$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5502977a-989d-317b-8dc8-3c5ae85e8834.roa File: 5502977a-989d-317b-8dc8-3c5ae85e8834.roa (raw, json) Hash identifier: Ds+h5lH9+f+0hUQmozYC9/Dlvghy61SjKDnZ0gGE6d8= Subject key identifier: A8:04:9E:18:0D:83:51:56:2F:AB:42:A4:DC:35:29:4A:F2:24:2E:93 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A78E5FE98BC4F11784E9C0A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5502977a-989d-317b-8dc8-3c5ae85e8834.roa Signing time: Thu 10 Jul 2025 13:01:02 +0000 ROA not before: Thu 10 Jul 2025 13:01:02 +0000 ROA not after: Wed 08 Oct 2025 13:01:02 +0000 asID: 9498 IP address blocks: 23.208.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:e5:fe:98:bc:4f:11:78:4e:9c:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 10 13:01:02 2025 GMT Not After : Oct 8 13:01:02 2025 GMT Subject: CN=65b6ec9f-95f0-4b53-a26b-3a2f7fb2c2b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7b:dc:04:3c:b0:f6:61:bd:9c:e3:18:d2:65: f8:a8:da:cd:3e:83:b3:a4:26:45:39:ca:0e:4c:50: b7:ca:99:8e:d8:04:5b:a9:5e:ad:31:80:83:9b:34: cd:c8:8c:ee:2e:34:bd:31:c8:67:29:52:5b:9a:5e: ce:23:88:b8:1e:97:30:c4:a2:a3:33:db:4d:80:66: e0:69:6b:13:1e:a8:2c:01:da:ce:f1:ce:d1:88:08: 3f:d1:fb:21:4b:c3:cc:b3:73:35:06:c0:9b:4d:2f: 6b:61:9b:6b:80:99:de:5a:33:08:f5:33:2f:8a:af: 29:e9:fc:72:e4:ca:44:0f:2b:4d:55:9d:73:af:17: 85:c1:a1:a2:40:73:f1:ba:b9:ac:b3:c5:81:27:55: d5:39:a9:eb:1f:c3:3b:ff:69:69:8c:02:4b:eb:29: 13:32:d1:8b:fc:a9:49:ef:b6:c1:52:e2:1b:d2:6a: 40:0e:d2:61:3c:89:12:da:24:d8:1b:b8:62:7d:b7: 05:df:b5:e3:a3:8d:fb:aa:c3:fd:a2:73:79:77:6c: 3b:c3:62:a6:1f:97:60:35:07:0b:c5:01:2f:00:62: 09:30:81:d9:9a:2b:64:0d:28:6c:e0:f7:95:76:5b: f1:c5:c9:a5:be:ca:bb:eb:4e:7c:1f:c4:31:9d:1b: 9e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:04:9E:18:0D:83:51:56:2F:AB:42:A4:DC:35:29:4A:F2:24:2E:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5502977a-989d-317b-8dc8-3c5ae85e8834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:e8:d0:a9:b7:35:12:a3:cd:19:b7:e3:07:17:08:37:2b:63: 6a:cc:bc:ca:2a:f3:69:01:ab:65:b8:39:ea:48:02:1e:cd:dc: 6d:99:c9:93:4e:f8:ae:b3:90:bf:83:9c:cb:09:3e:94:57:90: d7:14:e6:a9:72:11:45:72:54:68:ed:cc:a1:de:70:20:56:95: a3:40:23:c3:56:cb:ea:0b:35:9e:f0:64:42:52:09:03:49:13: 2b:75:67:52:ac:0d:b7:2e:e1:e6:7a:39:e4:34:1d:a6:5b:e0: 37:4a:c3:5a:4d:21:f2:a1:f0:bf:fc:46:1e:7d:a5:9a:f1:53: 97:e3:78:e1:4c:47:4e:3f:9e:d4:84:ca:d9:43:99:d7:dd:4e: 55:f0:cb:33:81:6d:fe:d4:cb:ed:46:f4:de:1c:5c:4c:e0:ab: 7f:b1:f2:76:d6:35:75:ec:6d:a7:7a:69:2e:cc:48:1f:67:47: 75:1c:ef:47:c4:46:21:69:08:af:c9:35:9d:8f:e0:ff:f7:3e: a4:e9:43:40:cd:9b:be:4f:8d:db:3e:d4:95:f8:15:7b:60:5a: 9a:3c:5f:fd:b5:87:a2:b4:d4:aa:59:dc:bc:93:2f:bd:81:01: ec:de:20:9c:12:f3:22:83:37:4f:d4:8f:ae:af:fe:17:d7:fd: f2:be:4b:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp45f6YvE8ReE6cCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMDEzMDEwMloXDTI1MTAwODEzMDEwMlowLzEtMCsGA1UEAxMk NjViNmVjOWYtOTVmMC00YjUzLWEyNmItM2EyZjdmYjJjMmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3vcBDyw9mG9nOMY0mX4qNrNPoOzpCZFOcoO TFC3ypmO2ARbqV6tMYCDmzTNyIzuLjS9MchnKVJbml7OI4i4HpcwxKKjM9tNgGbg aWsTHqgsAdrO8c7RiAg/0fshS8PMs3M1BsCbTS9rYZtrgJneWjMI9TMviq8p6fxy 5MpEDytNVZ1zrxeFwaGiQHPxurmss8WBJ1XVOanrH8M7/2lpjAJL6ykTMtGL/KlJ 77bBUuIb0mpADtJhPIkS2iTYG7hifbcF37Xjo437qsP9onN5d2w7w2KmH5dgNQcL xQEvAGIJMIHZmitkDShs4PeVdlvxxcmlvsq76058H8QxnRueKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgEnhgNg1FWL6tCpNw1KUryJC6TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTUwMjk3N2EtOTg5ZC0z MTdiLThkYzgtM2M1YWU4NWU4ODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9BAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbo0Km3NRKjzRm34wcXCDcrY2rMvMoq82kBq2W4OepIAh7N3G2ZyZNO +K6zkL+DnMsJPpRXkNcU5qlyEUVyVGjtzKHecCBWlaNAI8NWy+oLNZ7wZEJSCQNJ Eyt1Z1KsDbcu4eZ6OeQ0HaZb4DdKw1pNIfKh8L/8Rh59pZrxU5fjeOFMR04/ntSE ytlDmdfdTlXwyzOBbf7Uy+1G9N4cXEzgq3+x8nbWNXXsbad6aS7MSB9nR3Uc70fE RiFpCK/JNZ2P4P/3PqTpQ0DNm75Pjds+1JX4FXtgWpo8X/21h6K01KpZ3LyTL72B AezeIJwS8yKDN0/Uj66v/hfX/fK+S+A= -----END CERTIFICATE-----Generated at Wed Aug 6 00:53:47 2025 by rpki-client