$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c37270dd-be6b-343e-86ce-878d2f0ab20b.roa File: c37270dd-be6b-343e-86ce-878d2f0ab20b.roa (raw, json) Hash identifier: km/Ht0JkvVZq+sbFDvx9pyl35jHChsbbm4iOzf+Gqqg= Subject key identifier: 28:1A:6D:CA:CB:37:CC:99:69:3C:E9:01:30:DE:5D:66:E5:41:C1:D8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7D160693FE3F3C6ED13DD680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c37270dd-be6b-343e-86ce-878d2f0ab20b.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.215.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:16:06:93:fe:3f:3c:6e:d1:3d:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=74f6d02c-f75e-4161-a5a4-1e3468da46e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ea:5e:cc:14:e9:0f:ca:cb:a2:13:13:8c:c5: eb:91:07:aa:11:8f:65:16:13:b6:f6:bc:88:ae:bc: 2f:aa:05:91:fb:92:8c:db:d8:16:b9:16:f4:e7:08: eb:8e:a1:e9:60:58:b6:ac:19:b5:6a:c7:63:98:b5: f1:76:7a:aa:c2:91:2a:67:b2:b9:6c:7b:56:a3:ff: 94:ce:ad:a1:73:9d:09:ce:6d:d7:66:59:60:eb:d9: 57:fa:bd:da:c8:4b:82:07:e6:df:97:41:63:42:e5: df:c3:64:e8:2a:29:8f:b6:37:0e:1f:44:9a:26:5d: d2:b8:0f:b1:f4:96:f6:f4:05:51:0d:d3:4b:b7:10: 11:3c:41:41:5e:4a:e1:a8:d2:38:10:30:3a:27:c6: 1f:e0:dc:a9:2c:9f:56:f7:79:cb:09:9a:6e:8e:f1: 3a:64:13:02:eb:99:e2:50:9f:ce:7d:80:61:29:a4: d4:27:90:d6:be:f5:42:f9:28:55:41:b0:e2:26:90: 96:21:f7:c0:a5:f2:51:c1:c8:4a:d1:de:71:b5:2a: 8c:d5:b2:db:9b:df:f5:d1:e1:c6:0b:05:5f:f1:59: 67:c4:10:e5:ef:ca:19:93:53:2d:a0:bf:f2:0e:f3: 33:49:a6:43:9d:19:44:61:93:6a:e9:7f:20:8d:7b: db:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1A:6D:CA:CB:37:CC:99:69:3C:E9:01:30:DE:5D:66:E5:41:C1:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c37270dd-be6b-343e-86ce-878d2f0ab20b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:f4:d1:05:c6:a6:43:d8:b0:ea:42:a2:c6:b8:a4:f8:f8:b2: 2a:9d:23:3b:34:62:9e:41:e3:83:9b:04:40:9a:2b:91:dd:f1: 4c:de:b8:e2:50:fb:83:5d:04:b1:26:97:50:2c:e6:27:fb:0d: 70:ac:c4:4b:46:d5:6f:76:eb:e5:c1:03:52:aa:fd:5c:83:06: f8:79:d4:ba:c0:20:7d:82:21:4c:0f:e9:ec:24:fc:d4:c5:72: cb:7d:16:c9:34:aa:1a:2e:52:b5:3d:7a:0c:b0:2c:3a:ff:ff: fc:98:17:f2:d9:fe:76:21:ea:dd:de:54:79:66:c8:59:6d:d2: b1:30:d3:30:10:fa:ae:44:69:f3:98:a2:c9:bd:af:7b:6c:a0: fd:b6:c7:14:75:1a:4c:cb:63:34:61:6f:f1:fc:d2:0e:4c:86: c9:fb:3e:a8:07:7e:98:6d:cd:e9:18:e0:e1:1f:01:cb:8b:52: 9e:41:63:ef:c3:5f:a3:16:2d:b3:4d:2c:37:c6:e2:a5:0d:cf: e2:52:73:b1:28:0a:a0:11:f2:79:9d:e3:ca:b3:1c:75:4a:2c: 11:0f:93:25:09:3b:35:c6:a7:1a:f4:42:9e:d6:7a:75:3b:c6: 9c:a0:fb:a8:1c:6c:73:ca:95:e0:1b:b2:70:06:72:5a:59:4e: c7:a2:e9:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FgaT/j88btE91oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk NzRmNmQwMmMtZjc1ZS00MTYxLWE1YTQtMWUzNDY4ZGE0NmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOpezBTpD8rLohMTjMXrkQeqEY9lFhO29ryI rrwvqgWR+5KM29gWuRb05wjrjqHpYFi2rBm1asdjmLXxdnqqwpEqZ7K5bHtWo/+U zq2hc50Jzm3XZllg69lX+r3ayEuCB+bfl0FjQuXfw2ToKimPtjcOH0SaJl3SuA+x 9Jb29AVRDdNLtxARPEFBXkrhqNI4EDA6J8Yf4NypLJ9W93nLCZpujvE6ZBMC65ni UJ/OfYBhKaTUJ5DWvvVC+ShVQbDiJpCWIffApfJRwchK0d5xtSqM1bLbm9/10eHG CwVf8VlnxBDl78oZk1MtoL/yDvMzSaZDnRlEYZNq6X8gjXvb4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgabcrLN8yZaTzpATDeXWblQcHYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzM3MjcwZGQtYmU2Yi0z NDNlLTg2Y2UtODc4ZDJmMGFiMjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9eCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAb00QXGpkPYsOpCosa4pPj4siqdIzs0Yp5B44ObBECaK5Hd8UzeuOJQ +4NdBLEml1As5if7DXCsxEtG1W926+XBA1Kq/VyDBvh51LrAIH2CIUwP6ewk/NTF cst9Fsk0qhouUrU9egywLDr///yYF/LZ/nYh6t3eVHlmyFlt0rEw0zAQ+q5EafOY osm9r3tsoP22xxR1GkzLYzRhb/H80g5Mhsn7PqgHfphtzekY4OEfAcuLUp5BY+/D X6MWLbNNLDfG4qUNz+JSc7EoCqAR8nmd48qzHHVKLBEPkyUJOzXGpxr0Qp7WenU7 xpyg+6gcbHPKleAbsnAGclpZTsei6b8= -----END CERTIFICATE-----Generated at Thu Jul 24 11:52:25 2025 by rpki-client