$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5cb6eb7-d5cc-300a-a286-50e67e043794.roa File: c5cb6eb7-d5cc-300a-a286-50e67e043794.roa (raw, json) Hash identifier: Iw3/vM/T5CCvi958jVUKsacQWHxbYTq74VhCjLHSuaE= Subject key identifier: 8F:5D:36:72:2B:9A:17:DA:B7:72:C5:70:77:7C:05:8C:85:7F:1A:FC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8B0B73FD0B958884FA0AE1C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5cb6eb7-d5cc-300a-a286-50e67e043794.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.223.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:73:fd:0b:95:88:84:fa:0a:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=3e85d8a5-4328-4332-af5d-5719609d0eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:49:7e:7f:3a:e2:5f:f5:d1:c4:0b:0c:2b:c9: 29:80:76:3c:d2:61:8a:a3:f5:86:64:7d:90:d2:ea: ce:bd:06:8e:b7:d4:26:76:f9:8f:1f:f6:8b:39:08: c6:40:89:f4:57:5e:0d:c7:15:93:68:ad:c3:e1:1c: 1b:1e:fd:39:33:2b:5f:c8:3f:fc:67:49:b7:0e:dc: 88:34:e1:79:ca:6f:ba:65:b3:36:a1:ca:04:90:17: b1:82:9b:3d:7b:ec:91:87:4a:37:82:3f:30:72:3a: 53:5e:58:6c:be:6d:e6:6c:db:f7:f9:1d:1a:69:a6: 99:86:25:48:16:09:97:6d:ff:5c:56:4d:1d:e2:eb: 9e:19:b3:44:e9:d0:f1:00:5a:e5:66:a2:7e:68:60: 3e:76:b1:43:80:e0:b0:41:50:07:38:63:2f:81:d8: 01:15:16:88:65:9f:d9:ac:88:d5:49:4f:fd:c6:23: 3c:9b:3f:df:58:39:07:35:b5:7a:a8:9d:d6:af:24: 7f:f3:3f:9a:96:b1:b4:b5:47:68:87:b1:2d:03:69: 00:66:50:2f:ba:32:eb:26:7e:3a:54:cc:36:b9:e2: 67:ec:86:55:b4:f0:c1:1b:77:3d:66:6b:2c:28:60: ef:32:09:00:65:d7:b7:49:bd:64:6e:f1:96:b6:29: 4d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:5D:36:72:2B:9A:17:DA:B7:72:C5:70:77:7C:05:8C:85:7F:1A:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5cb6eb7-d5cc-300a-a286-50e67e043794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:93:1d:b4:b1:e2:57:e3:87:70:a1:67:87:94:12:ac:9f:82: 08:2e:20:28:9a:c8:ac:81:c5:7f:e3:ed:2a:32:72:6b:3d:2b: c6:42:c1:b0:70:2a:a6:97:ee:c1:42:72:9c:c5:a3:8f:b8:a7: 44:a7:d9:72:f3:3b:6f:02:49:44:85:3c:84:61:8c:9c:84:d0: 58:ff:7f:84:77:fd:ca:10:f9:7f:53:a8:03:19:11:a3:77:5a: 9e:a9:c2:aa:78:99:40:69:9c:c1:bd:30:95:ce:9b:9f:7e:f4: 51:3e:93:12:51:dd:6b:ff:55:58:fe:88:e5:46:d1:dc:d7:65: 73:9d:1c:52:65:d6:62:cc:7d:ed:bc:c5:f6:61:50:62:5f:6f: 4c:7b:18:92:77:6d:cc:29:b8:9b:26:31:73:e5:1a:39:b9:2f: 26:32:52:83:df:23:32:8c:7c:33:b7:37:f9:4b:41:94:36:49: 0e:9b:51:07:d1:28:92:7e:c9:5b:c8:23:34:9d:fc:18:9b:66: a5:9d:fb:e8:d4:a3:75:2a:be:26:e0:6d:20:f0:93:4e:30:6b: 46:1a:ba:3d:0e:e5:c0:62:92:d3:dc:ba:c4:4a:90:4a:ef:f9: 63:1a:9f:17:30:59:27:60:1a:b0:64:c8:d8:a6:9f:7e:92:93: 31:1e:e6:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC3P9C5WIhPoK4cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk M2U4NWQ4YTUtNDMyOC00MzMyLWFmNWQtNTcxOTYwOWQwZWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEl+fzriX/XRxAsMK8kpgHY80mGKo/WGZH2Q 0urOvQaOt9QmdvmPH/aLOQjGQIn0V14NxxWTaK3D4RwbHv05MytfyD/8Z0m3DtyI NOF5ym+6ZbM2ocoEkBexgps9e+yRh0o3gj8wcjpTXlhsvm3mbNv3+R0aaaaZhiVI FgmXbf9cVk0d4uueGbNE6dDxAFrlZqJ+aGA+drFDgOCwQVAHOGMvgdgBFRaIZZ/Z rIjVSU/9xiM8mz/fWDkHNbV6qJ3WryR/8z+alrG0tUdoh7EtA2kAZlAvujLrJn46 VMw2ueJn7IZVtPDBG3c9ZmssKGDvMgkAZde3Sb1kbvGWtilNUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9dNnIrmhfat3LFcHd8BYyFfxr8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzVjYjZlYjctZDVjYy0z MDBhLWEyODYtNTBlNjdlMDQzNzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKTHbSx4lfjh3ChZ4eUEqyfggguICiayKyBxX/j7Soycms9K8ZCwbBw KqaX7sFCcpzFo4+4p0Sn2XLzO28CSUSFPIRhjJyE0Fj/f4R3/coQ+X9TqAMZEaN3 Wp6pwqp4mUBpnMG9MJXOm59+9FE+kxJR3Wv/VVj+iOVG0dzXZXOdHFJl1mLMfe28 xfZhUGJfb0x7GJJ3bcwpuJsmMXPlGjm5LyYyUoPfIzKMfDO3N/lLQZQ2SQ6bUQfR KJJ+yVvIIzSd/BibZqWd++jUo3UqvibgbSDwk04wa0Yauj0O5cBiktPcusRKkErv +WManxcwWSdgGrBkyNimn36SkzEe5oE= -----END CERTIFICATE-----Generated at Thu Jul 24 00:04:18 2025 by rpki-client