$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/421f59cb-e0a2-3bec-9337-1c49aa0e73ca.roa File: 421f59cb-e0a2-3bec-9337-1c49aa0e73ca.roa (raw, json) Hash identifier: qASp3ue3SQ/ld8QukjNaNpp+ZP+Pbk6yepHr9iayLyM= Subject key identifier: 23:07:00:3D:6C:42:DA:23:C0:A8:65:09:C8:68:B8:BB:3B:C0:5D:BB Certificate issuer: /CN=9d5e8807-643a-46c3-a245-693c793610e4 Certificate serial: 010D0C9F4328584AA2C645AEB3E525A424C17BE0 Authority key identifier: 11:4F:A0:4D:D4:E3:78:3B:8A:F0:63:E9:49:24:2C:99:63:83:3C:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/421f59cb-e0a2-3bec-9337-1c49aa0e73ca.roa Signing time: Fri 25 Jul 2025 13:01:04 +0000 ROA not before: Fri 25 Jul 2025 13:01:04 +0000 ROA not after: Thu 23 Oct 2025 13:01:04 +0000 asID: 7018 IP address blocks: 23.129.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/9d5e8807-643a-46c3-a245-693c793610e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/9d5e8807-643a-46c3-a245-693c793610e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a2:c6:45:ae:b3:e5:25:a4:24:c1:7b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5e8807-643a-46c3-a245-693c793610e4 Validity Not Before: Jul 25 13:01:04 2025 GMT Not After : Oct 23 13:01:04 2025 GMT Subject: CN=df6ede99-9417-424c-915b-210d28a84404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:19:cc:4b:29:0a:cb:d9:35:78:1f:8b:f6:ba: b0:c3:af:d3:1a:c5:4e:a3:6b:74:2f:87:a8:46:0a: 6d:17:c7:67:e5:ee:28:54:d6:2c:69:54:12:a5:7f: b8:c8:f0:bc:ef:ae:4e:e2:52:78:61:94:5b:ac:1c: 9d:58:74:6f:8d:68:3c:d3:c8:7d:bc:15:26:83:46: 8f:2e:76:3b:8c:b0:af:20:80:b1:ec:c5:ca:03:e4: cc:69:d6:15:f1:7c:3e:60:4f:d8:b4:58:21:5d:cf: d1:59:c7:53:e2:00:7d:86:36:5d:10:cf:af:85:ed: ca:76:79:27:00:bf:c7:c2:89:c5:de:89:f7:0c:77: af:b3:c5:a1:80:9a:2e:93:a2:99:0a:5d:53:3e:2d: 54:5d:0a:04:61:0b:7d:a2:36:c1:cb:2e:9f:3d:84: f3:3e:b8:25:7c:62:13:52:f1:3a:eb:9b:14:91:aa: 05:89:d1:d9:60:d3:cf:0f:88:0d:77:90:53:8e:b8: c0:08:ed:b8:06:1e:4a:f5:9e:6c:73:5f:aa:73:d0: 6c:69:c2:17:2c:79:54:67:fe:17:31:0e:21:f9:df: d2:4b:b8:e1:bd:3f:28:20:42:b2:1c:52:7a:74:91: 04:91:23:c7:7b:51:9b:0d:7a:62:de:14:c1:83:fc: 3d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:07:00:3D:6C:42:DA:23:C0:A8:65:09:C8:68:B8:BB:3B:C0:5D:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/421f59cb-e0a2-3bec-9337-1c49aa0e73ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/9d5e8807-643a-46c3-a245-693c793610e4.crl X509v3 Authority Key Identifier: keyid:11:4F:A0:4D:D4:E3:78:3B:8A:F0:63:E9:49:24:2C:99:63:83:3C:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4.cer sbgp-ipAddrBlock: critical IPv4: 23.129.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:b6:b1:a3:56:36:55:ad:03:f4:fb:e0:f9:82:63:32:b1:08: 45:9c:06:10:9b:68:55:93:fa:f9:71:56:12:a1:84:5a:ac:6a: e9:3a:11:cd:31:fa:3d:48:86:66:a6:fa:5d:64:1a:5f:95:16: ee:3d:80:90:c7:15:4a:6b:6f:2d:2a:a5:bb:70:b0:a7:31:8b: e7:e5:5c:fe:fd:42:fe:44:36:85:39:ee:e3:dd:ba:58:6e:05: 16:36:dd:60:96:81:d2:b6:34:e4:ad:e1:2b:f3:ed:b3:88:a5: e4:a4:03:1c:bf:17:81:85:a6:5f:af:75:29:0d:3a:fc:48:61: f6:2e:33:da:2e:fe:64:12:42:bf:61:ca:36:bf:48:3d:d5:5c: 59:97:97:7b:f0:6c:49:29:e3:97:0a:0b:1c:5d:b6:07:ea:a5: 29:94:18:f3:98:e0:d1:2a:8c:3e:60:51:31:d8:75:9a:59:c2: db:8a:a6:88:cc:a9:96:cb:6d:a2:c0:44:73:3d:4e:fe:76:b0: 2f:88:d7:fe:80:87:82:85:2e:c2:e0:7d:1a:b7:7d:15:df:ba: 15:5a:e6:b5:0c:7b:62:73:2e:e8:59:46:a1:98:d7:57:f9:e9: dd:5a:ad:5b:33:0f:47:9e:9f:8d:66:c3:72:55:75:03:03:d0: 2b:52:f2:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqixkWus+UlpCTBe+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQ1ZTg4MDctNjQzYS00NmMzLWEyNDUtNjkzYzc5MzYx MGU0MB4XDTI1MDcyNTEzMDEwNFoXDTI1MTAyMzEzMDEwNFowLzEtMCsGA1UEAxMk ZGY2ZWRlOTktOTQxNy00MjRjLTkxNWItMjEwZDI4YTg0NDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBnMSykKy9k1eB+L9rqww6/TGsVOo2t0L4eo RgptF8dn5e4oVNYsaVQSpX+4yPC8765O4lJ4YZRbrBydWHRvjWg808h9vBUmg0aP LnY7jLCvIICx7MXKA+TMadYV8Xw+YE/YtFghXc/RWcdT4gB9hjZdEM+vhe3Kdnkn AL/HwonF3on3DHevs8WhgJouk6KZCl1TPi1UXQoEYQt9ojbByy6fPYTzPrglfGIT UvE665sUkaoFidHZYNPPD4gNd5BTjrjACO24Bh5K9Z5sc1+qc9BsacIXLHlUZ/4X MQ4h+d/SS7jhvT8oIEKyHFJ6dJEEkSPHe1GbDXpi3hTBg/w9SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMHAD1sQtojwKhlCchouLs7wF27MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZDVl ODgwNy02NDNhLTQ2YzMtYTI0NS02OTNjNzkzNjEwZTQvNDIxZjU5Y2ItZTBhMi0z YmVjLTkzMzctMWM0OWFhMGU3M2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWQ1ZTg4MDctNjQzYS00NmMzLWEy NDUtNjkzYzc5MzYxMGU0LzlkNWU4ODA3LTY0M2EtNDZjMy1hMjQ1LTY5M2M3OTM2 MTBlNC5jcmwwHwYDVR0jBBgwFoAUEU+gTdTjeDuK8GPpSSQsmWODPMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZDVlODgwNy02NDNhLTQ2YzMtYTI0NS02OTNj NzkzNjEwZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4HcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAO2saNWNlWtA/T74PmCYzKxCEWcBhCbaFWT+vlxVhKhhFqsauk6Ec0x +j1Ihmam+l1kGl+VFu49gJDHFUprby0qpbtwsKcxi+flXP79Qv5ENoU57uPdulhu BRY23WCWgdK2NOSt4Svz7bOIpeSkAxy/F4GFpl+vdSkNOvxIYfYuM9ou/mQSQr9h yja/SD3VXFmXl3vwbEkp45cKCxxdtgfqpSmUGPOY4NEqjD5gUTHYdZpZwtuKpojM qZbLbaLARHM9Tv52sC+I1/6Ah4KFLsLgfRq3fRXfuhVa5rUMe2JzLuhZRqGY11f5 6d1arVszD0een41mw3JVdQMD0CtS8qo= -----END CERTIFICATE-----Generated at Wed Aug 6 11:05:19 2025 by rpki-client