$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/422c03f2-7f46-3ee5-ad74-8dee7c42949f.roa File: 422c03f2-7f46-3ee5-ad74-8dee7c42949f.roa (raw, json) Hash identifier: LiSiK+5W7SEW6f+G+owZFTMHzCYG1oNyC0r08bcAMzI= Subject key identifier: FC:BF:07:D4:1D:DB:FE:6F:78:EA:17:DE:E6:36:33:FB:71:94:03:12 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7A4B5B9D2E019211F1C942C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/422c03f2-7f46-3ee5-ad74-8dee7c42949f.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 16625 IP address blocks: 23.211.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:5b:9d:2e:01:92:11:f1:c9:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=ee5b9a2a-a914-4541-9d2e-f9ff0b1c9521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:67:1e:24:f6:15:de:9e:a1:56:80:53:c9:7d: d8:3b:ca:19:34:eb:f3:41:dc:00:ea:dd:3d:ee:8a: 74:d2:76:6f:90:48:d5:d2:f3:d7:19:15:3d:d4:27: 8b:78:81:29:53:a3:1c:3e:ec:72:e1:1b:13:f6:ce: d2:bf:71:30:37:e0:f7:bc:31:66:09:86:81:0e:0a: ec:bc:d1:b6:70:f4:67:ac:6d:fb:aa:03:f3:1d:6c: ff:d3:77:f8:ba:45:81:82:b1:21:c7:ac:c3:b2:ec: 3e:b6:02:84:f0:1c:3f:8c:10:2a:ff:13:2e:51:16: ab:e2:db:67:97:d8:b9:15:ac:d8:88:ed:1a:ba:5c: d0:7e:76:6c:d3:e8:11:6f:b1:d3:ad:3b:13:c4:32: f7:96:e2:31:74:ec:d2:2e:25:91:8f:16:46:7e:aa: c6:8a:e3:e8:19:f3:3b:65:1c:e3:1a:0a:02:69:17: 65:6e:76:46:1a:d3:54:f0:6b:8f:98:f3:ed:83:e5: 33:28:6a:3a:97:8a:5f:3e:de:92:fe:dc:6f:9f:cb: 81:a5:c7:06:8d:28:63:c7:97:bb:5a:bb:fb:29:ff: 98:f3:8a:67:be:47:1b:40:52:61:74:52:9e:61:a8: b0:5b:84:5a:8b:f8:62:d7:ab:ee:1b:f0:cb:60:9b: 9c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BF:07:D4:1D:DB:FE:6F:78:EA:17:DE:E6:36:33:FB:71:94:03:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/422c03f2-7f46-3ee5-ad74-8dee7c42949f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:90:f0:46:0c:80:6d:c5:4b:29:27:a0:31:dc:0e:e8:7e:f2: 12:9b:07:6b:91:c0:40:7a:7f:b1:8f:90:79:a8:b7:1f:79:32: 0b:3e:e9:ca:ec:54:76:4c:c2:2c:c5:43:ce:2b:0a:4a:da:98: 1f:4c:55:0b:38:ee:03:53:35:32:98:cc:c2:e8:1a:72:25:bd: 88:f3:cc:fe:7d:7c:c7:aa:4d:21:51:b9:88:89:9e:d6:d8:8a: d5:9a:eb:72:23:b8:e2:e3:f8:ab:5f:47:78:b9:3a:1a:b7:60: eb:e9:fa:3a:e5:4a:41:58:01:ce:0e:1f:5a:60:31:f1:96:dc: 28:02:b9:29:26:1b:75:f6:d5:18:c8:79:ae:fe:2a:3d:3b:d3: 1d:32:43:79:16:2d:ed:8a:71:51:e7:3d:32:24:92:06:c2:f2: 44:28:a2:97:ee:2d:95:cd:9f:52:06:cd:9c:17:ba:0f:17:d5: e9:e8:4f:dc:22:75:48:8c:4f:70:4a:46:ba:3e:42:36:ca:61: 49:0a:36:ed:7f:8f:7d:6c:5f:4d:51:84:e2:b2:20:c5:d2:d9: cd:90:f2:72:28:dc:70:9d:93:a3:73:2d:65:1d:14:85:7f:98: 38:40:c3:32:80:e9:4d:31:bc:58:93:f1:5f:42:25:48:21:d1: f4:31:cb:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S1udLgGSEfHJQsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk ZWU1YjlhMmEtYTkxNC00NTQxLTlkMmUtZjlmZjBiMWM5NTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWceJPYV3p6hVoBTyX3YO8oZNOvzQdwA6t09 7op00nZvkEjV0vPXGRU91CeLeIEpU6McPuxy4RsT9s7Sv3EwN+D3vDFmCYaBDgrs vNG2cPRnrG37qgPzHWz/03f4ukWBgrEhx6zDsuw+tgKE8Bw/jBAq/xMuURar4ttn l9i5FazYiO0aulzQfnZs0+gRb7HTrTsTxDL3luIxdOzSLiWRjxZGfqrGiuPoGfM7 ZRzjGgoCaRdlbnZGGtNU8GuPmPPtg+UzKGo6l4pfPt6S/txvn8uBpccGjShjx5e7 Wrv7Kf+Y84pnvkcbQFJhdFKeYaiwW4Rai/hi16vuG/DLYJucUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPy/B9Qd2/5veOoX3uY2M/txlAMSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDIyYzAzZjItN2Y0Ni0z ZWU1LWFkNzQtOGRlZTdjNDI5NDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9OYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaQ8EYMgG3FSyknoDHcDuh+8hKbB2uRwEB6f7GPkHmotx95Mgs+6crs VHZMwizFQ84rCkramB9MVQs47gNTNTKYzMLoGnIlvYjzzP59fMeqTSFRuYiJntbY itWa63IjuOLj+KtfR3i5Ohq3YOvp+jrlSkFYAc4OH1pgMfGW3CgCuSkmG3X21RjI ea7+Kj070x0yQ3kWLe2KcVHnPTIkkgbC8kQoopfuLZXNn1IGzZwXug8X1enoT9wi dUiMT3BKRro+QjbKYUkKNu1/j31sX01RhOKyIMXS2c2Q8nIo3HCdk6NzLWUdFIV/ mDhAwzKA6U0xvFiT8V9CJUgh0fQxyz0= -----END CERTIFICATE-----Generated at Mon Aug 4 22:21:48 2025 by rpki-client