$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb1957fc-cc25-3245-84bf-8b9b55201737.roa File: fb1957fc-cc25-3245-84bf-8b9b55201737.roa (raw, json) Hash identifier: JVdImmzA9Uq93rzaJrsN5Y5uf6JbP06L92UMKn8KCzw= Subject key identifier: 03:C7:B2:1E:0A:A3:8E:D1:07:B4:78:99:19:64:86:D1:B8:81:38:8F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7A4B5844B0A1EAB09FE9F100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb1957fc-cc25-3245-84bf-8b9b55201737.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.209.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:58:44:b0:a1:ea:b0:9f:e9:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=76c2ecd8-4ee0-4496-80d7-045e2d7ae117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8d:92:95:a1:c0:3f:45:b8:97:99:84:63:c9: ed:d3:e4:5c:cb:20:46:92:7c:40:bb:2a:a6:05:ad: a6:a0:d3:98:14:8e:4c:c7:52:35:5a:8c:c4:2e:45: c8:f0:e1:b5:cf:e9:76:eb:f8:a2:83:67:1f:6a:fa: df:30:5e:91:5c:22:2a:de:08:b3:d8:46:f5:17:a6: 1d:dc:f2:a5:17:9c:cb:42:47:41:c7:d8:4a:1a:5a: 55:a7:24:29:7c:57:a1:52:dd:ab:c6:11:da:ca:1f: fb:84:6f:a4:17:10:75:53:42:c8:55:6e:b7:b1:68: e4:17:d3:c1:f1:90:94:ac:8d:71:b9:ac:f9:de:eb: 98:b0:bb:d7:d4:55:9a:b1:6a:4f:08:bb:33:39:ac: 68:0c:0e:bc:45:b3:26:69:cb:c6:ca:ab:33:ff:37: 73:c9:9e:c0:60:39:a5:28:58:21:5f:10:ee:43:f0: cb:87:64:c6:ac:d9:79:95:ce:9f:c8:87:3a:55:d7: 87:3a:11:68:be:ac:2d:3f:84:6b:22:7b:ef:12:b4: 96:2a:55:05:9e:56:6f:c6:a2:a4:17:94:5a:91:a0: b4:9b:95:d1:76:4f:1a:a0:11:97:44:8f:34:a4:2a: 01:90:9a:8a:d3:8e:62:bb:73:46:cc:68:de:47:bd: c4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C7:B2:1E:0A:A3:8E:D1:07:B4:78:99:19:64:86:D1:B8:81:38:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb1957fc-cc25-3245-84bf-8b9b55201737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:6e:9f:89:b7:49:20:43:9b:4b:e7:c3:61:5b:62:fd:5d:1e: 1e:b4:c3:71:16:49:17:61:1f:db:7b:65:b4:35:86:c7:70:cb: c9:6c:23:3e:c6:77:20:d5:4f:9a:3a:ac:3d:e6:8e:b0:48:19: 5a:c5:64:75:f9:53:99:7a:21:bb:e0:5e:1c:a5:a4:59:d9:42: 59:2a:22:e8:02:7b:17:1f:ba:54:bc:ea:ab:e9:da:ff:b6:fa: 22:38:7a:e3:12:9d:58:75:b0:33:d2:9e:78:de:7b:6d:52:1f: 3c:c9:dc:e5:78:0b:6d:40:a6:0c:6b:aa:62:b4:71:60:25:8e: b6:4b:7d:a7:c2:19:19:e6:6f:41:f1:3a:6e:cf:0d:a2:95:56: 41:5f:24:e7:7a:37:b9:9e:ce:09:02:ad:1d:04:24:e2:40:9f: 79:8a:c9:c4:ec:b9:ba:3a:7e:cf:a3:18:33:80:f3:0a:c2:df: 10:c2:57:7e:05:04:11:9c:76:02:c8:82:a6:cf:2c:62:37:73: ed:5f:2e:45:7d:7e:71:34:29:82:25:cc:a3:38:4d:89:db:50: 32:b3:7f:3b:a1:f5:56:f3:1d:4e:ea:68:47:f0:23:e9:83:20: 5c:52:20:32:bc:ad:b6:e4:16:7b:62:a9:56:4a:4e:75:a0:e0: 42:ef:b5:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S1hEsKHqsJ/p8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk NzZjMmVjZDgtNGVlMC00NDk2LTgwZDctMDQ1ZTJkN2FlMTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiI2SlaHAP0W4l5mEY8nt0+RcyyBGknxAuyqm Ba2moNOYFI5Mx1I1WozELkXI8OG1z+l26/iig2cfavrfMF6RXCIq3giz2Eb1F6Yd 3PKlF5zLQkdBx9hKGlpVpyQpfFehUt2rxhHayh/7hG+kFxB1U0LIVW63sWjkF9PB 8ZCUrI1xuaz53uuYsLvX1FWasWpPCLszOaxoDA68RbMmacvGyqsz/zdzyZ7AYDml KFghXxDuQ/DLh2TGrNl5lc6fyIc6VdeHOhFovqwtP4RrInvvErSWKlUFnlZvxqKk F5RakaC0m5XRdk8aoBGXRI80pCoBkJqK045iu3NGzGjeR73E2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPHsh4Ko47RB7R4mRlkhtG4gTiPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmIxOTU3ZmMtY2MyNS0z MjQ1LTg0YmYtOGI5YjU1MjAxNzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9FdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBun4m3SSBDm0vnw2FbYv1dHh60w3EWSRdhH9t7ZbQ1hsdwy8lsIz7G dyDVT5o6rD3mjrBIGVrFZHX5U5l6IbvgXhylpFnZQlkqIugCexcfulS86qvp2v+2 +iI4euMSnVh1sDPSnnjee21SHzzJ3OV4C21ApgxrqmK0cWAljrZLfafCGRnmb0Hx Om7PDaKVVkFfJOd6N7mezgkCrR0EJOJAn3mKycTsubo6fs+jGDOA8wrC3xDCV34F BBGcdgLIgqbPLGI3c+1fLkV9fnE0KYIlzKM4TYnbUDKzfzuh9VbzHU7qaEfwI+mD IFxSIDK8rbbkFntiqVZKTnWg4ELvtUo= -----END CERTIFICATE-----Generated at Wed Jul 23 01:57:29 2025 by rpki-client