$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cde981e5-2298-3e4b-8c84-fa4aa8435a2f.roa File: cde981e5-2298-3e4b-8c84-fa4aa8435a2f.roa (raw, json) Hash identifier: Im1oZXAzVqQwcFekMrlnSIgC/e+cRsK7Oqki2ZWgbWg= Subject key identifier: 71:24:F8:9C:CC:4B:FA:7B:55:EE:8C:90:DE:D7:BF:E6:1C:1B:BC:C5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A6290A9854E8FCFB76232E5C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cde981e5-2298-3e4b-8c84-fa4aa8435a2f.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16625 IP address blocks: 23.198.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:a9:85:4e:8f:cf:b7:62:32:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=6a4095a0-5a9a-4476-8b64-fc251bfa2379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b1:c1:1d:99:4d:00:6d:4b:a4:1e:db:0f:b7: d0:0b:b4:86:86:41:69:a5:76:a6:27:60:aa:94:60: b4:b4:9b:68:82:6a:91:1c:6f:65:55:2f:1c:fa:c4: 45:94:d2:54:ab:95:3b:7d:77:59:84:76:97:c7:a7: eb:c9:80:53:75:ef:eb:00:a3:d3:98:92:7a:46:6b: 60:34:a9:67:9c:ca:9c:ff:d2:6d:bd:66:e8:7d:d3: 16:ef:16:e3:54:bd:46:96:23:f4:9a:b5:11:d6:e7: 30:4f:a9:e5:cc:9f:e0:33:44:d6:2b:0d:09:3d:8a: e1:36:e0:7a:ce:72:e7:95:5f:81:fe:11:23:92:47: d5:4e:61:a0:0f:d5:89:91:d4:7f:eb:c8:af:1a:49: 13:94:46:c1:40:c5:ec:3f:d3:5c:21:74:64:2e:02: a9:9b:c2:34:21:2b:be:1b:f7:08:dd:d9:17:fe:5e: 65:3e:6b:55:8f:26:2d:dc:d9:6e:fa:cf:5f:e0:63: 62:f1:4c:eb:7f:7f:a5:c1:49:11:44:65:fd:5c:5d: 7b:12:35:d4:29:40:29:fd:23:e1:8f:c0:c4:70:e3: 31:24:f6:a3:23:bc:c9:58:91:f6:69:0f:ab:9b:25: 21:3c:eb:c2:05:53:78:a9:3d:81:9e:5c:74:30:dc: a3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:24:F8:9C:CC:4B:FA:7B:55:EE:8C:90:DE:D7:BF:E6:1C:1B:BC:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cde981e5-2298-3e4b-8c84-fa4aa8435a2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.198.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:d1:40:71:8a:c7:20:d9:ae:d4:15:d1:9c:9b:e7:4e:6f:e2: be:30:68:dc:74:d2:12:ea:62:97:68:55:64:d0:7c:27:d9:24: 69:19:4c:53:31:16:c3:91:8c:9f:ac:c3:d1:27:2f:bf:37:6d: 01:1f:be:6b:b9:74:22:89:81:b8:34:c2:0d:d9:84:4d:f8:04: 8f:67:7a:90:89:d5:a2:32:a9:ad:e2:e4:0f:2a:fb:ba:6c:49: 9b:21:15:48:b1:2d:54:50:50:eb:1c:3b:9f:c9:aa:a6:51:b2: 70:96:d1:5e:d5:3a:6f:1a:d6:20:82:56:e8:99:49:12:71:37: 2d:6b:46:15:67:cc:e2:b9:6c:06:a4:83:33:13:b3:a2:48:2e: df:ec:d7:57:3a:c0:45:72:95:6d:cf:ee:6e:e7:ec:5c:f2:6d: 7a:c7:d2:4b:f3:78:6d:e0:cc:40:a8:36:85:aa:d6:7d:84:8c: ca:88:5e:a2:f8:d7:83:24:f7:e6:dc:8b:f0:36:8c:80:5a:2d: 87:df:e1:42:78:73:25:5a:78:87:67:34:0d:76:f8:c5:30:6c: b9:4b:78:0e:6f:6e:d5:33:7e:af:f4:e5:af:fe:13:3d:13:67: 01:b2:78:9b:34:d2:a4:2a:cb:c0:48:be:90:c0:31:52:f2:6b: ee:83:a4:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikKmFTo/Pt2Iy5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk NmE0MDk1YTAtNWE5YS00NDc2LThiNjQtZmMyNTFiZmEyMzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbHBHZlNAG1LpB7bD7fQC7SGhkFppXamJ2Cq lGC0tJtogmqRHG9lVS8c+sRFlNJUq5U7fXdZhHaXx6fryYBTde/rAKPTmJJ6Rmtg NKlnnMqc/9JtvWbofdMW7xbjVL1GliP0mrUR1ucwT6nlzJ/gM0TWKw0JPYrhNuB6 znLnlV+B/hEjkkfVTmGgD9WJkdR/68ivGkkTlEbBQMXsP9NcIXRkLgKpm8I0ISu+ G/cI3dkX/l5lPmtVjyYt3Nlu+s9f4GNi8Uzrf3+lwUkRRGX9XF17EjXUKUAp/SPh j8DEcOMxJPajI7zJWJH2aQ+rmyUhPOvCBVN4qT2Bnlx0MNyjjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEk+JzMS/p7Ve6MkN7Xv+YcG7zFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2RlOTgxZTUtMjI5OC0z ZTRiLThjODQtZmE0YWE4NDM1YTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8YwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbRQHGKxyDZrtQV0Zyb505v4r4waNx00hLqYpdoVWTQfCfZJGkZTFMx FsORjJ+sw9EnL783bQEfvmu5dCKJgbg0wg3ZhE34BI9nepCJ1aIyqa3i5A8q+7ps SZshFUixLVRQUOscO5/JqqZRsnCW0V7VOm8a1iCCVuiZSRJxNy1rRhVnzOK5bAak gzMTs6JILt/s11c6wEVylW3P7m7n7FzybXrH0kvzeG3gzECoNoWq1n2EjMqIXqL4 14Mk9+bci/A2jIBaLYff4UJ4cyVaeIdnNA12+MUwbLlLeA5vbtUzfq/05a/+Ez0T ZwGyeJs00qQqy8BIvpDAMVLya+6DpKA= -----END CERTIFICATE-----Generated at Tue Jul 22 19:34:16 2025 by rpki-client