$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f7293ca-c01c-365d-b666-850d1d75d6c3.roa File: 3f7293ca-c01c-365d-b666-850d1d75d6c3.roa (raw, json) Hash identifier: ufk2LauW0S6PB71GN9okHVhbki4HmoPPfPGVd8elQ0w= Subject key identifier: 18:7C:61:22:AB:44:9F:5B:C2:0A:7C:4D:C7:D8:FE:63:21:50:39:D8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A77809902EF6C5A68F1BBAF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f7293ca-c01c-365d-b666-850d1d75d6c3.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 16625 IP address blocks: 23.207.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:99:02:ef:6c:5a:68:f1:bb:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=7c6d391e-aa1c-4dea-a848-fca9b04e055f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f9:d6:6d:81:b5:ad:71:a1:57:c4:6f:9c:6b: 36:b9:95:86:fb:84:6d:b6:b3:e7:70:8a:3c:7d:3c: c3:f1:61:29:45:c2:f2:a1:f4:6c:df:1d:b8:32:e1: e1:3c:27:2b:b4:fd:11:89:40:a6:2b:7c:59:fc:60: 15:d1:57:b5:0c:62:44:11:26:c6:01:83:29:13:d6: 06:57:7a:e4:3c:ef:5c:c7:64:b0:9d:72:49:37:e1: 5a:52:04:e4:02:42:d8:b2:f1:dd:46:b7:91:4d:20: a9:1d:e8:04:3a:d0:93:55:cd:9b:3b:e6:91:5c:62: 4b:73:6e:fe:65:c4:a2:23:da:81:a0:ca:57:90:94: 43:f9:5b:33:62:d0:ed:a5:38:d4:95:f5:c2:7a:60: c2:05:4f:de:17:6a:a4:34:10:5b:57:41:02:ae:54: a2:24:e6:2d:c6:e8:11:97:fe:71:66:63:58:c1:de: 37:1b:3e:fe:1b:e7:16:df:82:8b:f5:21:0c:72:6a: 90:4f:86:09:cd:ff:6b:87:b4:fb:b7:f8:30:82:b9: 3e:2d:e3:d2:28:71:84:15:63:c2:28:fc:de:8c:0f: bb:4f:f2:fd:c3:d2:c2:1f:0d:ad:27:2e:e3:e6:52: ba:c3:79:5b:5c:cf:0e:55:9a:de:db:c2:67:3c:fd: 10:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7C:61:22:AB:44:9F:5B:C2:0A:7C:4D:C7:D8:FE:63:21:50:39:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f7293ca-c01c-365d-b666-850d1d75d6c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:58:c0:9f:7c:9e:79:df:57:c6:c9:31:a3:ef:ec:00:2c:0d: 46:99:6a:a1:b3:9e:31:f9:98:4c:d0:0a:5d:dc:29:79:36:97: 0f:b7:1f:41:80:21:67:ac:30:6d:60:30:6c:58:c7:9a:2b:15: ba:ca:0d:35:d9:8d:6b:35:d5:19:b8:db:93:96:69:78:8e:cb: 48:cc:59:cc:2d:a7:de:50:c5:ad:ba:7b:ba:80:13:d5:01:53: 2f:45:c7:e0:2e:74:ab:57:4e:4d:3a:82:cb:bd:f0:49:d4:11: e6:33:42:a2:57:72:4f:bf:f0:8c:69:48:6c:fa:46:b5:e7:5f: 20:39:65:92:d5:3e:8a:dd:d1:f8:9f:3e:51:2c:1c:81:f6:72: 59:e7:36:40:98:6a:24:51:8f:57:3f:cf:17:7d:1e:2c:98:1d: ba:8e:55:5c:bc:ca:39:c3:81:64:47:87:83:9b:b1:d0:44:2e: 7f:7c:98:c4:a2:59:1c:7a:64:52:46:c1:08:a9:da:bd:a1:5b: 9a:19:86:eb:ea:9e:f5:ed:9d:78:4b:be:d1:bf:d8:3c:58:5d: 28:51:fc:b3:09:a9:e1:c2:85:fb:b9:f7:44:ad:a5:c8:04:b9: ee:d5:94:35:cb:5b:b5:65:a4:70:0f:b6:93:29:13:e6:2e:b2: 62:e2:88:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gJkC72xaaPG7rwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk N2M2ZDM5MWUtYWExYy00ZGVhLWE4NDgtZmNhOWIwNGUwNTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvnWbYG1rXGhV8RvnGs2uZWG+4RttrPncIo8 fTzD8WEpRcLyofRs3x24MuHhPCcrtP0RiUCmK3xZ/GAV0Ve1DGJEESbGAYMpE9YG V3rkPO9cx2SwnXJJN+FaUgTkAkLYsvHdRreRTSCpHegEOtCTVc2bO+aRXGJLc27+ ZcSiI9qBoMpXkJRD+VszYtDtpTjUlfXCemDCBU/eF2qkNBBbV0ECrlSiJOYtxugR l/5xZmNYwd43Gz7+G+cW34KL9SEMcmqQT4YJzf9rh7T7t/gwgrk+LePSKHGEFWPC KPzejA+7T/L9w9LCHw2tJy7j5lK6w3lbXM8OVZre28JnPP0QBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBh8YSKrRJ9bwgp8TcfY/mMhUDnYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2Y3MjkzY2EtYzAxYy0z NjVkLWI2NjYtODUwZDFkNzVkNmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF88oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRYwJ98nnnfV8bJMaPv7AAsDUaZaqGznjH5mEzQCl3cKXk2lw+3H0GA IWesMG1gMGxYx5orFbrKDTXZjWs11Rm425OWaXiOy0jMWcwtp95Qxa26e7qAE9UB Uy9Fx+AudKtXTk06gsu98EnUEeYzQqJXck+/8IxpSGz6RrXnXyA5ZZLVPord0fif PlEsHIH2clnnNkCYaiRRj1c/zxd9HiyYHbqOVVy8yjnDgWRHh4ObsdBELn98mMSi WRx6ZFJGwQip2r2hW5oZhuvqnvXtnXhLvtG/2DxYXShR/LMJqeHChfu590StpcgE ue7VlDXLW7VlpHAPtpMpE+YusmLiiIA= -----END CERTIFICATE-----Generated at Tue Aug 5 17:09:34 2025 by rpki-client