$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf9afdfb-2b90-365e-b7d5-6b28316f1450.roa File: bf9afdfb-2b90-365e-b7d5-6b28316f1450.roa (raw, json) Hash identifier: +RmrcZ5Xu4BTwgAIKHdbUAYYrK1sJdHAQ7jD17lDKbU= Subject key identifier: 92:1B:7F:9C:CF:99:32:3F:32:76:C2:C1:4F:FD:9B:E0:1E:EA:5D:4F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A778096ABDF3E81A9FB66F198 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf9afdfb-2b90-365e-b7d5-6b28316f1450.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 16625 IP address blocks: 23.206.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:96:ab:df:3e:81:a9:fb:66:f1:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=81692a8e-8b73-4764-a562-02bb589f0f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9e:0d:60:31:d2:7f:a9:18:9c:27:81:9a:91: 3d:b5:c0:87:8f:6d:d7:bf:9a:09:aa:be:43:3c:5f: f9:cc:71:f3:1e:7a:82:3b:5d:c8:6d:68:34:5d:a4: ee:c5:1a:a3:2f:48:34:38:c5:22:7c:c8:0f:f0:4f: 6c:53:d9:f4:f7:45:df:84:50:73:20:5b:2c:c7:f7: 17:8f:4d:c4:4d:63:4a:f1:b2:43:07:0d:2b:b4:0c: c6:63:33:c1:90:7c:b7:11:e7:fc:5d:08:68:45:f3: e8:7c:c0:78:12:1c:d0:11:04:c1:6a:28:3f:9d:9b: 2c:a4:bb:81:a6:f5:d5:f5:1b:52:31:93:7f:e7:c1: 64:61:10:98:ff:23:92:a8:07:e9:0d:50:39:c7:71: e8:2c:9a:a7:22:c0:71:a1:43:db:59:5c:31:2e:df: a3:52:36:cc:ad:80:53:22:b6:d5:17:e1:b8:8b:ad: 81:0c:ce:59:6b:7b:51:53:9d:19:26:ba:63:85:4d: 8e:1b:ab:41:fa:b6:48:8e:42:7e:88:bf:3e:cb:cc: fa:06:0a:65:ee:e5:bc:b0:22:23:a3:08:ae:46:83: 1c:b3:c4:91:b3:2d:c5:2a:10:7b:76:d4:ce:08:d3: 06:67:92:c2:c5:7a:d4:7e:3b:cf:8e:c7:54:91:e0: 88:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1B:7F:9C:CF:99:32:3F:32:76:C2:C1:4F:FD:9B:E0:1E:EA:5D:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf9afdfb-2b90-365e-b7d5-6b28316f1450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:35:03:fd:f0:bd:9c:89:13:52:c9:2e:39:4b:56:35:42:22: 05:64:96:af:50:0e:26:ad:22:95:f6:d6:45:a4:af:d6:d5:6f: 9c:22:d7:2e:d0:d4:cf:f9:c0:97:d1:eb:c5:bd:7e:ec:4c:3a: ec:f3:09:cf:5a:23:77:55:9d:58:85:d7:6f:80:dd:51:5a:1f: 01:aa:43:32:95:db:39:2c:38:17:18:4a:ca:06:4f:7c:31:ae: c9:48:d4:18:8e:90:c0:1a:77:7e:42:20:6c:f8:40:04:21:c0: 34:7a:cb:1b:67:4a:ca:fe:93:8c:61:c0:32:c0:18:37:b4:93: 83:77:1a:60:92:83:d2:03:7f:4b:26:1c:03:87:34:65:f7:7f: 1b:2d:35:c1:a0:fc:dc:73:fe:a5:b3:c9:15:23:4d:b5:5c:ab: f9:c5:33:5a:34:45:4a:da:98:2a:9a:cc:36:26:d8:57:b7:f0: 91:c8:7c:be:91:61:e9:64:a3:f6:ce:f4:fc:c9:d0:65:33:70: c4:ec:a1:55:3d:40:97:8b:bd:3d:07:47:e0:86:1b:7b:c2:ce: 2c:87:20:aa:1d:4b:e9:82:fc:52:52:ea:ba:ce:6e:03:91:cd: 24:f3:af:a6:f6:02:67:1b:0b:4e:97:83:4a:8b:b6:1b:db:91: b4:b1:13:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gJar3z6Bqftm8ZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk ODE2OTJhOGUtOGI3My00NzY0LWE1NjItMDJiYjU4OWYwZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4p4NYDHSf6kYnCeBmpE9tcCHj23Xv5oJqr5D PF/5zHHzHnqCO13IbWg0XaTuxRqjL0g0OMUifMgP8E9sU9n090XfhFBzIFssx/cX j03ETWNK8bJDBw0rtAzGYzPBkHy3Eef8XQhoRfPofMB4EhzQEQTBaig/nZsspLuB pvXV9RtSMZN/58FkYRCY/yOSqAfpDVA5x3HoLJqnIsBxoUPbWVwxLt+jUjbMrYBT IrbVF+G4i62BDM5Za3tRU50ZJrpjhU2OG6tB+rZIjkJ+iL8+y8z6Bgpl7uW8sCIj owiuRoMcs8SRsy3FKhB7dtTOCNMGZ5LCxXrUfjvPjsdUkeCIAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIbf5zPmTI/MnbCwU/9m+Ae6l1PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmY5YWZkZmItMmI5MC0z NjVlLWI3ZDUtNmIyODMxNmYxNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF84MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFU1A/3wvZyJE1LJLjlLVjVCIgVklq9QDiatIpX21kWkr9bVb5wi1y7Q 1M/5wJfR68W9fuxMOuzzCc9aI3dVnViF12+A3VFaHwGqQzKV2zksOBcYSsoGT3wx rslI1BiOkMAad35CIGz4QAQhwDR6yxtnSsr+k4xhwDLAGDe0k4N3GmCSg9IDf0sm HAOHNGX3fxstNcGg/Nxz/qWzyRUjTbVcq/nFM1o0RUramCqazDYm2Fe38JHIfL6R Yelko/bO9PzJ0GUzcMTsoVU9QJeLvT0HR+CGG3vCziyHIKodS+mC/FJS6rrObgOR zSTzr6b2AmcbC06Xg0qLthvbkbSxE2g= -----END CERTIFICATE-----Generated at Tue Jul 22 19:46:26 2025 by rpki-client