$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b4418ef-983b-3b50-83aa-636b30eaf478.roa File: 3b4418ef-983b-3b50-83aa-636b30eaf478.roa (raw, json) Hash identifier: 4/ClW+Xi4308/wcqcAaQqJmVTah5Hkx48tMwnDmPiVw= Subject key identifier: 10:77:11:CB:FE:2C:C5:08:81:AC:8A:25:7D:DA:4A:8E:87:6D:6F:C2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8840AA784BFAF8ABD732B740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b4418ef-983b-3b50-83aa-636b30eaf478.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 20940 IP address blocks: 23.219.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:aa:78:4b:fa:f8:ab:d7:32:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=86b4befe-538e-4308-a70a-b4bd7e7e1d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:99:8e:b8:49:96:94:71:a3:7f:a3:9b:6b:0e: 61:33:2a:d8:04:fd:6f:05:85:5b:b0:95:9b:e8:bd: 26:ad:d0:11:e7:67:26:90:bd:6f:8c:f5:12:9e:05: c6:bb:be:58:38:0d:17:7d:9b:b8:d9:4e:6d:2d:2e: 0d:00:ea:a3:e2:38:57:d3:ed:6d:4b:12:f5:50:fe: cd:ca:85:db:46:61:d4:41:89:5f:18:89:3d:9e:1f: e7:f6:4a:42:19:67:a1:e2:9f:22:96:1c:d1:99:aa: ca:04:18:62:7d:39:1b:5b:d5:1c:0a:0d:c0:9f:5d: 6f:60:e5:58:85:11:60:b6:e4:7a:8c:d1:ca:5b:3c: 8c:e8:16:20:97:4c:fe:67:2b:ac:25:a8:e6:73:19: 4e:bf:bf:6c:bd:27:53:e6:68:99:bc:ec:2b:b7:ae: 3b:7d:e7:90:61:4a:cf:f1:26:db:70:5f:be:80:b2: bf:9c:90:d7:7b:6c:6f:de:d5:52:80:0a:e1:94:ae: 5a:24:47:a7:20:98:12:8b:25:5d:c9:8e:81:8f:d1: 4b:cf:48:3b:ca:28:42:6b:20:33:e2:02:11:ca:63: f0:34:c4:9a:f2:30:91:62:fe:2b:00:0b:df:79:65: 82:d0:20:c7:0e:43:fd:d9:8e:92:f8:79:ee:d9:61: 84:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:77:11:CB:FE:2C:C5:08:81:AC:8A:25:7D:DA:4A:8E:87:6D:6F:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b4418ef-983b-3b50-83aa-636b30eaf478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:f5:87:31:65:61:e5:2f:9c:4e:21:a6:93:3b:b5:e1:ad:9e: 50:21:e8:ca:18:68:df:b8:0c:31:a9:d7:6d:2d:8f:7c:14:08: 16:c2:80:03:58:b0:75:c9:c5:bf:a9:4e:b9:09:e6:22:41:2a: fd:fc:00:c3:dc:8f:a7:32:f4:bd:23:60:4e:f7:9f:57:2f:5a: b6:51:5f:b8:36:18:c9:7c:ac:f0:b3:31:05:24:70:88:99:cd: 18:2d:47:0e:7c:7c:8b:32:e9:01:21:54:a6:31:05:91:79:54: 22:75:b4:50:1d:24:eb:0c:5b:ae:3f:95:bf:69:fd:b5:6d:92: 4f:b0:32:44:c7:c8:d6:6a:ff:b7:09:4e:55:e6:ca:ae:25:f2: 94:e7:49:b4:55:2c:6d:fe:62:bd:7d:fa:79:e4:66:62:ba:b4: 50:84:69:d7:12:38:20:16:39:9d:b1:a3:0e:41:bb:57:83:41: 47:dc:63:02:69:f1:fc:34:cd:74:b9:24:b7:44:d6:54:55:c0: 98:5b:75:15:1b:5e:45:8c:4f:62:2f:43:2a:9a:c7:b9:28:6a: af:ae:20:0e:54:92:10:b7:17:64:a9:e4:d0:40:bb:7a:1e:04: b3:3f:37:34:13:b0:46:f7:6b:cd:5e:dd:23:2f:e4:10:0e:7f: 56:6a:41:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQKp4S/r4q9cyt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk ODZiNGJlZmUtNTM4ZS00MzA4LWE3MGEtYjRiZDdlN2UxZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5mOuEmWlHGjf6Obaw5hMyrYBP1vBYVbsJWb 6L0mrdAR52cmkL1vjPUSngXGu75YOA0XfZu42U5tLS4NAOqj4jhX0+1tSxL1UP7N yoXbRmHUQYlfGIk9nh/n9kpCGWeh4p8ilhzRmarKBBhifTkbW9UcCg3An11vYOVY hRFgtuR6jNHKWzyM6BYgl0z+ZyusJajmcxlOv79svSdT5miZvOwrt647feeQYUrP 8SbbcF++gLK/nJDXe2xv3tVSgArhlK5aJEenIJgSiyVdyY6Bj9FLz0g7yihCayAz 4gIRymPwNMSa8jCRYv4rAAvfeWWC0CDHDkP92Y6S+Hnu2WGEKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBB3Ecv+LMUIgayKJX3aSo6HbW/CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2I0NDE4ZWYtOTgzYi0z YjUwLTgzYWEtNjM2YjMwZWFmNDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9vPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABz1hzFlYeUvnE4hppM7teGtnlAh6MoYaN+4DDGp120tj3wUCBbCgANY sHXJxb+pTrkJ5iJBKv38AMPcj6cy9L0jYE73n1cvWrZRX7g2GMl8rPCzMQUkcIiZ zRgtRw58fIsy6QEhVKYxBZF5VCJ1tFAdJOsMW64/lb9p/bVtkk+wMkTHyNZq/7cJ TlXmyq4l8pTnSbRVLG3+Yr19+nnkZmK6tFCEadcSOCAWOZ2xow5Bu1eDQUfcYwJp 8fw0zXS5JLdE1lRVwJhbdRUbXkWMT2IvQyqax7koaq+uIA5UkhC3F2Sp5NBAu3oe BLM/NzQTsEb3a81e3SMv5BAOf1ZqQds= -----END CERTIFICATE-----Generated at Wed Aug 6 00:55:45 2025 by rpki-client