$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e28a1768-d77e-376b-9118-d07bc0f97c79.roa File: e28a1768-d77e-376b-9118-d07bc0f97c79.roa (raw, json) Hash identifier: gvN0BjX3yl4aS3pbSsfrDGJDxfI0lWVfoJY2RssGfwY= Subject key identifier: 88:D6:B1:23:F7:EA:83:10:F3:DD:4F:18:ED:61:46:15:07:69:CD:A3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7D1604248FFBA3D4FF6EA680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e28a1768-d77e-376b-9118-d07bc0f97c79.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.214.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:16:04:24:8f:fb:a3:d4:ff:6e:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=41de6fa4-969f-4c64-ae2d-8ee4269d90a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:23:5d:2f:43:81:6e:06:f1:97:08:8b:4e:65: ae:92:56:93:34:5d:7a:d5:bd:66:dd:05:b7:c2:db: dc:63:55:b5:43:f9:4e:1b:ee:94:07:9e:82:18:b5: f2:15:a6:f5:f4:ee:4a:ff:03:66:73:5e:88:f2:e7: 91:c2:38:31:24:f4:0c:39:a9:2d:65:a1:f1:d1:b7: f6:d0:47:0b:8b:74:d2:ed:c0:8e:9f:78:ff:06:fa: c2:57:c5:da:34:a1:23:f0:94:a1:31:04:8b:a1:26: 07:ea:da:f0:3f:ca:b1:c8:24:01:d8:7a:cb:18:c3: 6d:46:aa:a2:2b:ad:b2:22:45:e7:fd:32:a3:45:52: 94:ce:f2:ea:b2:02:dc:f5:48:47:98:0b:32:9e:b3: 34:fb:ef:55:e0:84:15:27:85:9d:f0:b0:0e:7a:e2: e3:52:9c:c0:d6:0d:73:50:69:c3:7e:89:09:af:f8: 80:d0:e7:c4:99:d2:b7:ca:c6:59:c0:75:e3:20:3c: b3:ce:f2:41:b1:b2:e6:63:0a:00:cd:9c:29:e2:35: 1c:29:41:cc:a8:38:84:37:23:bf:75:81:8a:39:75: 16:db:9b:e8:e8:bc:08:62:3b:87:3d:39:b0:fd:f0: a2:57:e7:86:57:f4:8f:25:7b:8c:0d:00:0a:aa:68: d3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D6:B1:23:F7:EA:83:10:F3:DD:4F:18:ED:61:46:15:07:69:CD:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e28a1768-d77e-376b-9118-d07bc0f97c79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:19:48:c1:12:a5:9c:a2:2f:a5:bc:00:19:e1:20:c2:5b:2b: a6:79:53:55:20:ba:b4:10:80:c8:f7:2d:19:ba:4d:b9:c3:f4: 27:9a:ef:76:91:9a:ca:93:11:e4:e1:58:42:da:5a:ba:50:a7: 64:af:7e:52:3d:71:9d:4a:8c:5f:de:05:18:c1:43:03:24:ef: e3:01:b0:29:da:78:a9:e8:e4:20:0c:62:93:a2:61:f8:4f:9c: ff:80:7c:44:67:80:f4:ed:10:f8:f8:6e:4f:d8:99:c1:81:93: be:40:16:5e:b0:9c:b9:6c:38:b0:9f:57:05:be:82:10:5f:16: 2e:38:d0:e2:8e:6e:fa:b4:e5:e0:06:98:63:52:14:b0:3e:94: 0f:ae:f3:4d:70:41:4c:5b:29:0b:ba:6a:ae:28:bb:2d:33:48: 16:41:bd:27:79:59:fd:13:e2:94:d8:b9:a9:0e:65:38:3b:b8: 2e:61:ff:34:0a:73:68:2f:2f:ec:fa:22:b4:53:94:4e:74:c4: 4f:b0:63:7e:ec:c1:15:de:78:17:20:58:1e:3a:74:99:eb:24: a5:0a:a7:67:3e:75:d5:9b:94:ef:53:a7:64:05:27:b9:1d:87: df:02:a8:66:cd:e8:5b:2c:1b:10:b6:29:95:26:30:d7:64:66: 6e:58:eb:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FgQkj/uj1P9upoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk NDFkZTZmYTQtOTY5Zi00YzY0LWFlMmQtOGVlNDI2OWQ5MGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyNdL0OBbgbxlwiLTmWuklaTNF161b1m3QW3 wtvcY1W1Q/lOG+6UB56CGLXyFab19O5K/wNmc16I8ueRwjgxJPQMOaktZaHx0bf2 0EcLi3TS7cCOn3j/BvrCV8XaNKEj8JShMQSLoSYH6trwP8qxyCQB2HrLGMNtRqqi K62yIkXn/TKjRVKUzvLqsgLc9UhHmAsynrM0++9V4IQVJ4Wd8LAOeuLjUpzA1g1z UGnDfokJr/iA0OfEmdK3ysZZwHXjIDyzzvJBsbLmYwoAzZwp4jUcKUHMqDiENyO/ dYGKOXUW25vo6LwIYjuHPTmw/fCiV+eGV/SPJXuMDQAKqmjT8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjWsSP36oMQ891PGO1hRhUHac2jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTI4YTE3NjgtZDc3ZS0z NzZiLTkxMTgtZDA3YmMwZjk3Yzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9ZEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAZSMESpZyiL6W8ABnhIMJbK6Z5U1UgurQQgMj3LRm6TbnD9Cea73aR msqTEeThWELaWrpQp2SvflI9cZ1KjF/eBRjBQwMk7+MBsCnaeKno5CAMYpOiYfhP nP+AfERngPTtEPj4bk/YmcGBk75AFl6wnLlsOLCfVwW+ghBfFi440OKObvq05eAG mGNSFLA+lA+u801wQUxbKQu6aq4ouy0zSBZBvSd5Wf0T4pTYuakOZTg7uC5h/zQK c2gvL+z6IrRTlE50xE+wY37swRXeeBcgWB46dJnrJKUKp2c+ddWblO9Tp2QFJ7kd h98CqGbN6FssGxC2KZUmMNdkZm5Y62o= -----END CERTIFICATE-----Generated at Tue Jul 22 19:33:20 2025 by rpki-client