$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e73369c8-bd3a-3556-b590-65b954d215ff.roa File: e73369c8-bd3a-3556-b590-65b954d215ff.roa (raw, json) Hash identifier: kcZa1jRO53lYR+xa1r2ASc5JHxRTVEApY95kSmBcpVE= Subject key identifier: AB:09:0B:E7:35:80:07:E6:75:E8:1C:0A:D1:F3:B0:FE:88:86:7D:5F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1806EB7C0A25910CA92D0B50 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e73369c8-bd3a-3556-b590-65b954d215ff.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.212.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:eb:7c:0a:25:91:0c:a9:2d:0b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=19cd696d-948c-4524-ba49-3ee229b2ac84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b6:bd:3c:da:91:3c:da:cf:35:8f:58:28:c6: 10:7f:ed:ae:df:6b:97:a8:b9:4e:9c:fd:02:7f:9c: 57:67:32:b6:3f:a4:cb:a0:86:63:2e:48:b0:f8:46: 0d:8e:bd:80:99:70:29:af:74:3f:73:3c:97:9c:e8: 27:99:3b:cb:0a:09:0d:47:22:b7:91:bf:0a:a9:00: c6:58:a4:a3:ad:28:92:ed:58:f3:c3:b9:aa:ba:38: f4:b5:5e:31:c3:60:f8:71:c9:ac:e7:ff:a7:06:c5: 1d:5f:d7:1d:0e:3a:ec:1b:9a:aa:c7:94:99:e0:fc: 7e:cd:f1:78:80:e8:7b:3f:fc:d1:73:21:57:9b:6e: 87:a0:a9:6e:26:71:b9:97:51:92:76:94:44:fd:77: 7d:78:74:8d:ec:13:5f:2d:3b:99:ef:52:4b:a2:b0: 8e:89:de:b7:55:32:29:02:b9:43:86:c0:1d:ea:f3: 8c:44:f9:2c:fe:4a:a4:76:f6:cf:dc:f5:91:5e:1c: 55:91:d3:72:63:69:c5:ae:b1:36:40:a8:39:c2:e8: eb:6b:b4:6d:25:f9:1a:69:e5:23:0c:24:d5:ef:a3: 77:1a:8f:31:28:74:40:b3:92:01:71:65:4d:2d:3b: 63:b8:62:fe:17:1a:2d:9d:aa:5c:06:16:a1:47:2d: 24:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:09:0B:E7:35:80:07:E6:75:E8:1C:0A:D1:F3:B0:FE:88:86:7D:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e73369c8-bd3a-3556-b590-65b954d215ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:67:54:5d:98:f1:39:d6:3e:5f:04:f7:ad:2b:10:76:51:c9: cf:f2:e3:f6:59:31:af:60:e3:74:63:8c:6e:3b:a0:e7:d1:dd: 55:fe:b8:1b:60:fd:a0:ed:78:8a:08:00:1c:01:ec:de:04:55: 18:39:07:bd:4b:6b:31:c2:14:e0:24:c4:2b:9f:b8:33:ab:69: 9d:ce:98:5f:e9:de:01:67:db:ab:c3:0a:5b:bf:c1:35:84:24: dd:47:28:95:bd:ef:dc:05:90:1e:35:17:c8:39:74:11:97:11: 9f:5b:75:64:80:d5:9a:27:8f:1c:ca:63:0c:08:be:79:94:a9: 7e:40:94:8e:50:c2:55:d7:f7:92:6a:9f:b0:ed:11:0c:3e:61: 01:59:7b:7f:31:db:92:5d:74:04:48:8a:6e:75:37:40:26:10: a6:5a:8a:7c:0f:be:e6:9d:a5:43:3d:e9:9c:e9:ce:52:82:2e: 26:57:e1:34:25:0a:06:c8:d1:ef:c2:8c:e9:7d:a2:5d:e2:56: 5c:c6:80:ec:7c:54:79:f4:90:03:06:e7:64:ba:2b:65:72:27: 4f:cc:d9:19:18:5b:37:84:13:b4:37:c4:1b:89:b9:c9:67:ff: 64:57:6a:03:f7:0d:84:c2:4b:82:70:93:ed:b2:b6:4a:00:0f: b0:4a:90:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBut8CiWRDKktC1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MTljZDY5NmQtOTQ4Yy00NTI0LWJhNDktM2VlMjI5YjJhYzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ba9PNqRPNrPNY9YKMYQf+2u32uXqLlOnP0C f5xXZzK2P6TLoIZjLkiw+EYNjr2AmXApr3Q/czyXnOgnmTvLCgkNRyK3kb8KqQDG WKSjrSiS7Vjzw7mqujj0tV4xw2D4ccms5/+nBsUdX9cdDjrsG5qqx5SZ4Px+zfF4 gOh7P/zRcyFXm26HoKluJnG5l1GSdpRE/Xd9eHSN7BNfLTuZ71JLorCOid63VTIp ArlDhsAd6vOMRPks/kqkdvbP3PWRXhxVkdNyY2nFrrE2QKg5wujra7RtJfkaaeUj DCTV76N3Go8xKHRAs5IBcWVNLTtjuGL+FxotnapcBhahRy0kKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsJC+c1gAfmdegcCtHzsP6Ihn1fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTczMzY5YzgtYmQzYS0z NTU2LWI1OTAtNjViOTU0ZDIxNWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9QGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxnVF2Y8TnWPl8E960rEHZRyc/y4/ZZMa9g43RjjG47oOfR3VX+uBtg /aDteIoIABwB7N4EVRg5B71LazHCFOAkxCufuDOraZ3OmF/p3gFn26vDClu/wTWE JN1HKJW979wFkB41F8g5dBGXEZ9bdWSA1ZonjxzKYwwIvnmUqX5AlI5QwlXX95Jq n7DtEQw+YQFZe38x25JddARIim51N0AmEKZainwPvuadpUM96ZzpzlKCLiZX4TQl CgbI0e/CjOl9ol3iVlzGgOx8VHn0kAMG52S6K2VyJ0/M2RkYWzeEE7Q3xBuJucln /2RXagP3DYTCS4Jwk+2ytkoAD7BKkCM= -----END CERTIFICATE-----Generated at Sat Sep 6 05:21:12 2025 by rpki-client