$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5feff013-0c81-3e88-be74-8c606c36bcfc.roa File: 5feff013-0c81-3e88-be74-8c606c36bcfc.roa (raw, json) Hash identifier: KbnzEGbVP6j7zfG5z1UzgyrjdONSTO97tfxMaD8rwFU= Subject key identifier: 29:56:9C:06:2F:27:B2:E6:4B:BE:2A:5D:28:42:4D:FA:82:07:CF:38 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7D160924784D22EA89D3C200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5feff013-0c81-3e88-be74-8c606c36bcfc.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.217.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:16:09:24:78:4d:22:ea:89:d3:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=6dc2f0a8-a569-4d91-979a-b4b5c2b24017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:15:60:c3:7c:15:d8:57:cd:9e:5d:e2:3c:17: 70:32:6a:1a:5d:2b:76:09:2f:2e:18:8e:cf:44:85: 69:33:48:13:ac:fd:53:14:d1:fc:36:6d:cc:cf:eb: 21:32:86:da:c8:72:a0:a1:08:fa:91:da:92:6b:2b: b5:f9:78:08:e3:17:45:82:32:ee:92:be:da:87:e2: 16:af:20:a0:4f:2c:8f:13:f9:16:2b:d7:c0:cb:a6: 16:85:00:b0:54:2a:29:45:1c:45:06:64:4e:06:d4: 9a:76:fe:1c:20:64:88:52:e2:66:06:69:e1:9f:7b: 6d:d0:0d:4f:62:2a:ed:36:73:7c:58:b9:70:5d:56: 95:3b:10:00:1f:b3:88:07:9b:f0:a1:c9:59:ea:94: 3e:52:41:82:5c:f8:ba:75:05:ff:bb:69:3e:33:4e: ab:18:80:5d:c5:1a:f7:60:d8:81:a7:00:54:f5:f0: a3:ae:c0:ca:61:e7:0b:f5:df:85:60:1d:fa:b7:c9: 1e:5a:b9:2b:3f:07:54:27:b3:ce:b0:40:49:22:a9: 20:98:3d:dd:b2:93:66:76:6a:88:1c:a3:ad:24:17: 05:bb:83:0b:e0:70:30:88:10:ff:79:9d:2b:eb:b6: 0a:ae:98:d5:13:36:b9:e0:a9:27:ae:15:23:0e:fc: 64:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:56:9C:06:2F:27:B2:E6:4B:BE:2A:5D:28:42:4D:FA:82:07:CF:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5feff013-0c81-3e88-be74-8c606c36bcfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:7f:44:61:72:79:0b:0d:39:42:10:7a:fe:2d:65:33:5d:c3: 92:44:4e:69:46:2a:20:ac:be:60:93:85:81:d8:25:65:2d:38: 78:19:a1:1c:c2:46:10:99:04:e8:7c:c5:5f:29:82:03:8c:dd: 76:86:14:0a:0f:8c:f8:9d:04:26:95:0f:54:55:7e:2d:54:73: da:b1:99:67:58:af:cc:c9:13:f6:6e:26:4f:d1:08:17:30:be: c4:f9:c1:5a:62:c7:75:72:c9:c0:d8:aa:9d:ef:f3:76:18:2d: 31:35:3c:d7:56:03:87:50:fd:89:a1:81:fc:43:29:72:97:38: 26:68:0b:83:4c:06:aa:92:f1:3c:47:88:20:99:87:6d:d2:14: bc:7b:ac:27:85:43:cb:65:1f:db:37:e6:97:70:08:1d:de:cd: 2d:9b:d4:0d:cd:50:ea:a5:0c:5d:7c:89:c7:4a:bf:ce:ac:d9: fc:86:54:b2:0a:8d:a2:97:53:75:88:3d:76:de:ee:de:5f:61: f0:ba:68:27:82:f3:e9:50:62:ba:ca:ae:97:ad:b9:ae:5c:02: bd:26:46:88:0c:c2:3b:69:b9:22:84:cf:39:af:53:f4:a6:21: 4a:c4:84:0e:c4:fa:d5:57:72:a0:cc:71:42:e2:93:d0:2f:d3: f3:88:20:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FgkkeE0i6onTwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk NmRjMmYwYTgtYTU2OS00ZDkxLTk3OWEtYjRiNWMyYjI0MDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xVgw3wV2FfNnl3iPBdwMmoaXSt2CS8uGI7P RIVpM0gTrP1TFNH8Nm3Mz+shMobayHKgoQj6kdqSayu1+XgI4xdFgjLukr7ah+IW ryCgTyyPE/kWK9fAy6YWhQCwVCopRRxFBmROBtSadv4cIGSIUuJmBmnhn3tt0A1P YirtNnN8WLlwXVaVOxAAH7OIB5vwoclZ6pQ+UkGCXPi6dQX/u2k+M06rGIBdxRr3 YNiBpwBU9fCjrsDKYecL9d+FYB36t8keWrkrPwdUJ7POsEBJIqkgmD3dspNmdmqI HKOtJBcFu4ML4HAwiBD/eZ0r67YKrpjVEza54KknrhUjDvxkzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClWnAYvJ7LmS74qXShCTfqCB884MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWZlZmYwMTMtMGM4MS0z ZTg4LWJlNzQtOGM2MDZjMzZiY2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9koMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5/RGFyeQsNOUIQev4tZTNdw5JETmlGKiCsvmCThYHYJWUtOHgZoRzC RhCZBOh8xV8pggOM3XaGFAoPjPidBCaVD1RVfi1Uc9qxmWdYr8zJE/ZuJk/RCBcw vsT5wVpix3VyycDYqp3v83YYLTE1PNdWA4dQ/YmhgfxDKXKXOCZoC4NMBqqS8TxH iCCZh23SFLx7rCeFQ8tlH9s35pdwCB3ezS2b1A3NUOqlDF18icdKv86s2fyGVLIK jaKXU3WIPXbe7t5fYfC6aCeC8+lQYrrKrpetua5cAr0mRogMwjtpuSKEzzmvU/Sm IUrEhA7E+tVXcqDMcULik9Av0/OIID8= -----END CERTIFICATE-----Generated at Mon Aug 4 19:10:28 2025 by rpki-client