$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc784d9f-54df-39c2-a92f-0b4583f0c54c.roa File: dc784d9f-54df-39c2-a92f-0b4583f0c54c.roa (raw, json) Hash identifier: Y9kh5iMqPD51SeMEzorYngZI5aXkKZjY4U2DzuVI6E4= Subject key identifier: AE:D8:1E:04:4B:05:1E:07:66:AA:48:ED:B9:BC:CD:54:85:64:FE:3A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7A4B5D8623FB8B2525B87960 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc784d9f-54df-39c2-a92f-0b4583f0c54c.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 16625 IP address blocks: 23.212.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:5d:86:23:fb:8b:25:25:b8:79:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=a8962367-afab-44f1-b125-d7b42c505d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a3:4a:f3:73:4a:33:d8:00:7c:eb:41:57:e0: 31:4d:3b:ed:1b:d8:bd:d9:04:c8:9a:cd:42:4d:97: 65:a1:53:87:53:dc:81:73:87:b2:a0:c3:91:1d:90: 30:d6:8e:6f:df:a3:de:2f:8c:36:06:d3:bc:bc:ea: 96:e1:d1:8f:12:d9:ca:fd:17:a3:62:c4:b3:02:6f: 2e:80:a2:ec:64:ac:aa:45:b9:a8:65:de:97:b8:13: 21:25:8f:d7:35:55:87:ab:85:18:f3:fc:3a:64:0c: c5:0c:3c:f6:f4:da:fd:79:9f:09:f3:c3:2c:d6:69: f2:6d:94:e5:fb:83:37:37:f5:99:54:57:26:42:0b: 78:01:63:7e:23:f9:cc:8f:33:af:47:6c:6f:65:6b: 1e:e0:b2:d3:2c:8c:3b:82:0a:5c:4f:3b:5d:02:8d: cd:63:92:a5:e8:ab:c3:d7:e1:0c:f9:3c:11:5f:9e: 2b:d6:56:98:b9:ea:7e:aa:74:69:9e:c5:f7:4c:f8: cc:f5:6c:e1:60:59:29:fd:01:72:a7:4e:24:ec:c9: fe:1d:69:72:60:d3:42:be:8e:d5:0a:c3:7f:16:c3: fe:97:73:58:29:f6:83:46:02:87:04:ac:56:74:8e: 41:e6:03:eb:e5:84:19:7d:ac:00:b3:e8:00:d7:4f: 41:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D8:1E:04:4B:05:1E:07:66:AA:48:ED:B9:BC:CD:54:85:64:FE:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc784d9f-54df-39c2-a92f-0b4583f0c54c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:9d:93:13:b2:e7:05:db:b3:51:8c:a8:35:a3:2a:2c:a6:62: a1:79:13:c1:02:d3:8e:e2:a2:03:b3:d8:b5:45:06:11:78:0a: 08:0d:22:b4:40:25:73:bd:7b:ec:a5:fb:4a:bf:0b:0a:b8:bb: df:e6:59:18:da:2b:ac:bf:a6:f4:43:78:b0:57:f2:3d:61:64: b6:8a:f3:38:91:67:65:8f:5e:05:6f:9c:a2:89:87:4b:38:2b: 79:d7:40:f1:1a:aa:37:f5:b7:56:b3:3b:2d:95:95:4e:b1:33: 7c:5e:fc:3c:24:b2:3e:35:bc:24:9c:89:13:80:17:a0:fd:79: 01:e4:5d:4e:ef:41:e8:39:f4:86:4a:42:84:3c:0a:e6:60:ad: 9b:d9:c0:e9:fe:c2:07:69:6c:93:71:5b:c7:24:b4:e4:9e:52: 0a:05:4c:b5:92:61:f4:b1:f1:fe:f9:72:31:4f:99:ab:7f:5a: 24:55:81:de:29:60:7c:8d:ff:1c:6f:ae:73:fe:c1:88:0c:e7: a7:8c:86:76:d0:db:be:e8:b6:ab:1c:ab:17:40:08:d9:93:78: d9:6a:28:2c:27:77:17:45:f9:ef:0d:8c:18:0c:65:6f:96:8a: 2e:ec:6c:cd:c8:36:1a:9f:68:9b:4c:69:bf:71:ea:05:94:04: b9:c8:e1:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S12GI/uLJSW4eWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk YTg5NjIzNjctYWZhYi00NGYxLWIxMjUtZDdiNDJjNTA1ZDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqNK83NKM9gAfOtBV+AxTTvtG9i92QTIms1C TZdloVOHU9yBc4eyoMORHZAw1o5v36PeL4w2BtO8vOqW4dGPEtnK/RejYsSzAm8u gKLsZKyqRbmoZd6XuBMhJY/XNVWHq4UY8/w6ZAzFDDz29Nr9eZ8J88Ms1mnybZTl +4M3N/WZVFcmQgt4AWN+I/nMjzOvR2xvZWse4LLTLIw7ggpcTztdAo3NY5Kl6KvD 1+EM+TwRX54r1laYuep+qnRpnsX3TPjM9WzhYFkp/QFyp04k7Mn+HWlyYNNCvo7V CsN/FsP+l3NYKfaDRgKHBKxWdI5B5gPr5YQZfawAs+gA109B8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7YHgRLBR4HZqpI7bm8zVSFZP46MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGM3ODRkOWYtNTRkZi0z OWMyLWE5MmYtMGI0NTgzZjBjNTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9TgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGdkxOy5wXbs1GMqDWjKiymYqF5E8EC047iogOz2LVFBhF4CggNIrRA JXO9e+yl+0q/Cwq4u9/mWRjaK6y/pvRDeLBX8j1hZLaK8ziRZ2WPXgVvnKKJh0s4 K3nXQPEaqjf1t1azOy2VlU6xM3xe/Dwksj41vCSciROAF6D9eQHkXU7vQeg59IZK QoQ8CuZgrZvZwOn+wgdpbJNxW8cktOSeUgoFTLWSYfSx8f75cjFPmat/WiRVgd4p YHyN/xxvrnP+wYgM56eMhnbQ277otqscqxdACNmTeNlqKCwndxdF+e8NjBgMZW+W ii7sbM3INhqfaJtMab9x6gWUBLnI4RQ= -----END CERTIFICATE-----Generated at Tue Jul 22 19:31:05 2025 by rpki-client