$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfb98baa-2682-37a7-bfc4-9b7540f961e2.roa File: dfb98baa-2682-37a7-bfc4-9b7540f961e2.roa (raw, json) Hash identifier: 9Qe9RrBKXEPwNf0ATxdTd7oYanU9flW3EfPkbm/bAbc= Subject key identifier: 6D:1F:1A:CE:DD:7B:26:36:43:CA:BE:9A:9A:14:74:CF:E2:D7:51:ED Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7A4B590632FBF743290D1300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfb98baa-2682-37a7-bfc4-9b7540f961e2.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.209.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:59:06:32:fb:f7:43:29:0d:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=6ec515fa-7943-435b-a388-d789e3e46023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:be:ca:0d:f2:cc:1b:3b:49:17:af:31:d3:20: 4b:3e:36:da:31:ff:ef:05:fb:41:7b:21:5c:ca:98: c1:c3:93:da:e7:41:e6:38:8d:f9:79:eb:92:e6:cc: 5e:1c:21:f6:ea:60:e8:69:35:98:e7:6f:eb:d0:34: 03:66:3a:2d:e4:e8:ce:be:f5:e8:32:88:f1:a7:50: b4:af:32:e3:31:8a:78:24:8a:e0:8b:e2:86:36:37: 71:6a:37:82:b3:44:b9:6d:ca:33:98:f4:24:9a:93: 24:9f:4c:40:7c:ef:f0:f4:c7:bf:45:0b:d6:70:73: c9:5e:99:b9:a1:91:ab:15:ac:ea:74:ee:35:43:ad: 3f:dd:01:a4:08:68:47:c2:2f:0d:dd:ab:da:ef:17: 8d:40:7f:c9:a2:a4:b4:17:09:d7:52:85:f1:8c:5f: 4d:29:9f:04:61:ac:b1:e9:62:9f:fb:60:4a:ee:a1: 8f:37:d6:35:bf:7a:90:d0:49:7a:75:bd:c8:aa:be: d4:a9:81:e4:1c:ad:15:80:0c:bd:49:f7:c8:2b:e2: 71:5e:af:a5:0a:e3:55:14:da:22:11:1c:63:1b:cd: 36:cd:6b:03:99:7f:20:15:77:da:30:6f:1d:68:96: 1f:ca:97:0b:44:01:2f:55:76:4e:e2:c8:9d:5b:00: 46:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1F:1A:CE:DD:7B:26:36:43:CA:BE:9A:9A:14:74:CF:E2:D7:51:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfb98baa-2682-37a7-bfc4-9b7540f961e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:45:82:60:16:f9:98:94:87:80:b1:03:a7:b3:ef:b5:a4:01: ce:5a:20:cc:a9:5a:d7:47:1c:bb:3f:1b:c8:dd:db:17:42:b3: e1:e0:26:f3:63:23:0d:ea:2f:83:3e:22:ad:20:27:da:37:37: a0:eb:cf:60:77:ec:41:d4:ae:a4:5e:25:91:55:e8:78:22:ae: 1e:47:f3:c2:af:ae:3e:ca:b9:c2:26:dc:63:c5:78:69:20:c6: 7b:49:7b:16:b8:aa:47:46:2d:b0:43:f6:81:49:d4:27:c3:c0: 56:70:8c:12:3f:46:52:6c:2e:a7:13:0d:88:86:94:2e:61:fb: 19:66:33:c5:8d:5e:ad:fc:51:86:fc:1c:89:05:f7:29:49:90: e2:46:4b:68:44:e2:de:7c:e2:ca:fe:42:d6:41:ae:8d:df:fb: 39:73:6d:c1:40:89:3f:20:77:63:4a:4c:55:87:b7:29:68:f0: ee:46:17:cd:21:bb:8b:f8:04:e5:18:7c:f6:09:49:71:ff:bd: 4e:0e:c1:24:7d:52:bc:6c:ca:83:4b:67:fd:c8:28:2c:79:41: ad:8c:bc:8b:50:cd:68:b2:08:13:25:b6:92:44:e9:b4:46:48: b4:0e:16:d2:a2:fa:e2:7d:cf:29:0f:64:13:4a:7f:38:f1:a9: 5d:84:33:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S1kGMvv3QykNEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk NmVjNTE1ZmEtNzk0My00MzViLWEzODgtZDc4OWUzZTQ2MDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr77KDfLMGztJF68x0yBLPjbaMf/vBftBeyFc ypjBw5Pa50HmOI35eeuS5sxeHCH26mDoaTWY52/r0DQDZjot5OjOvvXoMojxp1C0 rzLjMYp4JIrgi+KGNjdxajeCs0S5bcozmPQkmpMkn0xAfO/w9Me/RQvWcHPJXpm5 oZGrFazqdO41Q60/3QGkCGhHwi8N3ava7xeNQH/JoqS0FwnXUoXxjF9NKZ8EYayx 6WKf+2BK7qGPN9Y1v3qQ0El6db3Iqr7UqYHkHK0VgAy9SffIK+JxXq+lCuNVFNoi ERxjG802zWsDmX8gFXfaMG8daJYfypcLRAEvVXZO4sidWwBGlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0fGs7deyY2Q8q+mpoUdM/i11HtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGZiOThiYWEtMjY4Mi0z N2E3LWJmYzQtOWI3NTQwZjk2MWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9G0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxFgmAW+ZiUh4CxA6ez77WkAc5aIMypWtdHHLs/G8jd2xdCs+HgJvNj Iw3qL4M+Iq0gJ9o3N6Drz2B37EHUrqReJZFV6Hgirh5H88Kvrj7KucIm3GPFeGkg xntJexa4qkdGLbBD9oFJ1CfDwFZwjBI/RlJsLqcTDYiGlC5h+xlmM8WNXq38UYb8 HIkF9ylJkOJGS2hE4t584sr+QtZBro3f+zlzbcFAiT8gd2NKTFWHtylo8O5GF80h u4v4BOUYfPYJSXH/vU4OwSR9UrxsyoNLZ/3IKCx5Qa2MvItQzWiyCBMltpJE6bRG SLQOFtKi+uJ9zykPZBNKfzjxqV2EM/k= -----END CERTIFICATE-----Generated at Wed Jul 23 01:39:59 2025 by rpki-client