$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6a8302e-3d56-3908-a03a-db2d6db6f4d2.roa File: d6a8302e-3d56-3908-a03a-db2d6db6f4d2.roa (raw, json) Hash identifier: M9Ce1OkQgDNWlOsvOTytCpOdFOoh96162qOlpQk1/5Y= Subject key identifier: A3:F6:88:D8:10:A9:E4:23:1D:FB:4C:96:A0:39:97:00:FE:82:C3:8B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8840A3A9F916DE522BCDAB40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6a8302e-3d56-3908-a03a-db2d6db6f4d2.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 20940 IP address blocks: 23.218.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:a3:a9:f9:16:de:52:2b:cd:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=48d4ea14-c181-40f9-a43e-cf6834525ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:96:c5:93:00:cc:69:70:22:e0:4e:19:86:01: 4c:d7:31:01:63:05:28:f5:ae:41:26:34:1d:a9:61: 0d:44:c5:19:99:bd:94:9f:5e:50:2d:5c:51:fe:78: b9:b4:37:53:91:37:87:9c:bb:25:08:61:c3:44:2d: 87:d8:76:0e:6f:8d:c0:3f:75:c1:d4:da:82:a1:d1: a1:b9:db:44:1d:2e:53:d1:2b:51:98:5b:9f:47:30: 69:03:b1:12:1c:17:38:6b:8a:1f:39:ec:48:b2:f9: 58:a4:2a:2f:2b:07:aa:37:57:45:ef:32:46:2f:3a: 55:f9:35:b6:33:00:44:fd:9d:d0:b5:10:24:03:87: 7b:0e:6e:2a:f2:5e:1d:58:b7:9b:85:96:4f:15:5a: c7:00:83:3d:15:df:7d:f2:1f:e8:0d:88:52:39:38: ac:c9:50:ae:81:31:a2:37:7b:f0:11:7c:94:71:ba: 66:02:bd:29:e5:f8:b8:67:ba:1c:41:12:1e:06:dc: 00:a8:cb:0f:0f:71:ab:1f:15:b9:f9:70:a7:53:b3: 61:2c:b7:e5:d0:fd:e2:c1:08:a8:86:c5:41:7c:3c: 42:13:7a:d0:7f:17:92:6f:77:bc:7c:45:e4:17:5b: 14:e3:52:0e:d6:4a:42:b5:f5:dc:2f:29:ca:80:aa: a0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F6:88:D8:10:A9:E4:23:1D:FB:4C:96:A0:39:97:00:FE:82:C3:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6a8302e-3d56-3908-a03a-db2d6db6f4d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:10:e0:c5:bb:e6:8f:9e:8c:d1:3b:cb:80:cb:25:02:a0:13: ad:0a:e1:bf:17:9b:38:bf:32:05:1e:a9:f6:7e:13:04:13:4e: 22:4c:a5:bf:ad:09:19:fe:df:ea:3c:14:b9:9e:58:df:11:b0: 37:3b:7b:90:7e:3a:d4:d7:69:e8:ec:45:7c:5c:0d:7c:80:b2: 0e:75:00:13:4d:12:18:4d:ea:46:b6:62:4f:fe:29:8e:04:5b: 48:40:ca:56:62:20:67:13:83:7c:73:24:54:37:4d:f6:53:07: fc:44:a8:37:e6:b8:85:c0:a3:d4:46:b9:27:40:4e:86:79:3d: 31:d1:5a:a7:f8:49:11:f5:b9:57:46:1f:10:01:37:2b:47:35: 67:e8:e6:d1:ce:34:8c:24:41:1c:54:50:53:e1:1a:91:38:f6: 75:1e:55:f1:e4:47:31:20:65:27:14:d2:06:a3:e7:cb:cd:f0: b3:1e:12:61:d8:bc:8d:e1:15:a8:a1:67:e8:55:f8:4a:73:e7: e7:92:7b:67:85:6c:4d:e2:8a:3a:af:fd:2d:1e:c5:58:b8:d8: 48:a2:3f:7c:2e:ba:15:b7:0e:1a:d9:ce:ff:96:14:6c:6b:17: 92:75:71:4b:c1:d3:5e:ca:7e:11:ee:47:36:dd:37:66:54:d5: 1b:63:dc:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQKOp+RbeUivNq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk NDhkNGVhMTQtYzE4MS00MGY5LWE0M2UtY2Y2ODM0NTI1ZWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5bFkwDMaXAi4E4ZhgFM1zEBYwUo9a5BJjQd qWENRMUZmb2Un15QLVxR/ni5tDdTkTeHnLslCGHDRC2H2HYOb43AP3XB1NqCodGh udtEHS5T0StRmFufRzBpA7ESHBc4a4ofOexIsvlYpCovKweqN1dF7zJGLzpV+TW2 MwBE/Z3QtRAkA4d7Dm4q8l4dWLebhZZPFVrHAIM9Fd998h/oDYhSOTisyVCugTGi N3vwEXyUcbpmAr0p5fi4Z7ocQRIeBtwAqMsPD3GrHxW5+XCnU7NhLLfl0P3iwQio hsVBfDxCE3rQfxeSb3e8fEXkF1sU41IO1kpCtfXcLynKgKqgnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKP2iNgQqeQjHftMlqA5lwD+gsOLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDZhODMwMmUtM2Q1Ni0z OTA4LWEwM2EtZGIyZDZkYjZmNGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9r5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMQ4MW75o+ejNE7y4DLJQKgE60K4b8Xmzi/MgUeqfZ+EwQTTiJMpb+t CRn+3+o8FLmeWN8RsDc7e5B+OtTXaejsRXxcDXyAsg51ABNNEhhN6ka2Yk/+KY4E W0hAylZiIGcTg3xzJFQ3TfZTB/xEqDfmuIXAo9RGuSdAToZ5PTHRWqf4SRH1uVdG HxABNytHNWfo5tHONIwkQRxUUFPhGpE49nUeVfHkRzEgZScU0gaj58vN8LMeEmHY vI3hFaihZ+hV+Epz5+eSe2eFbE3iijqv/S0exVi42EiiP3wuuhW3DhrZzv+WFGxr F5J1cUvB017KfhHuRzbdN2ZU1Rtj3O8= -----END CERTIFICATE-----Generated at Tue Jul 22 19:30:32 2025 by rpki-client