$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0a76117-0549-3d0f-aade-4a99651f86df.roa File: d0a76117-0549-3d0f-aade-4a99651f86df.roa (raw, json) Hash identifier: mpEIx1NwD3UJvdWU9DSXVYn5A7v2eZ+ec2NQJxUudDc= Subject key identifier: 10:2D:49:30:46:1D:27:95:FC:28:26:58:73:8E:1A:20:30:B4:A2:EC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A77809347702FDA8E1B215D20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0a76117-0549-3d0f-aade-4a99651f86df.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.204.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:93:47:70:2f:da:8e:1b:21:5d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=ef30ccb1-23e5-44d5-a078-d3d867f6c017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d1:f5:1f:a7:44:d3:6b:f5:56:21:43:56:f5: 58:04:93:32:70:6f:76:a5:e5:00:82:53:38:1b:a1: 15:3e:d4:96:53:ab:08:cd:63:9e:bb:f1:e9:39:13: 00:84:ca:ff:98:2f:0c:cb:3c:ee:b3:64:44:b4:60: 0b:d9:e9:36:15:40:bd:6e:a3:5f:37:67:4a:d4:33: 30:ca:49:7d:eb:78:42:5e:87:9a:a3:1e:c4:b7:18: b1:63:d8:09:12:0a:f4:ad:58:43:6c:e1:40:68:1a: c2:99:c7:c0:53:f5:4f:f5:83:36:f8:1e:97:32:92: dc:1e:36:b6:63:1f:8c:64:9f:63:7f:06:98:ad:ae: f1:c1:02:66:71:74:cf:51:b6:e5:30:ce:48:a1:e2: 43:1f:2a:49:22:81:4c:bd:ac:af:4c:8b:2b:4d:f0: 17:48:61:1b:90:b8:f0:77:0c:d4:8f:77:a7:3e:9f: 0c:e0:53:08:36:1a:35:bb:e3:06:46:47:54:6e:e3: f9:8f:89:e9:b4:32:77:e6:2a:a6:27:1c:f4:69:d4: 55:2d:43:15:c1:0c:64:7e:bd:12:84:5b:24:f2:d3: 52:96:d2:0c:8e:70:0e:f5:ed:f1:8a:c5:c8:26:21: fd:47:ba:45:f4:b1:ec:18:04:4c:12:8d:33:0b:a2: d7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2D:49:30:46:1D:27:95:FC:28:26:58:73:8E:1A:20:30:B4:A2:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0a76117-0549-3d0f-aade-4a99651f86df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:65:3a:85:1c:b3:cd:d9:dc:bb:1d:78:86:b1:ae:45:39:7c: 71:b8:66:b1:7a:3f:5d:b6:cb:a2:db:12:f9:0a:28:03:77:44: ba:f3:f0:91:23:fa:8b:50:6f:e9:5b:15:b4:62:06:55:af:66: 40:c3:bc:e8:40:a3:8c:a8:63:ff:85:86:3d:5c:de:2d:5d:9b: 78:dd:cb:94:a2:25:25:6e:9b:72:19:a6:81:cd:6a:aa:3f:cc: 22:7c:41:96:e4:de:d1:65:a3:a6:8a:e7:d9:50:01:be:8a:bd: 33:87:10:ec:66:07:98:eb:6a:af:30:e9:ed:00:41:2c:a0:97: 68:97:0f:db:01:f6:1e:03:a5:a0:f2:ef:4d:b9:7e:0e:f9:84: 00:9f:f5:13:c7:97:58:3f:3d:54:b8:8b:07:2b:15:75:59:52: 5f:f7:4e:f8:88:c2:f4:af:68:f2:c7:c4:97:32:37:6e:a8:4b: d1:97:1a:89:83:d5:2d:c8:15:cf:9d:0f:a0:ea:8d:4e:ce:d9: 73:a1:c0:a5:ab:67:80:ef:56:a4:3d:43:2b:e7:7f:1c:3c:88: ea:b4:c8:b3:74:62:56:5e:e4:b9:2d:eb:f8:88:9b:4c:70:09: 51:b7:ec:92:af:f8:a1:7e:39:5e:bb:55:f4:8b:eb:2f:b0:ae: 10:da:e9:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gJNHcC/ajhshXSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk ZWYzMGNjYjEtMjNlNS00NGQ1LWEwNzgtZDNkODY3ZjZjMDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9H1H6dE02v1ViFDVvVYBJMycG92peUAglM4 G6EVPtSWU6sIzWOeu/HpORMAhMr/mC8Myzzus2REtGAL2ek2FUC9bqNfN2dK1DMw ykl963hCXoeaox7EtxixY9gJEgr0rVhDbOFAaBrCmcfAU/VP9YM2+B6XMpLcHja2 Yx+MZJ9jfwaYra7xwQJmcXTPUbblMM5IoeJDHypJIoFMvayvTIsrTfAXSGEbkLjw dwzUj3enPp8M4FMINho1u+MGRkdUbuP5j4nptDJ35iqmJxz0adRVLUMVwQxkfr0S hFsk8tNSltIMjnAO9e3xisXIJiH9R7pF9LHsGARMEo0zC6LX/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAtSTBGHSeV/CgmWHOOGiAwtKLsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDBhNzYxMTctMDU0OS0z ZDBmLWFhZGUtNGE5OTY1MWY4NmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8xuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVlOoUcs83Z3LsdeIaxrkU5fHG4ZrF6P122y6LbEvkKKAN3RLrz8JEj +otQb+lbFbRiBlWvZkDDvOhAo4yoY/+Fhj1c3i1dm3jdy5SiJSVum3IZpoHNaqo/ zCJ8QZbk3tFlo6aK59lQAb6KvTOHEOxmB5jraq8w6e0AQSygl2iXD9sB9h4DpaDy 7025fg75hACf9RPHl1g/PVS4iwcrFXVZUl/3TviIwvSvaPLHxJcyN26oS9GXGomD 1S3IFc+dD6DqjU7O2XOhwKWrZ4DvVqQ9Qyvnfxw8iOq0yLN0YlZe5Lkt6/iIm0xw CVG37JKv+KF+OV67VfSL6y+wrhDa6R0= -----END CERTIFICATE-----Generated at Tue Jul 22 19:33:33 2025 by rpki-client