$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8df2023-da6c-3e61-bfd1-5b33c4b4f410.roa File: f8df2023-da6c-3e61-bfd1-5b33c4b4f410.roa (raw, json) Hash identifier: ncMjtWjRspKWKgWaOaSJi9geGDXzhtu+2D6zEtZmZPA= Subject key identifier: 1B:9E:9E:72:B9:59:95:62:F4:BD:81:78:7A:FB:11:AF:45:0A:53:4D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7A4B5424180CA2B346672100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8df2023-da6c-3e61-bfd1-5b33c4b4f410.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.212.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:54:24:18:0c:a2:b3:46:67:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=6f759178-1659-43bb-ad09-2d70d56134c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8c:0c:e7:4c:13:16:49:7f:fe:db:7d:79:7e: e9:35:89:d3:68:db:b1:45:63:be:b3:c2:66:39:bc: e6:78:bc:34:84:c8:44:82:4d:c6:4f:a8:a4:12:27: 00:3b:19:54:86:4e:a3:9d:d0:d9:43:b8:e8:d7:49: 2c:d6:c7:89:b3:d4:93:44:95:a0:d4:0e:6c:1c:f6: 10:b0:60:72:56:b7:07:1a:86:c1:1d:d7:a0:d9:6e: 3b:d8:31:64:d8:9a:de:6f:4a:ab:ca:15:a0:57:9a: 73:88:8d:c5:fe:ee:8c:51:2a:b2:56:18:82:a2:35: b8:09:1b:bd:a4:b5:97:6f:94:5c:1d:68:b3:c7:d9: da:51:78:24:2e:93:16:b6:41:37:1e:54:c2:36:03: 82:09:0d:cd:33:80:d3:ac:4b:c3:ed:e7:4e:eb:57: b3:c7:ab:6d:b6:40:c9:c4:02:8b:e7:ff:0f:bd:aa: 0a:69:7f:96:75:45:7d:41:2f:26:df:3f:b0:d6:d1: d6:29:cd:73:5e:89:5e:54:a5:2d:7a:6c:da:4a:c2: 67:94:9f:58:38:06:5f:a2:e8:1f:34:91:e4:41:bb: 13:6a:dd:9a:a8:e9:8e:33:7c:3a:0b:2d:62:07:bf: d7:c1:e6:39:2a:db:f9:7e:e2:4b:46:f4:be:87:db: 01:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:9E:9E:72:B9:59:95:62:F4:BD:81:78:7A:FB:11:AF:45:0A:53:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8df2023-da6c-3e61-bfd1-5b33c4b4f410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:98:b5:79:17:80:73:9c:0e:cc:17:84:98:6c:58:90:d1:e3: ab:ca:2d:4e:93:eb:60:a2:2b:ad:56:c1:c6:a4:fa:cb:3d:fc: 4e:63:7f:a5:2d:4f:9e:50:fc:60:12:90:bc:49:c5:9b:a4:2e: 47:d9:f1:63:82:f0:21:45:e4:31:27:62:fc:ed:6b:95:23:2d: a0:ce:74:5d:07:1e:28:ad:ae:d9:41:b3:73:fb:e1:90:fc:de: 4c:d2:8a:a4:2f:6a:c1:c2:ce:32:70:ad:e8:b0:14:b0:5b:c9: 0e:d0:0a:aa:eb:c6:db:be:f6:c2:e2:f3:33:22:39:4d:2d:56: dc:47:c4:03:2f:eb:73:51:a2:d8:be:37:19:4e:7e:05:ec:4c: 4c:27:d6:af:73:8c:45:df:77:ac:82:0c:89:bf:7f:9f:dd:c9: 57:90:28:48:28:95:ad:cc:6d:e6:8d:23:2b:5b:b7:2b:62:2e: 95:76:44:35:7b:20:db:cc:52:58:82:d2:68:d5:74:92:e7:e9: 1e:cb:8f:c5:de:5d:e8:5e:43:63:de:3c:08:c4:d2:f2:43:4e: e4:7a:9f:8c:7a:1e:e4:3b:29:45:92:4a:f2:68:3d:e8:95:8e: cc:6b:68:6e:32:b8:00:61:57:be:97:d1:e7:d0:a2:3c:2f:37: df:36:3a:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S1QkGAyis0ZnIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk NmY3NTkxNzgtMTY1OS00M2JiLWFkMDktMmQ3MGQ1NjEzNGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYwM50wTFkl//tt9eX7pNYnTaNuxRWO+s8Jm ObzmeLw0hMhEgk3GT6ikEicAOxlUhk6jndDZQ7jo10ks1seJs9STRJWg1A5sHPYQ sGByVrcHGobBHdeg2W472DFk2Jreb0qryhWgV5pziI3F/u6MUSqyVhiCojW4CRu9 pLWXb5RcHWizx9naUXgkLpMWtkE3HlTCNgOCCQ3NM4DTrEvD7edO61ezx6tttkDJ xAKL5/8PvaoKaX+WdUV9QS8m3z+w1tHWKc1zXoleVKUtemzaSsJnlJ9YOAZfougf NJHkQbsTat2aqOmOM3w6Cy1iB7/XweY5Ktv5fuJLRvS+h9sBVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuennK5WZVi9L2BeHr7Ea9FClNNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjhkZjIwMjMtZGE2Yy0z ZTYxLWJmZDEtNWIzM2M0YjRmNDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9S8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaYtXkXgHOcDswXhJhsWJDR46vKLU6T62CiK61Wwcak+ss9/E5jf6Ut T55Q/GASkLxJxZukLkfZ8WOC8CFF5DEnYvzta5UjLaDOdF0HHiitrtlBs3P74ZD8 3kzSiqQvasHCzjJwreiwFLBbyQ7QCqrrxtu+9sLi8zMiOU0tVtxHxAMv63NRoti+ NxlOfgXsTEwn1q9zjEXfd6yCDIm/f5/dyVeQKEgola3MbeaNIytbtytiLpV2RDV7 INvMUliC0mjVdJLn6R7Lj8XeXeheQ2PePAjE0vJDTuR6n4x6HuQ7KUWSSvJoPeiV jsxraG4yuABhV76X0efQojwvN982OqA= -----END CERTIFICATE-----Generated at Tue Jul 22 19:34:20 2025 by rpki-client