$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f8f5272-931a-3c65-a6d3-014af3db641b.roa File: 4f8f5272-931a-3c65-a6d3-014af3db641b.roa (raw, json) Hash identifier: M5/tfjVPYB1yHgX4y2rGFtRFZL5hsKklBWcyAJsX4Fg= Subject key identifier: 3C:B6:BD:0A:AF:62:4A:58:DC:61:85:DC:A7:23:9B:4F:63:87:14:33 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A093AAE564EBB87F5FBE67C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f8f5272-931a-3c65-a6d3-014af3db641b.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 16625 IP address blocks: 23.207.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:ae:56:4e:bb:87:f5:fb:e6:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=c99e34f6-351b-4505-9cce-e4db614329fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:86:67:cf:d0:4d:75:d2:e2:2e:24:a4:42:c3: 28:d5:81:47:de:78:22:dc:75:95:92:01:c7:0d:96: b9:a9:4d:47:e2:39:0d:5c:cf:44:76:1b:31:cd:6f: 88:65:ea:4d:cf:7f:c7:07:5f:73:af:68:4a:61:4d: d2:b8:aa:2e:5b:26:31:d8:3f:df:17:3e:aa:ce:cf: 0c:7f:ee:3c:41:30:0c:32:46:c6:e5:3b:65:d5:ea: c0:e6:7b:f0:b4:fd:a6:c3:e6:08:ab:3b:95:2a:af: 35:2a:64:cd:98:f7:75:ad:4b:6f:bf:32:d7:8e:e5: 43:2d:bb:f9:54:77:ff:b2:54:58:57:ac:61:fc:85: 3c:31:7a:fa:ca:23:12:e6:b4:1a:e0:1a:ca:ae:49: 9d:86:d2:73:aa:4c:0d:96:8f:f8:97:b7:67:ef:9d: 96:0e:21:55:e3:af:a3:a5:1e:12:a9:ab:c0:fb:50: b9:e5:06:05:3f:40:91:46:0a:be:1c:10:85:03:c6: 37:35:d1:c8:5a:fd:b5:69:8f:15:87:3c:23:27:d4: bc:80:8a:cd:6c:7f:0b:d1:98:58:fa:6c:71:9d:f9: dc:0b:3f:23:ab:cf:a9:e0:ef:da:b2:bd:fc:dc:a6: 06:c6:9a:8f:e5:75:22:cf:f6:c0:56:58:83:a5:0e: 5e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B6:BD:0A:AF:62:4A:58:DC:61:85:DC:A7:23:9B:4F:63:87:14:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f8f5272-931a-3c65-a6d3-014af3db641b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:c8:46:c8:7e:23:6c:15:fd:a6:ec:ac:88:83:d8:f3:9b:66: 94:51:91:c1:fd:b7:e1:6f:fb:05:71:45:06:1f:6c:0e:7e:82: 21:dc:05:07:ea:ef:d6:c0:10:59:c1:c1:df:01:79:d1:51:fa: 27:c3:fc:6c:c2:e9:e1:bf:22:72:06:10:50:1e:2b:49:80:9a: 47:d7:6e:da:82:16:cb:14:f7:43:62:bd:a3:1f:ec:b3:7e:b2: f7:4a:66:6f:fa:6c:0f:fb:94:4b:a1:38:00:57:79:a0:92:3c: ad:33:43:84:5a:dd:8d:4e:df:49:78:73:2d:ef:20:c1:db:3a: 7a:c9:8a:0f:df:4e:ad:7f:1f:86:a8:6d:33:19:55:16:6a:03: 80:14:eb:e1:b5:54:de:39:7c:21:75:1d:f3:00:4c:7b:db:8b: d5:59:c1:cb:38:01:d0:9d:4c:d7:d6:e4:f9:2f:94:87:0a:e3: 03:de:4e:ac:8c:49:ed:ea:5c:9b:ce:ee:1c:2b:4c:8d:b9:e2: c3:ef:0f:60:19:5c:dc:30:15:a6:ff:52:35:e9:7d:cf:65:a6: d8:d6:9b:de:0e:63:66:ed:76:6b:9e:f4:1d:10:f6:16:a6:07: 4b:80:10:83:6f:8e:cb:7e:ab:56:bb:df:1c:ee:69:57:7e:4e: fc:52:af:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoJOq5WTruH9fvmfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk Yzk5ZTM0ZjYtMzUxYi00NTA1LTljY2UtZTRkYjYxNDMyOWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroZnz9BNddLiLiSkQsMo1YFH3ngi3HWVkgHH DZa5qU1H4jkNXM9EdhsxzW+IZepNz3/HB19zr2hKYU3SuKouWyYx2D/fFz6qzs8M f+48QTAMMkbG5Ttl1erA5nvwtP2mw+YIqzuVKq81KmTNmPd1rUtvvzLXjuVDLbv5 VHf/slRYV6xh/IU8MXr6yiMS5rQa4BrKrkmdhtJzqkwNlo/4l7dn752WDiFV46+j pR4SqavA+1C55QYFP0CRRgq+HBCFA8Y3NdHIWv21aY8VhzwjJ9S8gIrNbH8L0ZhY +mxxnfncCz8jq8+p4O/asr383KYGxpqP5XUiz/bAVliDpQ5exwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDy2vQqvYkpY3GGF3Kcjm09jhxQzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGY4ZjUyNzItOTMxYS0z YzY1LWE2ZDMtMDE0YWYzZGI2NDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8/aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXIRsh+I2wV/absrIiD2PObZpRRkcH9t+Fv+wVxRQYfbA5+giHcBQfq 79bAEFnBwd8BedFR+ifD/GzC6eG/InIGEFAeK0mAmkfXbtqCFssU90NivaMf7LN+ svdKZm/6bA/7lEuhOABXeaCSPK0zQ4Ra3Y1O30l4cy3vIMHbOnrJig/fTq1/H4ao bTMZVRZqA4AU6+G1VN45fCF1HfMATHvbi9VZwcs4AdCdTNfW5PkvlIcK4wPeTqyM Se3qXJvO7hwrTI254sPvD2AZXNwwFab/UjXpfc9lptjWm94OY2btdmue9B0Q9ham B0uAEINvjst+q1a73xzuaVd+TvxSr1U= -----END CERTIFICATE-----Generated at Sat Jun 7 23:11:34 2025 by rpki-client