$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df2ed5db-804d-3d23-a9a1-5dd685e7cac1.roa File: df2ed5db-804d-3d23-a9a1-5dd685e7cac1.roa (raw, json) Hash identifier: udNoPCvVfNjOH4tbPqitQPF2NGMINu24LEbp0vxhZds= Subject key identifier: 63:B2:86:C6:82:02:3B:31:03:E8:31:32:E9:2A:32:C9:45:F1:DC:97 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7A4B5B8D729E00BFE51A50C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df2ed5db-804d-3d23-a9a1-5dd685e7cac1.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.211.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:5b:8d:72:9e:00:bf:e5:1a:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=fce53ced-2800-4a31-910d-ff29fb224363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:31:bc:43:bb:33:6a:c1:68:8c:4f:21:8e:fc: 1b:79:6f:75:23:ea:80:ce:a8:ae:2a:2a:bc:7c:6f: f9:c4:92:f2:f9:fe:4e:66:c1:86:66:29:5a:5e:5e: 18:3b:10:9f:29:ab:47:be:13:35:10:cf:d6:b8:5b: 99:20:51:8e:52:09:39:32:ff:20:e2:bd:f1:cd:10: 18:03:45:31:c6:26:a6:f6:55:9a:fe:4a:c8:d6:44: 87:98:44:a9:47:25:13:fc:0b:1c:86:98:f8:33:9a: 17:21:8d:da:fa:28:3d:db:d6:b6:3d:14:8b:89:40: 10:48:fa:ed:d6:92:1c:ad:76:f7:0b:f4:e0:56:46: 19:e2:8d:ac:7b:a5:d5:88:b8:bf:11:35:75:90:ab: a7:56:ec:d4:52:55:6f:ef:f4:2b:41:cf:65:1d:11: 32:c5:ba:07:e7:50:67:32:ec:13:6f:81:f6:9a:84: f8:52:4b:38:85:a2:9a:7a:1e:2c:5a:0d:66:bc:31: 98:d7:72:f1:28:bd:c2:f3:4f:86:88:4f:e9:15:a6: f3:59:c6:79:1c:3d:c1:2b:96:eb:62:6f:8a:59:48: 7c:f9:66:d2:cd:6f:a5:a6:ae:5f:99:e4:a9:8a:c8: 23:b9:d9:29:73:c5:12:d0:f2:72:09:e9:11:ae:38: 3a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B2:86:C6:82:02:3B:31:03:E8:31:32:E9:2A:32:C9:45:F1:DC:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df2ed5db-804d-3d23-a9a1-5dd685e7cac1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:37:55:3b:9f:43:67:96:89:69:9b:6d:8f:64:36:20:f9:b6: 99:fe:85:4d:50:e6:98:db:71:70:3b:b7:17:fc:10:0a:20:b1: 01:95:51:d8:cf:5c:52:b1:99:bb:60:bd:13:b3:6d:89:5b:4a: 2d:f2:5e:a6:b8:ad:f3:0d:10:63:b7:4a:f3:03:95:78:b4:c1: f2:64:d9:5a:0c:ee:57:84:06:7e:59:8f:5d:f9:96:ee:72:68: 76:a5:c1:b7:fa:80:67:72:c8:10:d6:57:0c:25:6b:c1:c0:50: a4:1e:7e:d4:05:f5:46:7b:6c:6c:d3:90:61:73:24:e4:38:47: 28:f8:e4:68:5f:9d:e9:4a:97:fc:b3:3c:40:85:dd:ec:66:1b: 52:5e:16:98:e0:16:98:e3:b7:cf:a6:03:ed:99:35:e8:68:86: 15:f7:0e:cd:95:9f:97:ae:9a:e8:22:47:73:c7:1e:02:7a:a5: 45:e9:1c:1f:7b:eb:6f:37:56:8b:6d:e5:4e:8a:50:e2:f1:00: b9:2a:d7:93:bc:27:59:a9:0c:75:d1:68:c9:ad:49:71:fe:c9: 65:bd:a3:39:bf:06:dc:44:63:79:fe:61:f4:3a:b9:f1:d2:e7: f6:e5:e5:bd:fe:b4:99:29:f4:30:9c:6d:82:25:ba:d8:ee:2b: 8a:de:05:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S1uNcp4Av+UaUMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk ZmNlNTNjZWQtMjgwMC00YTMxLTkxMGQtZmYyOWZiMjI0MzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzG8Q7szasFojE8hjvwbeW91I+qAzqiuKiq8 fG/5xJLy+f5OZsGGZilaXl4YOxCfKatHvhM1EM/WuFuZIFGOUgk5Mv8g4r3xzRAY A0Uxxiam9lWa/krI1kSHmESpRyUT/Aschpj4M5oXIY3a+ig929a2PRSLiUAQSPrt 1pIcrXb3C/TgVkYZ4o2se6XViLi/ETV1kKunVuzUUlVv7/QrQc9lHREyxboH51Bn MuwTb4H2moT4Uks4haKaeh4sWg1mvDGY13LxKL3C80+GiE/pFabzWcZ5HD3BK5br Ym+KWUh8+WbSzW+lpq5fmeSpisgjudkpc8US0PJyCekRrjg6QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOyhsaCAjsxA+gxMukqMslF8dyXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGYyZWQ1ZGItODA0ZC0z ZDIzLWE5YTEtNWRkNjg1ZTdjYWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ONMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFE3VTufQ2eWiWmbbY9kNiD5tpn+hU1Q5pjbcXA7txf8EAogsQGVUdjP XFKxmbtgvROzbYlbSi3yXqa4rfMNEGO3SvMDlXi0wfJk2VoM7leEBn5Zj135lu5y aHalwbf6gGdyyBDWVwwla8HAUKQeftQF9UZ7bGzTkGFzJOQ4Ryj45GhfnelKl/yz PECF3exmG1JeFpjgFpjjt8+mA+2ZNehohhX3Ds2Vn5eumugiR3PHHgJ6pUXpHB97 6283Vott5U6KUOLxALkq15O8J1mpDHXRaMmtSXH+yWW9ozm/BtxEY3n+YfQ6ufHS 5/bl5b3+tJkp9DCcbYIlutjuK4reBR0= -----END CERTIFICATE-----Generated at Tue Jul 22 19:30:29 2025 by rpki-client