$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9d9fc0c-dd8a-3711-bba0-f53282d78942.roa File: f9d9fc0c-dd8a-3711-bba0-f53282d78942.roa (raw, json) Hash identifier: /k4RIm25kyWMRsRkdC5Gs6/U0LwFkPpA8e4gtZW8mvA= Subject key identifier: 40:DC:CB:75:94:3B:07:24:37:85:A7:EF:96:41:CE:4E:50:5D:9C:95 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8840A7D33B25733AFA52B800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9d9fc0c-dd8a-3711-bba0-f53282d78942.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 20940 IP address blocks: 23.218.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:a7:d3:3b:25:73:3a:fa:52:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=38720f10-8c30-4aa3-8b3e-95e85380f737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e4:d1:df:8a:d4:af:96:f6:a7:af:b0:3f:d8: 0f:62:c4:46:4b:86:18:77:3a:7c:b0:5c:0c:37:d9: 97:0b:98:10:ee:38:b0:bb:08:6a:41:1f:d6:1c:6f: f4:c3:42:a0:4d:60:c2:29:01:cb:e4:24:ae:c3:d3: cd:ef:09:b3:c0:00:d2:a1:6c:8b:21:db:44:7a:21: 60:7a:9b:8e:48:1f:4b:fd:48:fc:0b:57:a8:09:61: f5:ff:a2:1f:78:da:77:b0:03:04:c4:35:bc:eb:d0: 30:ff:38:d0:12:79:c9:b0:6b:e0:f9:2e:3e:7d:53: 84:bb:6e:de:34:a9:c2:89:23:59:b6:79:56:e0:e3: fc:bc:d4:e6:b8:b2:db:7f:b7:c2:f0:24:3f:e9:f1: 98:4a:35:86:ee:10:bf:d8:f7:4e:e1:e9:ce:e4:41: 1c:a8:23:71:79:1a:51:83:39:f6:c9:14:52:7e:01: f9:29:ac:76:d6:a5:4f:11:0f:ba:c5:50:94:2c:2e: aa:30:8a:c3:4c:c1:db:f4:37:8a:c0:ff:03:e3:00: 47:63:ba:bd:90:b4:af:52:4c:9d:81:5b:03:89:c2: 1d:45:3d:9d:7b:51:c9:e7:f2:9a:8a:96:34:7e:27: f8:49:29:8f:6a:fb:16:b5:48:4d:98:2c:43:76:26: 65:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DC:CB:75:94:3B:07:24:37:85:A7:EF:96:41:CE:4E:50:5D:9C:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9d9fc0c-dd8a-3711-bba0-f53282d78942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:bd:e4:84:f3:02:ed:72:0f:19:97:f5:0e:74:05:5a:64:f3: 23:8b:f4:4d:f6:72:83:66:19:31:88:54:9e:d3:ac:cf:6e:e1: 92:24:24:92:ae:e6:c1:8a:e3:60:81:1f:64:9b:c2:84:25:6e: fa:b1:b8:4b:da:88:1c:aa:6c:1a:04:48:92:1d:2a:94:d1:24: 44:a0:d8:1a:b6:ad:6b:9f:16:71:86:fd:e7:03:64:11:94:9d: c6:b3:c7:f4:d0:9f:a3:23:01:92:89:39:a3:4b:59:60:50:64: 05:a8:86:c3:f4:95:7a:3f:dd:e9:9b:3f:80:50:de:59:37:9b: 56:a6:78:b4:8d:5a:28:58:04:f0:52:1d:dc:96:cf:ca:5e:5e: 27:50:70:ae:d0:40:99:af:24:01:04:37:d4:ca:67:69:5c:7b: bb:79:b5:f2:40:27:81:1f:26:69:1c:f9:2f:7a:2d:cc:20:69: d5:48:a7:3f:62:6c:e1:d6:f7:4e:82:c7:12:7a:c5:e9:74:96: 99:ab:24:b8:18:95:1a:3c:21:c0:74:b6:65:5e:5e:a7:5a:c8: 78:8f:8a:a6:24:35:0d:df:86:73:58:73:a0:6e:c0:1a:b4:4b: 74:21:ee:a3:d0:4c:b5:9e:c0:9a:26:61:50:44:83:ee:41:ab: 29:54:1e:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQKfTOyVzOvpSuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk Mzg3MjBmMTAtOGMzMC00YWEzLThiM2UtOTVlODUzODBmNzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeTR34rUr5b2p6+wP9gPYsRGS4YYdzp8sFwM N9mXC5gQ7jiwuwhqQR/WHG/0w0KgTWDCKQHL5CSuw9PN7wmzwADSoWyLIdtEeiFg epuOSB9L/Uj8C1eoCWH1/6IfeNp3sAMExDW869Aw/zjQEnnJsGvg+S4+fVOEu27e NKnCiSNZtnlW4OP8vNTmuLLbf7fC8CQ/6fGYSjWG7hC/2PdO4enO5EEcqCNxeRpR gzn2yRRSfgH5Kax21qVPEQ+6xVCULC6qMIrDTMHb9DeKwP8D4wBHY7q9kLSvUkyd gVsDicIdRT2de1HJ5/KaipY0fif4SSmPavsWtUhNmCxDdiZlcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDcy3WUOwckN4Wn75ZBzk5QXZyVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjlkOWZjMGMtZGQ4YS0z NzExLWJiYTAtZjUzMjgyZDc4OTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9rbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABG95ITzAu1yDxmX9Q50BVpk8yOL9E32coNmGTGIVJ7TrM9u4ZIkJJKu 5sGK42CBH2SbwoQlbvqxuEvaiByqbBoESJIdKpTRJESg2Bq2rWufFnGG/ecDZBGU ncazx/TQn6MjAZKJOaNLWWBQZAWohsP0lXo/3embP4BQ3lk3m1ameLSNWihYBPBS HdyWz8peXidQcK7QQJmvJAEEN9TKZ2lce7t5tfJAJ4EfJmkc+S96LcwgadVIpz9i bOHW906CxxJ6xel0lpmrJLgYlRo8IcB0tmVeXqdayHiPiqYkNQ3fhnNYc6BuwBq0 S3Qh7qPQTLWewJomYVBEg+5BqylUHms= -----END CERTIFICATE-----Generated at Wed Jul 23 01:34:55 2025 by rpki-client