$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3aaaa0b2-15ef-3600-bcb6-4019d62b0553.roa File: 3aaaa0b2-15ef-3600-bcb6-4019d62b0553.roa (raw, json) Hash identifier: aOillbVMW8NPQiyJpNkCRc8gBh6UoN4hoVR53AsvDDk= Subject key identifier: 77:75:80:09:93:05:C9:65:D1:EC:07:36:53:12:1C:7D:67:85:41:76 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A655B38F91F67DAFB2C3F8C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3aaaa0b2-15ef-3600-bcb6-4019d62b0553.roa Signing time: Thu 03 Jul 2025 13:01:04 +0000 ROA not before: Thu 03 Jul 2025 13:01:04 +0000 ROA not after: Wed 01 Oct 2025 13:01:04 +0000 asID: 16625 IP address blocks: 23.199.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:65:5b:38:f9:1f:67:da:fb:2c:3f:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 3 13:01:04 2025 GMT Not After : Oct 1 13:01:04 2025 GMT Subject: CN=03008ffd-a32e-4721-ad88-4a7709b80352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:02:22:6d:25:4c:83:c4:ee:91:8b:b8:cf:78: 7c:26:3b:ba:f9:73:2f:be:df:33:9c:43:0d:0a:ab: 0b:0b:d8:ea:45:15:c7:ac:72:c7:5c:27:c1:3e:cc: 93:11:b4:9d:d0:9d:47:15:d1:66:c2:4a:36:58:40: 45:e2:3e:b8:a6:67:b4:59:47:9e:e7:72:64:ec:36: a7:f7:92:93:8b:ac:1c:8e:b0:26:ce:4b:2c:dd:25: ac:84:da:a1:80:ec:e8:57:38:87:ac:03:6f:5b:d5: f3:f6:75:6a:87:71:0d:53:3c:80:61:90:13:7c:44: 8c:ba:ce:e8:3a:a4:e1:70:1f:7d:74:d4:0e:9c:4d: 88:4a:2a:82:35:8d:b6:46:cf:94:82:ff:be:6a:16: 26:de:82:34:5e:65:0d:9d:51:54:f8:b2:ab:6b:f3: 7b:c9:7c:30:d3:11:9f:1c:ca:c2:bb:5e:90:d0:84: 06:8c:f7:25:9f:83:d9:36:6c:ba:da:e8:5e:da:85: 83:6b:d1:c0:7c:78:70:47:39:72:0e:f8:43:42:40: 44:4a:e8:0d:66:36:d7:05:fd:0c:9c:9c:fc:c9:47: b6:c2:ae:d3:36:b2:af:ca:af:68:0f:d5:4a:7e:8d: ae:08:9f:01:c5:25:07:4b:ba:33:8d:90:a2:45:36: 75:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:75:80:09:93:05:C9:65:D1:EC:07:36:53:12:1C:7D:67:85:41:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3aaaa0b2-15ef-3600-bcb6-4019d62b0553.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:68:4b:36:9a:7d:ff:c4:24:bf:1a:00:c1:74:6a:65:66:05: a7:96:5f:08:31:e3:c9:17:35:2e:0b:8a:74:59:38:ae:96:e3: 05:69:b9:4a:34:20:11:6d:85:25:b1:36:17:8c:7d:3f:ab:ed: 47:76:28:4a:b8:74:47:62:ea:9e:07:37:63:cd:62:4c:d9:df: 22:0c:a7:96:bd:48:e3:75:b2:df:da:0d:c2:1a:be:de:14:6a: 2d:cf:db:98:84:a9:65:b8:37:e5:d1:30:bd:5a:aa:1d:23:b1: 72:60:5c:ec:13:39:ee:d5:24:b5:28:87:fe:aa:85:02:e6:bd: 4d:24:98:80:61:7c:0a:90:51:72:53:cb:a9:15:8f:09:f2:67: b1:71:cc:97:95:40:ba:e9:59:37:d1:bd:ce:a3:97:88:d6:4b: 1e:d3:f3:01:81:3e:1a:8d:07:18:95:cd:39:56:53:fb:07:7f: b1:e3:61:bd:a6:60:52:ab:47:ae:0f:3b:e6:18:d7:dd:df:d9: 32:83:78:87:5d:55:d4:c0:87:16:40:fc:6c:c9:bf:7c:d8:70: 6d:c2:3a:a2:f1:4d:f0:7b:cd:24:de:d3:0d:91:c8:fb:f6:2f: 55:13:61:e2:e7:54:f8:6c:fe:0f:a8:de:6e:11:61:44:73:54: 4f:eb:b9:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEplWzj5H2fa+yw/jIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMzEzMDEwNFoXDTI1MTAwMTEzMDEwNFowLzEtMCsGA1UEAxMk MDMwMDhmZmQtYTMyZS00NzIxLWFkODgtNGE3NzA5YjgwMzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQIibSVMg8TukYu4z3h8Jju6+XMvvt8znEMN CqsLC9jqRRXHrHLHXCfBPsyTEbSd0J1HFdFmwko2WEBF4j64pme0WUee53Jk7Dan 95KTi6wcjrAmzkss3SWshNqhgOzoVziHrANvW9Xz9nVqh3ENUzyAYZATfESMus7o OqThcB99dNQOnE2ISiqCNY22Rs+Ugv++ahYm3oI0XmUNnVFU+LKra/N7yXww0xGf HMrCu16Q0IQGjPcln4PZNmy62uhe2oWDa9HAfHhwRzlyDvhDQkBESugNZjbXBf0M nJz8yUe2wq7TNrKvyq9oD9VKfo2uCJ8BxSUHS7ozjZCiRTZ1uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHd1gAmTBcll0ewHNlMSHH1nhUF2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2FhYWEwYjItMTVlZi0z NjAwLWJjYjYtNDAxOWQ2MmIwNTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8fAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBoSzaaff/EJL8aAMF0amVmBaeWXwgx48kXNS4LinRZOK6W4wVpuUo0 IBFthSWxNheMfT+r7Ud2KEq4dEdi6p4HN2PNYkzZ3yIMp5a9SON1st/aDcIavt4U ai3P25iEqWW4N+XRML1aqh0jsXJgXOwTOe7VJLUoh/6qhQLmvU0kmIBhfAqQUXJT y6kVjwnyZ7FxzJeVQLrpWTfRvc6jl4jWSx7T8wGBPhqNBxiVzTlWU/sHf7HjYb2m YFKrR64PO+YY193f2TKDeIddVdTAhxZA/GzJv3zYcG3COqLxTfB7zSTe0w2RyPv2 L1UTYeLnVPhs/g+o3m4RYURzVE/ruUQ= -----END CERTIFICATE-----Generated at Tue Aug 5 17:21:10 2025 by rpki-client