$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/508a8dbf-d713-3c5d-b7e5-bff7c2b315f0.roa File: 508a8dbf-d713-3c5d-b7e5-bff7c2b315f0.roa (raw, json) Hash identifier: C5FfMGiC7ZnZwLHu6Ql7He58r51kc6TLGQcPwQhviwY= Subject key identifier: 9E:BE:D3:43:9D:CB:8E:22:01:4B:9D:39:A5:CF:9F:AD:22:D3:DF:77 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A30503AC148B811C1043F7B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/508a8dbf-d713-3c5d-b7e5-bff7c2b315f0.roa Signing time: Sat 14 Jun 2025 13:01:04 +0000 ROA not before: Sat 14 Jun 2025 13:01:04 +0000 ROA not after: Fri 12 Sep 2025 13:01:04 +0000 asID: 25019 IP address blocks: 23.215.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:50:3a:c1:48:b8:11:c1:04:3f:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 14 13:01:04 2025 GMT Not After : Sep 12 13:01:04 2025 GMT Subject: CN=cd3b45cc-52e7-415f-aa41-251cd755b03d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:61:e8:c3:48:ec:3b:a3:6a:6b:af:2f:35:18: b6:5a:e8:3b:59:53:eb:85:a8:41:e4:c3:3e:87:a3: 5a:bd:74:7d:59:77:36:31:b4:93:7a:49:99:a5:85: c3:93:a7:d7:fb:92:f6:57:4e:0f:fb:ac:fd:fa:f0: 23:f0:16:a1:19:4c:f5:b9:e4:63:3f:27:72:00:a7: fd:39:50:67:7d:3f:d3:74:06:80:f1:c5:f2:45:aa: 4f:c1:72:90:59:8e:8d:00:b0:66:9a:cd:1e:b5:4f: 3b:a5:3d:30:74:cb:a6:5a:34:c0:8d:f7:17:1e:4a: b0:80:2c:3a:77:53:42:4f:12:53:f0:b8:cb:bd:2d: 6a:e7:29:bd:b2:1c:b7:af:23:42:2e:17:de:97:32: 24:de:93:cd:c8:21:b3:07:10:b2:ba:89:e4:94:bf: b1:9c:67:2a:b3:f3:42:de:d0:76:b8:6e:98:c0:21: 2c:75:57:68:b2:29:f1:63:66:df:bf:e1:86:cb:02: 32:12:aa:c5:43:8e:3e:4a:d3:d0:df:52:5a:91:18: 43:fd:29:af:24:73:b6:c7:37:cd:16:23:f0:1f:03: ee:0d:8d:a7:69:86:9c:be:4f:48:42:06:54:35:cb: 8d:5c:f6:08:3a:31:86:e7:b7:a8:84:a1:a3:9b:b0: 55:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BE:D3:43:9D:CB:8E:22:01:4B:9D:39:A5:CF:9F:AD:22:D3:DF:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/508a8dbf-d713-3c5d-b7e5-bff7c2b315f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:ae:9c:c2:95:34:cf:6e:ef:d2:c0:d5:b1:62:bc:19:2e:26: 83:ab:9c:85:dd:40:48:91:fd:66:c2:69:47:b2:17:c9:25:40: 17:73:af:7b:42:e0:6c:47:a9:aa:2d:f2:e8:76:e1:b2:4e:a1: f7:2a:b8:01:e9:d6:49:cb:70:ee:ad:e6:15:53:3b:26:1e:82: 15:c4:f9:33:25:80:69:00:50:d4:98:7b:5d:40:61:01:5e:90: 98:ce:c3:17:ca:b5:1c:16:20:12:cd:59:d6:5d:ef:9c:9f:3a: be:e0:59:c3:3e:9c:45:97:ad:35:8c:79:50:81:2f:cc:40:d0: 33:e7:1e:e3:e7:1d:55:0b:de:95:e1:63:ca:8a:27:14:1c:98: 75:4a:50:d9:16:af:b2:3a:fc:bd:df:d4:b2:02:78:bc:c3:aa: 8d:9c:38:65:b8:fb:1d:c9:6f:d1:2b:d9:17:85:35:03:f1:0b: 18:cd:72:78:6c:f6:14:93:5c:51:0c:e8:ab:1e:d8:a2:55:af: ff:d6:69:c6:c4:d3:88:84:52:2d:25:0b:84:6d:a7:20:b4:7d: 58:c0:07:3c:13:99:5c:cf:40:79:90:63:1b:b0:01:26:10:60: 52:83:b3:eb:20:43:0d:c9:fb:03:d0:ce:52:c4:a5:94:34:13: 01:59:ae:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEowUDrBSLgRwQQ/ewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk Y2QzYjQ1Y2MtNTJlNy00MTVmLWFhNDEtMjUxY2Q3NTViMDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2How0jsO6Nqa68vNRi2Wug7WVPrhahB5MM+ h6NavXR9WXc2MbSTekmZpYXDk6fX+5L2V04P+6z9+vAj8BahGUz1ueRjPydyAKf9 OVBnfT/TdAaA8cXyRapPwXKQWY6NALBmms0etU87pT0wdMumWjTAjfcXHkqwgCw6 d1NCTxJT8LjLvS1q5ym9shy3ryNCLhfelzIk3pPNyCGzBxCyuonklL+xnGcqs/NC 3tB2uG6YwCEsdVdosinxY2bfv+GGywIyEqrFQ44+StPQ31JakRhD/SmvJHO2xzfN FiPwHwPuDY2naYacvk9IQgZUNcuNXPYIOjGG57eohKGjm7BVOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6+00Ody44iAUudOaXPn60i0993MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTA4YThkYmYtZDcxMy0z YzVkLWI3ZTUtYmZmN2MyYjMxNWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9fQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGunMKVNM9u79LA1bFivBkuJoOrnIXdQEiR/WbCaUeyF8klQBdzr3tC 4GxHqaot8uh24bJOofcquAHp1knLcO6t5hVTOyYeghXE+TMlgGkAUNSYe11AYQFe kJjOwxfKtRwWIBLNWdZd75yfOr7gWcM+nEWXrTWMeVCBL8xA0DPnHuPnHVUL3pXh Y8qKJxQcmHVKUNkWr7I6/L3f1LICeLzDqo2cOGW4+x3Jb9Er2ReFNQPxCxjNcnhs 9hSTXFEM6Kse2KJVr//WacbE04iEUi0lC4RtpyC0fVjABzwTmVzPQHmQYxuwASYQ YFKDs+sgQw3J+wPQzlLEpZQ0EwFZrjA= -----END CERTIFICATE-----Generated at Mon Jun 16 06:22:30 2025 by rpki-client