$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5978f4f9-c212-323b-b9aa-2a6f5d74fdb3.roa File: 5978f4f9-c212-323b-b9aa-2a6f5d74fdb3.roa (raw, json) Hash identifier: Wfhuuvurrcez6kx3emsAW1BMN2G0RKQOA/VAtbQfGqE= Subject key identifier: 18:6E:4E:72:2B:7C:A3:99:5A:DA:64:81:53:FB:64:04:38:6F:E5:A3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8840A2195A46DE7804D030A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5978f4f9-c212-323b-b9aa-2a6f5d74fdb3.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 16625 IP address blocks: 23.218.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:a2:19:5a:46:de:78:04:d0:30:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=566fb27c-c3bc-46ac-a147-282b4af03664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:33:50:1c:36:f4:ca:72:fa:55:70:3e:c1:21: a9:62:d1:10:78:cf:57:f0:77:00:b1:59:48:1b:85: d0:4e:32:c3:31:a8:b4:ba:12:eb:75:dc:b2:05:88: e9:0f:a9:c1:33:8c:03:bc:3d:87:17:c4:c5:3e:77: e0:8b:47:5b:be:94:8d:a2:a0:13:65:a2:56:01:6c: 00:78:f8:12:e7:36:24:c7:13:93:7a:10:fc:35:a4: 21:4c:96:5c:35:6a:16:5b:61:92:6d:7d:b5:4b:34: e8:79:fe:30:bd:64:4e:09:94:6b:00:b9:a2:cf:fb: 31:4c:f3:5e:28:ef:da:e1:e4:b1:dc:17:c4:05:d6: 30:e9:c0:7d:3f:b9:53:23:52:60:19:9c:9a:a1:e1: 23:61:f9:d4:e8:07:54:a1:2b:d0:15:3b:2c:32:66: 10:2a:0d:88:80:25:c1:51:14:99:07:23:c3:c9:d3: a5:40:b4:6c:42:1d:09:19:35:3b:b1:c3:17:e1:fe: c2:83:48:77:21:ac:bd:7d:f4:87:10:2d:70:61:1c: f0:31:85:56:52:27:31:4c:71:8b:0e:f5:52:13:09: db:3c:20:07:89:9c:76:f9:73:3f:4c:3c:e2:19:d2: 0d:5a:88:e0:17:70:1d:76:41:27:87:f0:50:db:d0: 30:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6E:4E:72:2B:7C:A3:99:5A:DA:64:81:53:FB:64:04:38:6F:E5:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5978f4f9-c212-323b-b9aa-2a6f5d74fdb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:63:18:d8:af:24:38:05:7c:9d:88:f1:96:3d:0b:8b:20:f6: 22:95:c7:6a:ec:ec:e3:4c:f3:65:b7:3b:d1:9d:6d:0c:2d:12: 02:eb:94:9a:f1:07:23:1b:f4:e9:a9:7b:94:07:62:a1:b6:62: 8e:8e:dc:63:39:5c:6c:b2:34:69:f1:a1:85:ee:16:44:16:e0: 1a:f2:2b:52:b2:2e:f3:f5:63:eb:97:47:55:ed:42:c9:1d:be: a4:72:f8:a2:60:ea:b5:b5:59:2a:f4:04:e0:1f:74:0c:65:c0: 80:2d:e6:d4:0b:70:e0:36:61:1f:f8:0b:dd:1e:2f:8f:bf:d6: 27:a8:85:38:d0:f7:63:9f:da:ff:51:ee:0f:35:e7:02:b5:23: 0f:eb:c0:41:64:ec:4a:eb:ac:1a:e2:84:79:28:c2:25:48:6e: 05:7c:3e:97:7c:25:2e:e7:ed:1d:c6:67:b2:b5:37:17:5e:1d: c6:93:1b:13:38:75:ae:c3:14:28:a5:f6:83:e1:64:91:9e:97: 04:04:a5:1b:e1:40:86:41:6b:70:34:3a:ac:49:ea:ae:fd:6d: 29:72:58:46:47:bb:36:46:89:76:59:2c:d7:a5:5c:55:30:3e: 53:be:f5:47:27:48:82:f1:3e:c9:98:5e:04:a3:13:d0:56:6a: 77:31:45:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQKIZWkbeeATQMKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk NTY2ZmIyN2MtYzNiYy00NmFjLWExNDctMjgyYjRhZjAzNjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jNQHDb0ynL6VXA+wSGpYtEQeM9X8HcAsVlI G4XQTjLDMai0uhLrddyyBYjpD6nBM4wDvD2HF8TFPnfgi0dbvpSNoqATZaJWAWwA ePgS5zYkxxOTehD8NaQhTJZcNWoWW2GSbX21SzToef4wvWROCZRrALmiz/sxTPNe KO/a4eSx3BfEBdYw6cB9P7lTI1JgGZyaoeEjYfnU6AdUoSvQFTssMmYQKg2IgCXB URSZByPDydOlQLRsQh0JGTU7scMX4f7Cg0h3Iay9ffSHEC1wYRzwMYVWUicxTHGL DvVSEwnbPCAHiZx2+XM/TDziGdINWojgF3AddkEnh/BQ29AwrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhuTnIrfKOZWtpkgVP7ZAQ4b+WjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTk3OGY0ZjktYzIxMi0z MjNiLWI5YWEtMmE2ZjVkNzRmZGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9qgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhjGNivJDgFfJ2I8ZY9C4sg9iKVx2rs7ONM82W3O9GdbQwtEgLrlJrx ByMb9Ompe5QHYqG2Yo6O3GM5XGyyNGnxoYXuFkQW4BryK1KyLvP1Y+uXR1XtQskd vqRy+KJg6rW1WSr0BOAfdAxlwIAt5tQLcOA2YR/4C90eL4+/1ieohTjQ92Of2v9R 7g815wK1Iw/rwEFk7ErrrBrihHkowiVIbgV8Ppd8JS7n7R3GZ7K1NxdeHcaTGxM4 da7DFCil9oPhZJGelwQEpRvhQIZBa3A0OqxJ6q79bSlyWEZHuzZGiXZZLNelXFUw PlO+9UcnSILxPsmYXgSjE9BWancxRVg= -----END CERTIFICATE-----Generated at Tue Aug 5 17:14:45 2025 by rpki-client