$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f7aa7ac1-873e-3196-961b-0c787c0f110d.roa File: f7aa7ac1-873e-3196-961b-0c787c0f110d.roa (raw, json) Hash identifier: 2copfly0IPbNCJWB1saW/ZWlva58oEXy4Vc8PcF8vHs= Subject key identifier: 8E:28:54:79:0C:BA:78:16:6F:65:D3:DB:F6:2D:BB:69:30:88:88:FC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A6290A40FC127132366037BA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f7aa7ac1-873e-3196-961b-0c787c0f110d.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16625 IP address blocks: 23.194.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:a4:0f:c1:27:13:23:66:03:7b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=c36ed787-a7fb-48da-b736-eb29ceaeed5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:43:8d:ae:cc:fb:04:d6:28:14:38:98:c7:8e: 43:04:c4:98:49:f2:9a:90:64:4e:90:9a:e7:d9:32: 88:c4:48:d3:f5:00:19:21:d6:54:3c:c2:ce:02:85: 3a:b9:ea:89:e1:a9:5a:88:d1:d2:22:34:56:a9:fb: 46:af:78:5c:24:69:4f:47:a0:48:70:6a:89:ff:13: 98:8a:f3:da:65:52:dc:a3:d0:d8:b8:2c:24:73:00: 5e:ca:c5:a9:0a:b2:23:ce:e8:1a:aa:04:80:18:e9: 74:19:8d:7e:d7:cf:b0:b8:4a:32:45:c2:78:11:81: 85:d2:ca:4d:95:18:38:61:ee:06:e5:f0:50:69:db: d3:dd:b3:8f:01:80:69:52:bc:5b:7c:a1:7a:32:d9: 10:d3:2f:b3:9f:00:9f:71:c0:9f:c7:b7:c2:ba:8e: a2:52:0a:6b:22:b9:56:b4:f8:57:ef:61:b9:14:a7: eb:77:69:d1:d8:4f:c1:50:e6:df:69:d4:00:97:a6: 32:a1:51:d0:2d:8c:07:41:d4:dc:5c:b2:8d:e6:44: b7:63:bb:b0:ac:d3:d4:73:ee:02:82:68:e2:05:f9: 7d:5e:c4:34:5a:37:f6:89:17:61:23:12:a5:b5:b0: 23:4f:cd:d3:c8:58:46:cb:4e:08:b8:40:01:6a:b3: c0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:28:54:79:0C:BA:78:16:6F:65:D3:DB:F6:2D:BB:69:30:88:88:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f7aa7ac1-873e-3196-961b-0c787c0f110d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.194.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:5f:be:67:66:93:3c:34:cd:5f:64:0c:19:33:3b:7f:34:85: 1a:eb:9d:14:c7:a6:a0:73:0e:8c:17:1c:ec:d0:9c:cb:38:b3: 03:65:c7:aa:f0:37:7d:10:9b:03:f0:d3:91:0e:a4:76:5b:ca: 4f:57:4b:7c:ac:20:ac:f0:5e:dc:17:94:d6:1f:e7:53:b8:a9: 33:13:8f:d4:ec:43:ca:50:dd:34:80:4d:24:e3:28:9a:22:46: 67:3c:65:f3:67:2a:50:dc:ae:72:95:61:f6:b5:6b:7d:69:59: 70:d0:03:4c:93:41:47:38:81:9a:34:d2:a4:f0:5f:68:82:30: 24:b7:48:2c:31:8c:8d:24:b9:2a:31:92:a1:5c:cf:a7:8d:33: 86:61:3c:90:5f:eb:6f:8d:e3:b6:b4:32:4b:a1:48:f0:29:32: fb:ea:22:14:f6:1b:cf:1f:49:25:ee:84:ef:f7:3f:ec:45:6a: 51:4e:9f:e2:f4:4c:80:fd:01:68:83:30:25:70:20:a7:10:2b: 30:a6:ee:07:55:46:09:0d:53:bd:a7:1b:d3:4b:ff:cf:01:62: 61:7b:48:06:6a:f0:41:01:66:a7:d9:3b:47:12:cb:da:9f:93: 18:cf:d2:f7:6b:4c:d1:2a:ee:9b:22:04:6c:f4:8b:34:ee:10: a3:75:a4:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikKQPwScTI2YDe6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk YzM2ZWQ3ODctYTdmYi00OGRhLWI3MzYtZWIyOWNlYWVlZDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkONrsz7BNYoFDiYx45DBMSYSfKakGROkJrn 2TKIxEjT9QAZIdZUPMLOAoU6ueqJ4alaiNHSIjRWqftGr3hcJGlPR6BIcGqJ/xOY ivPaZVLco9DYuCwkcwBeysWpCrIjzugaqgSAGOl0GY1+18+wuEoyRcJ4EYGF0spN lRg4Ye4G5fBQadvT3bOPAYBpUrxbfKF6MtkQ0y+znwCfccCfx7fCuo6iUgprIrlW tPhX72G5FKfrd2nR2E/BUObfadQAl6YyoVHQLYwHQdTcXLKN5kS3Y7uwrNPUc+4C gmjiBfl9XsQ0Wjf2iRdhIxKltbAjT83TyFhGy04IuEABarPAKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4oVHkMungWb2XT2/Ytu2kwiIj8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjdhYTdhYzEtODczZS0z MTk2LTk2MWItMGM3ODdjMGYxMTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8KQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhfvmdmkzw0zV9kDBkzO380hRrrnRTHpqBzDowXHOzQnMs4swNlx6rw N30QmwPw05EOpHZbyk9XS3ysIKzwXtwXlNYf51O4qTMTj9TsQ8pQ3TSATSTjKJoi Rmc8ZfNnKlDcrnKVYfa1a31pWXDQA0yTQUc4gZo00qTwX2iCMCS3SCwxjI0kuSox kqFcz6eNM4ZhPJBf62+N47a0MkuhSPApMvvqIhT2G88fSSXuhO/3P+xFalFOn+L0 TID9AWiDMCVwIKcQKzCm7gdVRgkNU72nG9NL/88BYmF7SAZq8EEBZqfZO0cSy9qf kxjP0vdrTNEq7psiBGz0izTuEKN1pIc= -----END CERTIFICATE-----Generated at Wed Jul 23 01:27:14 2025 by rpki-client