$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2ad9d8b-30f4-3140-9d76-ed2f41f6980e.roa File: c2ad9d8b-30f4-3140-9d76-ed2f41f6980e.roa (raw, json) Hash identifier: cQmubneArKGSc8KnR+Bf8Hcn7P5DgXvn9J0LzG53Ba8= Subject key identifier: C1:C8:38:75:3F:38:D8:79:F7:F7:0A:8F:55:8D:A9:ED:0D:17:34:7C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7780A193B465FD035C56E7C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2ad9d8b-30f4-3140-9d76-ed2f41f6980e.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.206.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:a1:93:b4:65:fd:03:5c:56:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=f88911ac-26b2-406e-a9a6-f5eab26fe728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:66:40:a1:4d:68:03:85:3e:e6:4f:b1:1f:44: 2e:98:47:dc:c8:8f:7d:fc:ba:84:d7:25:94:2b:6c: fa:94:2a:c6:2e:4e:30:7b:0a:3c:31:a3:bb:77:9a: 18:8d:08:1a:ed:8d:ba:a2:9c:46:9a:ac:b8:d1:64: 94:7d:11:e7:ff:7e:fe:9e:ed:80:33:8f:65:b8:6d: 11:77:30:30:9b:7f:1e:a7:78:bc:bd:1a:05:4a:b6: e2:79:1f:1b:cf:07:8d:84:a2:49:ff:9a:66:fc:b9: 3e:49:0f:d7:98:be:00:2e:d1:88:05:9b:d3:1b:8a: 32:e1:ed:fc:df:1c:2e:4d:56:22:22:36:a6:6e:74: 9d:7b:95:14:98:fc:c7:09:c6:32:ac:1e:c6:64:d7: cc:89:b3:ef:fa:61:00:55:db:c5:c4:43:63:b2:cf: 91:07:57:aa:6e:04:56:ff:99:45:cf:0e:ef:a7:ca: 07:93:de:8c:8e:30:31:8c:86:2a:fe:bf:08:c9:f4: 30:96:55:3e:66:95:8c:60:b3:8b:74:59:12:57:be: bc:5b:f7:29:fb:85:12:4b:70:55:f5:bd:7f:67:de: d4:d2:c1:d5:9b:33:c3:ef:c8:38:72:61:7c:56:91: 27:b5:97:47:85:18:12:f3:43:f7:8b:dc:ee:8e:b8: 60:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C8:38:75:3F:38:D8:79:F7:F7:0A:8F:55:8D:A9:ED:0D:17:34:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2ad9d8b-30f4-3140-9d76-ed2f41f6980e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:f8:38:bf:8f:5e:1e:5a:25:88:9f:1d:5f:0c:71:f8:19:91: 3f:4a:8b:b3:ef:66:46:0a:6f:3f:9a:a7:c1:13:2f:08:86:7b: 96:aa:0d:d9:f7:fa:9f:c4:86:e1:66:e0:64:fb:37:34:32:b9: 05:2f:48:ed:e6:55:aa:96:f3:04:9f:12:5d:72:ca:f0:05:42: 16:9f:28:a8:20:91:bc:be:60:7b:4d:4b:79:0f:b1:9c:ee:da: 7c:ee:c7:d0:4e:a2:60:82:96:0e:38:23:9a:a0:b4:df:fa:2a: c6:9f:72:8e:e7:5c:1c:ba:1e:20:8f:00:64:cb:78:f9:b1:9b: 1f:30:ec:fe:fa:fb:8f:0c:dd:75:86:ec:60:14:62:83:d3:a3: 9a:96:0c:c3:6a:f7:87:bd:dc:31:22:d6:74:d1:60:8f:62:41: 6c:99:f8:d7:35:b6:a5:6d:94:c4:48:cf:70:c6:e0:3d:97:85: c8:43:15:7a:e5:dc:72:c7:4e:5d:de:30:7a:5d:c6:62:f7:19: 9f:fd:c4:80:3c:a3:49:4d:dc:c8:30:fa:3c:63:28:13:24:eb: 5d:15:ca:2d:73:e0:98:ce:80:6c:54:e5:e6:73:d5:e5:ca:20: 5e:d2:90:90:8a:a6:03:1c:c7:31:1a:7b:90:0e:1a:ae:af:88: 9a:ed:00:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gKGTtGX9A1xW58AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk Zjg4OTExYWMtMjZiMi00MDZlLWE5YTYtZjVlYWIyNmZlNzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGZAoU1oA4U+5k+xH0QumEfcyI99/LqE1yWU K2z6lCrGLk4wewo8MaO7d5oYjQga7Y26opxGmqy40WSUfRHn/37+nu2AM49luG0R dzAwm38ep3i8vRoFSrbieR8bzweNhKJJ/5pm/Lk+SQ/XmL4ALtGIBZvTG4oy4e38 3xwuTVYiIjambnSde5UUmPzHCcYyrB7GZNfMibPv+mEAVdvFxENjss+RB1eqbgRW /5lFzw7vp8oHk96MjjAxjIYq/r8IyfQwllU+ZpWMYLOLdFkSV768W/cp+4USS3BV 9b1/Z97U0sHVmzPD78g4cmF8VpEntZdHhRgS80P3i9zujrhgUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHIOHU/ONh59/cKj1WNqe0NFzR8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzJhZDlkOGItMzBmNC0z MTQwLTlkNzYtZWQyZjQxZjY5ODBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF87WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHr4OL+PXh5aJYifHV8McfgZkT9Ki7PvZkYKbz+ap8ETLwiGe5aqDdn3 +p/EhuFm4GT7NzQyuQUvSO3mVaqW8wSfEl1yyvAFQhafKKggkby+YHtNS3kPsZzu 2nzux9BOomCClg44I5qgtN/6Ksafco7nXBy6HiCPAGTLePmxmx8w7P76+48M3XWG 7GAUYoPTo5qWDMNq94e93DEi1nTRYI9iQWyZ+Nc1tqVtlMRIz3DG4D2XhchDFXrl 3HLHTl3eMHpdxmL3GZ/9xIA8o0lN3Mgw+jxjKBMk610Vyi1z4JjOgGxU5eZz1eXK IF7SkJCKpgMcxzEae5AOGq6viJrtAIo= -----END CERTIFICATE-----Generated at Tue Jul 22 19:33:31 2025 by rpki-client