$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dba02a91-f3d7-35ff-bdef-d63769965f7f.roa File: dba02a91-f3d7-35ff-bdef-d63769965f7f.roa (raw, json) Hash identifier: iBGFU2WkOCtAWLSQ5s+15E42fr/i8eTYF/bQXttw5bE= Subject key identifier: 98:39:66:02:B9:B3:72:6E:EA:7A:A9:31:3F:C1:DE:FD:43:4D:7B:42 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A6290B7D078BAB04E58D78CC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dba02a91-f3d7-35ff-bdef-d63769965f7f.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.195.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:b7:d0:78:ba:b0:4e:58:d7:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=d1c5de23-f9f8-4fe7-8f76-f9a58ce580e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1d:fc:b6:08:da:73:27:8f:cc:56:55:17:c8: 3a:35:06:8a:1d:4a:90:4c:69:e4:c6:39:b5:8a:2f: 41:49:12:45:02:97:86:c8:e8:24:a8:17:ac:01:55: f4:d5:9d:11:cf:11:16:7f:fd:8f:9f:a0:bf:39:f0: 5b:29:2c:fd:5a:ed:5e:c0:3f:7f:b1:93:2f:ad:99: 48:1b:8f:e4:c7:66:4f:b5:fe:6d:d1:ea:a7:46:ea: 0f:18:21:fd:b1:b1:54:be:05:3f:fa:2a:08:d0:14: d5:63:2c:dd:45:71:17:f9:ba:64:17:67:78:88:5e: d3:8b:ba:22:db:c8:d5:c2:84:68:b0:d2:9d:54:5f: 3c:34:25:d5:f4:86:fa:95:93:dc:fe:b5:51:e1:b8: 2a:88:bb:ca:59:b2:b9:cb:7d:10:b3:64:fc:73:16: 29:6e:f6:35:89:48:10:4d:67:5f:4d:2b:79:5f:c4: b0:d4:a1:b0:cf:4a:dd:b6:6d:1b:d0:69:61:6e:af: 37:90:f8:a2:32:d6:d4:29:f0:70:16:84:38:83:68: 80:0a:f5:69:9d:30:01:1d:39:af:45:9a:69:bb:ea: 86:03:57:fd:e3:41:7b:b4:80:5e:7a:b9:9a:fb:57: 53:9c:8f:84:e5:0a:12:27:57:86:44:96:d0:a1:fd: e5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:39:66:02:B9:B3:72:6E:EA:7A:A9:31:3F:C1:DE:FD:43:4D:7B:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dba02a91-f3d7-35ff-bdef-d63769965f7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:ef:06:9e:5d:e3:aa:ac:69:b3:d3:13:ce:6f:f6:c2:2c:54: b6:7f:cd:66:47:c9:89:a4:ac:08:37:bd:09:27:a7:d5:09:62: 7e:1b:76:82:b2:3d:91:7f:5d:35:11:9f:8b:d0:4f:5b:48:38: a5:e4:11:29:62:84:e1:16:f5:b8:58:6c:c1:35:c2:d5:40:7f: b2:28:d5:0e:f1:08:a5:91:29:af:c8:4b:70:e0:f5:2e:6a:17: 41:ed:46:cc:8c:d5:e2:2f:1d:26:f7:14:63:87:d9:04:f6:75: 97:3b:2a:39:e3:71:48:5b:97:9f:16:cf:f3:1f:79:ae:34:05: 10:37:f6:38:7c:67:55:76:f6:fa:db:9e:70:36:91:da:e6:67: c3:08:19:25:e3:59:6e:e2:20:82:16:87:74:95:98:ff:d2:2d: da:68:e4:01:d8:3c:ff:f1:7a:76:fe:61:e7:aa:d1:07:85:89: 2a:4b:24:82:cd:59:ff:88:37:c4:91:55:de:2f:e4:b8:ee:2d: dc:55:1e:4f:e0:f8:96:7a:7a:91:87:73:4b:18:d7:e5:26:94: 65:e8:d1:72:62:9d:9a:5e:9f:55:76:8c:02:9b:f6:f3:ac:b3: a3:15:29:08:42:c0:ca:34:e8:ee:a4:be:d3:99:97:37:b4:3e: 92:0a:0d:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikLfQeLqwTljXjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk ZDFjNWRlMjMtZjlmOC00ZmU3LThmNzYtZjlhNThjZTU4MGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkR38tgjacyePzFZVF8g6NQaKHUqQTGnkxjm1 ii9BSRJFApeGyOgkqBesAVX01Z0RzxEWf/2Pn6C/OfBbKSz9Wu1ewD9/sZMvrZlI G4/kx2ZPtf5t0eqnRuoPGCH9sbFUvgU/+ioI0BTVYyzdRXEX+bpkF2d4iF7Ti7oi 28jVwoRosNKdVF88NCXV9Ib6lZPc/rVR4bgqiLvKWbK5y30Qs2T8cxYpbvY1iUgQ TWdfTSt5X8Sw1KGwz0rdtm0b0Glhbq83kPiiMtbUKfBwFoQ4g2iACvVpnTABHTmv RZppu+qGA1f940F7tIBeerma+1dTnI+E5QoSJ1eGRJbQof3lsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJg5ZgK5s3Ju6nqpMT/B3v1DTXtCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGJhMDJhOTEtZjNkNy0z NWZmLWJkZWYtZDYzNzY5OTY1ZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8MXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7vBp5d46qsabPTE85v9sIsVLZ/zWZHyYmkrAg3vQknp9UJYn4bdoKy PZF/XTURn4vQT1tIOKXkESlihOEW9bhYbME1wtVAf7Io1Q7xCKWRKa/IS3Dg9S5q F0HtRsyM1eIvHSb3FGOH2QT2dZc7KjnjcUhbl58Wz/Mfea40BRA39jh8Z1V29vrb nnA2kdrmZ8MIGSXjWW7iIIIWh3SVmP/SLdpo5AHYPP/xenb+Yeeq0QeFiSpLJILN Wf+IN8SRVd4v5LjuLdxVHk/g+JZ6epGHc0sY1+UmlGXo0XJinZpen1V2jAKb9vOs s6MVKQhCwMo06O6kvtOZlze0PpIKDSY= -----END CERTIFICATE-----Generated at Tue Jul 22 19:31:06 2025 by rpki-client