$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c2e8407-9c18-331a-9944-1a25d83f4792.roa File: 5c2e8407-9c18-331a-9944-1a25d83f4792.roa (raw, json) Hash identifier: Nnpq4S+WI8NpaujMhua4e/CN2kGzbOQEmP9iy2hIa/U= Subject key identifier: B8:23:25:76:B3:9C:59:EF:36:B9:71:AC:C3:3D:A7:CD:F5:2D:25:89 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AB65107F172855A4660ABA4C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c2e8407-9c18-331a-9944-1a25d83f4792.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 20940 IP address blocks: 23.216.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:51:07:f1:72:85:5a:46:60:ab:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=38f71195-c27d-4d3b-9486-b090cfc37157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:75:34:c9:66:3b:31:83:28:ad:e6:58:f4:ae: 06:72:ce:10:4c:97:95:09:61:e6:cf:fa:e3:a5:f6: 58:ba:c7:27:26:44:f3:33:7a:6f:da:1e:13:95:f8: d4:c0:97:e6:38:8f:88:74:f8:0c:c8:fc:e0:03:f1: 9f:bd:3c:df:a6:b1:a1:2b:9d:ee:51:a5:b2:41:7a: 8e:b1:45:5b:24:8f:67:e7:55:5b:ee:d3:0a:23:8b: 29:c6:9a:f9:5d:d4:6d:1a:b2:de:e8:ea:15:78:1d: 3d:b4:44:85:4a:67:0f:e5:dc:c5:e6:74:fe:ab:cf: ad:33:29:e5:9a:9f:24:4d:39:d5:c6:cb:c9:cd:c4: d5:81:7a:53:31:32:cc:42:53:3d:7f:b1:bc:4b:bc: e8:9b:5b:b8:e7:01:3c:90:1c:e6:e2:fb:0b:21:d2: a3:7a:95:25:cb:33:20:7b:15:e6:f6:13:cd:8e:91: 08:1c:69:6c:ea:5d:0c:19:11:d8:b0:14:2b:ff:d8: 6e:ab:86:14:07:4c:97:af:6e:74:5d:22:d5:1c:41: ce:73:58:30:0e:77:f6:ff:0e:d4:eb:3f:b4:0f:f0: 98:4b:4b:d5:a4:61:bd:4b:78:87:18:b4:c8:78:54: 6a:4d:0c:67:a5:e6:bc:ed:cb:a6:dd:f4:4a:e1:08: 19:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:23:25:76:B3:9C:59:EF:36:B9:71:AC:C3:3D:A7:CD:F5:2D:25:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c2e8407-9c18-331a-9944-1a25d83f4792.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.216.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:b3:bf:d9:96:7f:34:09:a1:53:79:60:40:87:ec:5b:6c:e5: 60:33:c9:b9:a8:52:00:00:de:24:5e:2c:87:1e:8c:fe:16:7a: 7a:f5:a9:8a:0e:44:e6:00:c4:f1:4d:fc:e9:e5:c7:df:da:ce: 65:e0:a4:6a:3d:f9:9d:97:27:fe:8c:74:8a:32:90:18:25:fa: 8e:64:f1:1a:1b:9d:67:8e:3d:b9:2f:1f:d5:bd:08:0c:da:fb: fd:d7:b7:90:0a:72:38:ae:a5:81:ed:b8:55:ab:6c:ba:fa:16: 5e:1f:32:1d:d7:6e:89:ba:64:be:37:e2:4f:33:52:e7:45:b2: 16:e2:28:9b:01:ef:2b:7e:d9:3b:4f:d2:9b:f2:25:9d:06:90: d0:8f:10:84:c3:14:6c:fb:29:ff:f5:08:62:76:e3:d8:20:28: ba:25:4d:cc:2e:58:b4:d7:c0:2b:96:72:5a:0c:fc:13:62:b4: e6:11:df:50:a8:62:42:2f:4e:7b:3b:dc:a8:0c:87:e0:e0:9d: 79:dd:d9:dd:78:37:82:ef:3b:8b:22:de:01:d7:32:18:aa:9f: 82:01:5c:f4:c8:31:19:c4:ec:e8:75:f9:04:e5:0b:35:e0:2a: 17:3b:9e:36:cd:14:4c:7c:40:2f:f6:3e:68:c2:91:4e:66:eb: 75:02:65:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UQfxcoVaRmCrpMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk MzhmNzExOTUtYzI3ZC00ZDNiLTk0ODYtYjA5MGNmYzM3MTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnU0yWY7MYMoreZY9K4Gcs4QTJeVCWHmz/rj pfZYuscnJkTzM3pv2h4TlfjUwJfmOI+IdPgMyPzgA/GfvTzfprGhK53uUaWyQXqO sUVbJI9n51Vb7tMKI4spxpr5XdRtGrLe6OoVeB09tESFSmcP5dzF5nT+q8+tMynl mp8kTTnVxsvJzcTVgXpTMTLMQlM9f7G8S7zom1u45wE8kBzm4vsLIdKjepUlyzMg exXm9hPNjpEIHGls6l0MGRHYsBQr/9huq4YUB0yXr250XSLVHEHOc1gwDnf2/w7U 6z+0D/CYS0vVpGG9S3iHGLTIeFRqTQxnpea87cum3fRK4QgZnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgjJXaznFnvNrlxrMM9p831LSWJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWMyZTg0MDctOWMxOC0z MzFhLTk5NDQtMWEyNWQ4M2Y0NzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9iXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6zv9mWfzQJoVN5YECH7Fts5WAzybmoUgAA3iReLIcejP4Wenr1qYoO ROYAxPFN/Onlx9/azmXgpGo9+Z2XJ/6MdIoykBgl+o5k8RobnWeOPbkvH9W9CAza +/3Xt5AKcjiupYHtuFWrbLr6Fl4fMh3Xbom6ZL434k8zUudFshbiKJsB7yt+2TtP 0pvyJZ0GkNCPEITDFGz7Kf/1CGJ249ggKLolTcwuWLTXwCuWcloM/BNitOYR31Co YkIvTns73KgMh+DgnXnd2d14N4LvO4si3gHXMhiqn4IBXPTIMRnE7Oh1+QTlCzXg Khc7njbNFEx8QC/2PmjCkU5m63UCZQo= -----END CERTIFICATE-----Generated at Tue Aug 5 17:17:13 2025 by rpki-client