$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f0d8f64-286a-36bf-be35-54c1967f9da4.roa File: 5f0d8f64-286a-36bf-be35-54c1967f9da4.roa (raw, json) Hash identifier: B4iEVxO8Gcn0XcPHEpe4OBKP+M1xSL4UoWv7gQqOu+k= Subject key identifier: 93:A5:B5:CC:20:01:16:A2:A5:DE:50:E6:99:0B:65:68:F0:B1:CB:0C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7D160504FA533013BC4B3900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f0d8f64-286a-36bf-be35-54c1967f9da4.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.214.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:16:05:04:fa:53:30:13:bc:4b:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=170c75c4-fbc6-4056-84be-0302b17d6c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fc:c1:8e:9f:02:e1:d5:b1:21:e9:4a:71:3c: ea:c2:ba:ee:aa:cf:f9:cd:8a:2c:11:93:f9:78:08: 46:2f:90:43:25:c7:40:09:53:4b:a2:12:b0:e7:71: fc:c3:ab:ae:1d:29:bf:1f:25:bf:83:ae:0d:41:8e: a0:5f:31:a9:e7:46:80:2c:e4:4d:0a:ba:f5:b4:bc: dc:a3:cb:da:50:cf:74:c1:d6:5a:a6:c5:26:47:5c: 6c:10:b1:2e:92:c3:fb:05:8d:d5:34:be:2f:63:9c: 59:65:eb:fa:c5:16:e8:73:3e:ff:3e:f6:f4:e2:58: cb:cd:83:d0:68:4c:2b:cf:13:8f:a6:ec:c5:52:39: 69:fa:65:2f:ff:e6:6c:dd:db:24:6f:e7:f0:30:36: 7a:c6:a8:18:71:5d:82:ab:ae:44:b4:32:3a:0c:46: 8a:46:0c:e7:ae:9b:2c:9b:ec:fd:da:d5:64:06:bb: 51:e7:c6:a6:2b:f2:82:fb:8b:b2:b9:8d:18:a5:ac: 16:54:28:a1:f6:9b:c2:fa:03:01:4a:51:c4:72:4a: 25:44:9e:07:9a:3c:4c:04:e3:3a:5c:c4:a7:86:b3: d0:8d:7f:bc:d4:39:62:23:64:ac:2d:68:80:0c:b1: d9:c9:60:31:a9:06:29:ef:b3:ae:a2:a0:be:80:70: 1b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A5:B5:CC:20:01:16:A2:A5:DE:50:E6:99:0B:65:68:F0:B1:CB:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f0d8f64-286a-36bf-be35-54c1967f9da4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:c8:3b:46:70:09:61:c8:ee:6c:4f:a6:83:03:80:8d:7e:00: 84:3e:31:55:cc:53:3c:5d:fb:27:00:8a:e5:15:ab:27:2f:de: 51:cd:08:60:bb:62:6a:b7:95:c6:d1:ac:c4:89:9c:01:01:21: a9:24:51:71:67:16:98:97:b3:26:ae:8d:c3:fa:f5:8f:b9:fb: ec:ed:b6:8b:19:48:7d:be:49:b7:a3:66:9d:08:7d:6d:17:76: 8d:1b:66:a4:87:eb:fc:b8:4c:49:e5:88:81:80:f4:ef:1f:db: ee:89:47:34:3d:96:97:c4:6e:d0:9c:50:f5:58:a0:7b:c3:af: 19:8c:a7:b5:12:bf:f9:2d:60:bc:86:05:6d:27:ac:90:f8:65: 8a:16:17:28:46:5e:47:c6:14:78:f1:fa:e1:ec:4a:85:3c:f1: ea:53:fa:9a:13:bf:e7:1b:87:4d:02:8e:85:e0:d9:2a:29:dd: 93:88:35:62:19:3d:06:6f:e5:d7:79:b1:fb:20:c0:4e:de:7c: 7e:f4:7d:a5:62:16:90:57:fa:95:7e:38:a5:26:4c:03:da:03: 64:10:5e:8d:38:d4:65:1f:a2:5c:cd:26:19:e3:f5:80:b9:e3: cd:2f:b3:85:18:e0:fe:80:16:73:c9:6f:3e:6c:34:cf:08:c8: 03:55:7f:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FgUE+lMwE7xLOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk MTcwYzc1YzQtZmJjNi00MDU2LTg0YmUtMDMwMmIxN2Q2Yzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/zBjp8C4dWxIelKcTzqwrruqs/5zYosEZP5 eAhGL5BDJcdACVNLohKw53H8w6uuHSm/HyW/g64NQY6gXzGp50aALORNCrr1tLzc o8vaUM90wdZapsUmR1xsELEuksP7BY3VNL4vY5xZZev6xRbocz7/Pvb04ljLzYPQ aEwrzxOPpuzFUjlp+mUv/+Zs3dskb+fwMDZ6xqgYcV2Cq65EtDI6DEaKRgznrpss m+z92tVkBrtR58amK/KC+4uyuY0YpawWVCih9pvC+gMBSlHEckolRJ4HmjxMBOM6 XMSnhrPQjX+81DliI2SsLWiADLHZyWAxqQYp77OuoqC+gHAb9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOltcwgARaipd5Q5pkLZWjwscsMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWYwZDhmNjQtMjg2YS0z NmJmLWJlMzUtNTRjMTk2N2Y5ZGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9asMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrIO0ZwCWHI7mxPpoMDgI1+AIQ+MVXMUzxd+ycAiuUVqycv3lHNCGC7 Ymq3lcbRrMSJnAEBIakkUXFnFpiXsyaujcP69Y+5++zttosZSH2+SbejZp0IfW0X do0bZqSH6/y4TEnliIGA9O8f2+6JRzQ9lpfEbtCcUPVYoHvDrxmMp7USv/ktYLyG BW0nrJD4ZYoWFyhGXkfGFHjx+uHsSoU88epT+poTv+cbh00CjoXg2Sop3ZOINWIZ PQZv5dd5sfsgwE7efH70faViFpBX+pV+OKUmTAPaA2QQXo041GUfolzNJhnj9YC5 480vs4UY4P6AFnPJbz5sNM8IyANVf/Q= -----END CERTIFICATE-----Generated at Wed Aug 6 00:48:32 2025 by rpki-client