$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ab9885b-573a-3444-ad12-789f4bec8d6f.roa File: 5ab9885b-573a-3444-ad12-789f4bec8d6f.roa (raw, json) Hash identifier: 2HrZX/TLFCN4D4GsvfWQdoIy91mM7Ul810JLvhdkreY= Subject key identifier: C7:4D:78:07:5C:19:56:22:FA:4C:57:36:17:1B:5F:65:22:2D:F2:EA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A6290A3FE71F74FB2CD42E000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ab9885b-573a-3444-ad12-789f4bec8d6f.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16625 IP address blocks: 23.194.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:a3:fe:71:f7:4f:b2:cd:42:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=9ab51b29-bc59-408f-b83a-12b4cdbc678a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9b:b2:12:ba:ea:3b:2d:73:52:7b:a8:80:6c: 61:f7:6f:01:ca:a6:1a:07:a8:26:49:e9:3a:1f:9d: 6d:92:a4:cd:42:50:31:28:0d:e8:00:4e:66:6f:c5: 69:41:6f:d9:55:3b:d9:ae:b0:bb:4f:1e:4b:77:d1: 0d:af:f6:11:ae:cf:d3:7f:dc:6e:2d:b8:f3:9b:ab: 9b:81:52:8c:0d:37:c7:49:21:5b:e7:b3:79:2b:bc: f3:0a:6f:69:14:2f:56:c2:c7:85:4b:b7:ab:8d:bb: ba:39:fc:6b:9f:58:3f:a7:fb:ac:db:6d:d8:c1:c6: 0f:28:57:38:a4:f8:b7:57:ed:a2:c9:dc:a2:dd:65: cf:43:f9:c1:65:ae:9b:37:54:11:42:cf:93:eb:22: 6d:f8:1e:6b:57:55:c8:e0:5d:d9:8c:89:bc:2b:b6: 63:e4:2f:a5:37:f1:2b:12:54:af:82:3b:88:89:0f: f0:20:0b:8e:7a:ca:20:cc:3d:b0:4b:23:4e:0a:a0: 0a:93:e3:0c:7d:0e:bf:3c:47:cc:da:ea:7a:47:30: aa:1c:50:bd:a6:03:de:b2:7a:d9:41:be:50:81:ce: e6:1c:b4:03:35:60:18:c3:75:a9:1f:6b:94:8e:cc: ad:d0:79:9b:29:27:83:30:fb:2d:59:17:0c:72:0e: a6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4D:78:07:5C:19:56:22:FA:4C:57:36:17:1B:5F:65:22:2D:F2:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ab9885b-573a-3444-ad12-789f4bec8d6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.194.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:28:16:74:4b:4a:c2:25:8e:52:1e:da:fe:9f:42:db:23:cf: 23:d6:5b:d0:28:78:dc:f3:9e:7e:79:90:5a:e9:d0:55:05:8c: a9:cd:d6:bf:dd:1f:f0:bd:71:20:88:2e:ce:75:80:66:eb:38: 8b:77:92:18:89:60:95:ed:40:da:d6:a3:e4:79:a0:85:45:aa: d6:7d:dd:50:d8:48:b4:30:ca:b2:d4:69:45:a1:3b:0d:42:ce: 8a:3e:6e:0a:96:33:ac:0e:fa:f9:1e:84:27:96:15:4f:15:44: 9d:86:ad:f5:a4:32:fc:3c:1c:83:42:f4:7f:4b:17:da:21:dd: 7a:7e:51:37:8f:ad:35:87:30:87:c7:fb:67:a8:82:ee:79:ad: d4:7e:e4:05:82:39:b3:f6:e4:40:b0:7f:94:78:af:45:82:3d: d8:5b:59:6b:4c:39:50:13:f8:36:40:79:91:9b:af:51:3c:67: 2b:a9:55:94:86:bb:df:dc:02:7a:d1:ec:d5:4e:9b:77:17:b3: df:16:e2:59:b7:83:33:99:71:39:78:88:96:de:3e:bb:46:4e: cc:86:b8:25:db:29:12:55:b7:6f:22:42:07:2c:ae:2a:26:36: d7:12:83:aa:b6:91:c0:e7:53:66:33:b6:73:10:c7:be:45:a5: 09:af:ce:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikKP+cfdPss1C4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk OWFiNTFiMjktYmM1OS00MDhmLWI4M2EtMTJiNGNkYmM2NzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5uyErrqOy1zUnuogGxh928ByqYaB6gmSek6 H51tkqTNQlAxKA3oAE5mb8VpQW/ZVTvZrrC7Tx5Ld9ENr/YRrs/Tf9xuLbjzm6ub gVKMDTfHSSFb57N5K7zzCm9pFC9WwseFS7erjbu6Ofxrn1g/p/us223YwcYPKFc4 pPi3V+2iydyi3WXPQ/nBZa6bN1QRQs+T6yJt+B5rV1XI4F3ZjIm8K7Zj5C+lN/Er ElSvgjuIiQ/wIAuOesogzD2wSyNOCqAKk+MMfQ6/PEfM2up6RzCqHFC9pgPesnrZ Qb5Qgc7mHLQDNWAYw3WpH2uUjsyt0HmbKSeDMPstWRcMcg6mjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdNeAdcGVYi+kxXNhcbX2UiLfLqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWFiOTg4NWItNTczYS0z NDQ0LWFkMTItNzg5ZjRiZWM4ZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8KKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUoFnRLSsIljlIe2v6fQtsjzyPWW9AoeNzznn55kFrp0FUFjKnN1r/d H/C9cSCILs51gGbrOIt3khiJYJXtQNrWo+R5oIVFqtZ93VDYSLQwyrLUaUWhOw1C zoo+bgqWM6wO+vkehCeWFU8VRJ2GrfWkMvw8HINC9H9LF9oh3Xp+UTePrTWHMIfH +2eogu55rdR+5AWCObP25ECwf5R4r0WCPdhbWWtMOVAT+DZAeZGbr1E8ZyupVZSG u9/cAnrR7NVOm3cXs98W4lm3gzOZcTl4iJbePrtGTsyGuCXbKRJVt28iQgcsriom NtcSg6q2kcDnU2YztnMQx75FpQmvzmQ= -----END CERTIFICATE-----Generated at Wed Aug 6 10:15:40 2025 by rpki-client