$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eff13c5d-c2f9-347f-92f6-8fd33a98f7ec.roa File: eff13c5d-c2f9-347f-92f6-8fd33a98f7ec.roa (raw, json) Hash identifier: K5HOaLcIuQTr/OwqVuyR3jgfXgYkOwvtrnn4NzvqO2M= Subject key identifier: BD:A0:8B:EE:97:B7:A9:52:4C:98:6C:BF:E1:96:1B:F6:3B:55:99:8C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7A4B5AF2F6A67EDBDB120740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eff13c5d-c2f9-347f-92f6-8fd33a98f7ec.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.211.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:5a:f2:f6:a6:7e:db:db:12:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=b6b4d136-bfb8-41f2-baa0-464f4eea0d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9f:b4:1a:64:8d:69:4c:ed:01:d9:e2:5b:d0: 2f:e6:d0:6a:89:9a:dd:e3:fe:8f:e8:cc:fa:7f:93: e6:59:7d:50:6b:85:22:e0:ab:f8:54:d5:de:94:2c: ee:a9:73:23:41:83:d7:20:c7:d7:ab:65:b3:70:fc: ee:ac:28:d4:df:96:2e:db:3f:d2:3a:9c:03:8c:e0: 12:bd:1f:66:0d:47:98:1f:7b:2f:c8:49:57:ae:35: 4d:6d:c6:82:45:d6:68:c1:86:f6:7c:13:0c:31:aa: fa:09:79:4c:be:25:f9:d8:c3:0b:8f:b2:43:92:6e: 02:1b:0e:ef:74:5f:c3:00:bb:fb:df:9a:5e:46:7d: 75:e5:63:81:bf:5f:a8:03:c7:e2:d5:70:e4:be:f4: b9:e5:2f:e0:b3:f8:31:27:f8:c1:f7:81:34:5d:7d: a0:c8:90:31:35:16:e4:62:56:5d:8e:ea:67:5e:28: 5a:60:b6:4e:1d:4c:20:38:73:b3:a8:37:51:5b:54: a1:3e:3f:ae:23:e2:d8:09:57:44:92:b3:74:33:83: aa:e7:01:28:42:3a:51:45:42:28:71:26:2c:9d:71: 7a:de:dd:4f:df:d9:1c:7f:a3:7c:47:25:dd:93:69: d7:41:7c:eb:26:3e:65:ca:7b:d5:6d:e1:21:95:75: 83:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A0:8B:EE:97:B7:A9:52:4C:98:6C:BF:E1:96:1B:F6:3B:55:99:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eff13c5d-c2f9-347f-92f6-8fd33a98f7ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:ab:6a:86:4b:cc:b8:ac:7b:e2:85:9b:72:c5:79:2d:a1:49: f7:2b:3e:0f:a4:dc:d9:73:03:3c:3d:27:a4:73:43:21:2a:b0: d6:3d:39:81:0e:2a:1a:b7:45:72:da:6c:70:84:72:2e:8e:eb: c4:22:10:fa:ef:83:13:f0:9f:eb:37:b9:c4:7b:7c:39:8d:93: ea:00:f8:f8:aa:d6:28:ec:57:b5:cd:e0:3d:dd:66:bd:a1:c4: ea:b7:1f:8d:28:f6:66:b1:e1:e5:6a:1c:72:66:b0:10:ab:f6: 9d:fe:cd:5b:13:1c:21:0f:b8:ac:9f:a0:dc:0d:c4:04:af:71: 62:aa:93:58:bc:34:42:8e:2b:a8:64:6a:0c:b4:ee:10:45:1b: 16:96:53:d4:b6:33:a8:a8:cd:8b:98:a5:43:14:9d:21:5f:79: fc:a4:14:14:8c:9e:f8:af:ca:9d:6e:06:5b:2f:08:f5:b9:ca: 30:84:f6:0d:fc:e1:76:ea:c6:ed:29:80:76:b6:fd:9c:47:4f: 51:e5:e4:7f:31:5b:a6:b3:4b:a6:b4:b0:5c:ab:a3:1a:66:73: e0:ad:27:07:f4:2d:fe:a9:7b:7e:a3:5d:c1:f4:06:3a:a0:07: d1:ac:c1:60:00:1d:49:55:64:c4:0b:fc:fb:49:ea:20:0e:72: a9:b0:dd:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S1ry9qZ+29sSB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk YjZiNGQxMzYtYmZiOC00MWYyLWJhYTAtNDY0ZjRlZWEwZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ+0GmSNaUztAdniW9Av5tBqiZrd4/6P6Mz6 f5PmWX1Qa4Ui4Kv4VNXelCzuqXMjQYPXIMfXq2WzcPzurCjU35Yu2z/SOpwDjOAS vR9mDUeYH3svyElXrjVNbcaCRdZowYb2fBMMMar6CXlMviX52MMLj7JDkm4CGw7v dF/DALv735peRn115WOBv1+oA8fi1XDkvvS55S/gs/gxJ/jB94E0XX2gyJAxNRbk YlZdjupnXihaYLZOHUwgOHOzqDdRW1ShPj+uI+LYCVdEkrN0M4Oq5wEoQjpRRUIo cSYsnXF63t1P39kcf6N8RyXdk2nXQXzrJj5lynvVbeEhlXWDAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2gi+6Xt6lSTJhsv+GWG/Y7VZmMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWZmMTNjNWQtYzJmOS0z NDdmLTkyZjYtOGZkMzNhOThmN2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9N0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiraoZLzLise+KFm3LFeS2hSfcrPg+k3NlzAzw9J6RzQyEqsNY9OYEO Khq3RXLabHCEci6O68QiEPrvgxPwn+s3ucR7fDmNk+oA+Piq1ijsV7XN4D3dZr2h xOq3H40o9max4eVqHHJmsBCr9p3+zVsTHCEPuKyfoNwNxASvcWKqk1i8NEKOK6hk agy07hBFGxaWU9S2M6iozYuYpUMUnSFfefykFBSMnvivyp1uBlsvCPW5yjCE9g38 4Xbqxu0pgHa2/ZxHT1Hl5H8xW6azS6a0sFyroxpmc+CtJwf0Lf6pe36jXcH0Bjqg B9GswWAAHUlVZMQL/PtJ6iAOcqmw3Yk= -----END CERTIFICATE-----Generated at Tue Jul 22 19:31:42 2025 by rpki-client