$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d86d42b0-7ca2-3ccf-849e-f932f50a880c.roa File: d86d42b0-7ca2-3ccf-849e-f932f50a880c.roa (raw, json) Hash identifier: +ZtA0e2SiimjKJaKkYfM8mk2HZVybqyMtfdiv0iZMjs= Subject key identifier: 3A:93:C8:D3:BA:5F:1B:C5:FE:2A:B5:CF:09:89:28:E9:F1:03:B0:E4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A778098109998ED6323A42F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d86d42b0-7ca2-3ccf-849e-f932f50a880c.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.206.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:98:10:99:98:ed:63:23:a4:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=bcee6bfc-4b4b-49a5-a87b-daceb43f25ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0c:cb:61:8e:2e:e9:eb:f1:09:e9:23:c9:50: 37:fa:0d:e6:e7:78:e6:07:b5:d2:44:23:84:38:ad: d0:63:63:f6:b8:bd:94:64:0b:7a:62:f5:74:db:d8: 7b:76:ed:21:ee:1d:a0:d1:76:f8:e7:65:48:9e:13: 49:46:0e:e5:1e:33:39:b7:00:d0:d8:0a:4b:ec:07: 35:24:3e:0e:7c:4e:1d:2e:92:09:a2:30:e0:ef:18: 5b:27:ef:c2:6c:28:de:e6:3d:8e:b5:82:bf:df:08: 68:b5:9f:32:74:a2:ac:96:5a:e2:87:aa:20:73:79: bd:b0:be:dc:06:92:cb:fe:67:a5:8e:43:a1:cc:b4: 59:a5:af:12:2c:5e:55:b8:a5:cd:5b:e7:3f:66:8f: d5:89:08:87:5b:71:ee:05:e7:03:7a:46:2f:a2:11: 4b:d3:ee:a7:4f:ed:7e:20:75:a7:b0:b1:75:17:15: 59:01:2d:92:b0:e8:ab:5b:32:13:9d:6e:b0:48:74: 42:c1:f2:ba:48:93:ce:06:f7:bd:7a:75:8a:3d:1d: 7c:44:a2:a3:bf:91:1f:14:a0:b2:c0:39:fe:f9:04: 41:ba:50:a0:42:38:b6:f0:71:92:97:9e:74:44:10: 7e:65:15:74:f3:bf:6d:43:02:19:2d:59:7d:d8:75: c8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:93:C8:D3:BA:5F:1B:C5:FE:2A:B5:CF:09:89:28:E9:F1:03:B0:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d86d42b0-7ca2-3ccf-849e-f932f50a880c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:10:1d:2a:ac:ef:92:f6:d9:b5:9c:92:22:9b:1b:34:73:08: 96:26:19:38:ac:32:ab:04:73:87:1d:e6:2a:17:55:63:56:f6: 90:dc:d9:17:d1:16:7f:66:35:88:39:f3:ce:09:5f:86:b1:49: fc:52:c5:ba:c8:b6:20:0d:2a:40:17:73:8a:66:7c:b7:ad:9b: 16:ae:00:cf:26:75:20:6f:fe:11:bb:be:c3:39:4b:6c:c9:73: 02:04:78:06:02:ce:75:33:b0:fb:ec:4a:f7:83:8e:cd:81:1c: 7b:46:b7:16:ed:0c:38:16:fb:82:fc:b3:22:80:e1:25:bd:5f: 53:03:c4:a6:ec:6a:8f:5b:6d:5d:b7:29:c3:17:d9:c0:ae:16: 94:28:24:0c:f5:ac:cb:68:ad:6a:c7:f4:58:80:9b:36:32:bc: d7:1b:5d:ea:ef:76:4a:bc:05:e6:cf:1d:b4:f6:18:ac:4b:7a: 6f:25:df:92:f2:5b:b2:ab:df:ac:b1:31:98:39:40:37:b7:5d: 8e:6a:78:6c:09:52:be:e5:ed:00:1f:00:dd:8a:4e:e6:ec:d2: 49:86:ef:d3:58:8b:e7:dc:23:d0:a0:42:1f:13:5c:d8:03:18: b0:36:4d:86:51:af:03:51:e2:de:1a:a4:4c:09:21:fa:8c:aa: fc:e4:59:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gJgQmZjtYyOkLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk YmNlZTZiZmMtNGI0Yi00OWE1LWE4N2ItZGFjZWI0M2YyNWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwzLYY4u6evxCekjyVA3+g3m53jmB7XSRCOE OK3QY2P2uL2UZAt6YvV029h7du0h7h2g0Xb452VInhNJRg7lHjM5twDQ2ApL7Ac1 JD4OfE4dLpIJojDg7xhbJ+/CbCje5j2OtYK/3whotZ8ydKKsllrih6ogc3m9sL7c BpLL/meljkOhzLRZpa8SLF5VuKXNW+c/Zo/ViQiHW3HuBecDekYvohFL0+6nT+1+ IHWnsLF1FxVZAS2SsOirWzITnW6wSHRCwfK6SJPOBve9enWKPR18RKKjv5EfFKCy wDn++QRBulCgQji28HGSl550RBB+ZRV0879tQwIZLVl92HXIbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqTyNO6XxvF/iq1zwmJKOnxA7DkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDg2ZDQyYjAtN2NhMi0z Y2NmLTg0OWUtZjkzMmY1MGE4ODBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF87DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAQHSqs75L22bWckiKbGzRzCJYmGTisMqsEc4cd5ioXVWNW9pDc2RfR Fn9mNYg5884JX4axSfxSxbrItiANKkAXc4pmfLetmxauAM8mdSBv/hG7vsM5S2zJ cwIEeAYCznUzsPvsSveDjs2BHHtGtxbtDDgW+4L8syKA4SW9X1MDxKbsao9bbV23 KcMX2cCuFpQoJAz1rMtorWrH9FiAmzYyvNcbXervdkq8BebPHbT2GKxLem8l35Ly W7Kr36yxMZg5QDe3XY5qeGwJUr7l7QAfAN2KTubs0kmG79NYi+fcI9CgQh8TXNgD GLA2TYZRrwNR4t4apEwJIfqMqvzkWaE= -----END CERTIFICATE-----Generated at Tue Jul 22 19:31:54 2025 by rpki-client