----END CERTIFICATE-----Generated at Tue Jul 22 19:32:59 2025 by rpki-client