$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8740672f-8fc4-3c94-8548-42a2d1d11445.roa File: 8740672f-8fc4-3c94-8548-42a2d1d11445.roa (raw, json) Hash identifier: SxMwBXonuUor4H9eegFCQIaZ7wUpx5WCOb5zF9Cj8B4= Subject key identifier: D3:93:37:3B:DD:DA:1E:E2:DD:4F:37:28:5E:DC:49:A4:6D:A7:BC:A9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AB91C04EC5B8F1499AEE46440 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8740672f-8fc4-3c94-8548-42a2d1d11445.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 16625 IP address blocks: 23.197.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1c:04:ec:5b:8f:14:99:ae:e4:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=1507ae1f-5065-4764-ac30-83f0a60124fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:01:cd:af:09:ad:1a:2f:05:43:3d:81:e7:3f: 14:34:b4:e1:ac:8e:33:6f:21:7a:e4:19:e1:31:12: 81:ad:ce:bf:cd:18:1d:7a:59:2f:5e:b0:d7:4e:b5: 13:14:0a:8a:b8:a2:ba:36:9e:4a:79:17:c6:d9:d5: 71:27:c9:27:ad:ca:2f:bc:68:bc:44:34:67:e4:e7: 92:3e:1f:d3:50:47:8b:f3:94:1d:9a:60:2f:4a:e6: 7d:50:8c:11:46:ad:41:11:a2:d8:87:30:77:ee:cd: e2:ab:8e:16:44:f7:ce:55:e8:2f:06:ef:ca:c0:9a: 7d:15:d3:ff:a1:b1:d5:f7:15:ea:f4:4f:37:44:93: 26:8c:64:bc:8a:ca:cf:85:2f:2c:26:9b:cf:81:60: 1e:2c:ca:34:c2:53:8d:41:da:17:d1:76:43:19:60: 6e:a5:b0:b9:3e:20:bc:15:e6:89:9a:8b:7d:9c:da: 90:aa:3d:b4:38:27:3c:83:e2:0c:bf:57:cd:8c:23: e5:2c:e5:56:42:df:75:38:57:eb:c8:fd:c8:a0:e7: 77:18:ce:5b:1f:21:8d:f9:64:97:1c:ce:67:09:97: 48:8d:3c:57:d3:32:b1:b1:24:87:96:a8:05:12:8a: 57:e7:0e:99:10:2f:6b:08:5b:eb:d0:56:f3:7d:29: 63:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:93:37:3B:DD:DA:1E:E2:DD:4F:37:28:5E:DC:49:A4:6D:A7:BC:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8740672f-8fc4-3c94-8548-42a2d1d11445.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:5a:14:43:da:57:43:72:e5:8e:7b:bb:0a:85:6f:fc:c2:ac: 8b:9d:09:0d:ee:a5:ff:89:8a:2c:47:fb:d8:3b:fb:3a:cc:79: 86:3e:1b:5c:f6:71:30:c3:06:ef:60:3a:a0:61:ea:94:b7:66: 0f:29:47:60:e1:67:d2:a5:d8:8a:a0:b6:be:48:17:b2:14:5c: dd:d1:4d:cc:ff:44:06:88:73:be:b6:23:da:ee:70:f2:93:ef: 41:c9:13:7c:99:a9:5e:d1:14:3c:b8:63:ba:55:18:bb:ba:64: 2f:57:e2:04:59:c5:c1:bd:57:31:e3:db:9a:f8:c5:3f:70:41: 6d:e1:e2:93:81:4b:d3:9a:56:cc:2c:05:c7:7b:09:20:8a:34: 3f:43:d7:60:ea:40:81:87:f0:5e:ac:58:10:2a:c4:8d:db:51: 01:a5:a1:21:92:1e:a4:b6:c3:e1:c3:da:6e:71:55:64:7f:ce: 86:14:d1:90:07:76:ad:f0:57:a1:46:28:69:1d:65:ee:7d:dc: 35:35:7c:f2:da:45:7c:be:a5:31:d6:49:e9:78:7f:c3:56:9e: c7:4f:d2:7f:c7:4b:cf:7c:50:b4:21:b5:cf:b7:e9:b1:6e:b1: 61:61:4f:77:6c:0c:0c:e6:2d:31:1c:32:5e:aa:25:7c:9a:2b: 8c:e1:4d:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5HATsW48Uma7kZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MTUwN2FlMWYtNTA2NS00NzY0LWFjMzAtODNmMGE2MDEyNGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwHNrwmtGi8FQz2B5z8UNLThrI4zbyF65Bnh MRKBrc6/zRgdelkvXrDXTrUTFAqKuKK6Np5KeRfG2dVxJ8knrcovvGi8RDRn5OeS Ph/TUEeL85QdmmAvSuZ9UIwRRq1BEaLYhzB37s3iq44WRPfOVegvBu/KwJp9FdP/ obHV9xXq9E83RJMmjGS8isrPhS8sJpvPgWAeLMo0wlONQdoX0XZDGWBupbC5PiC8 FeaJmot9nNqQqj20OCc8g+IMv1fNjCPlLOVWQt91OFfryP3IoOd3GM5bHyGN+WSX HM5nCZdIjTxX0zKxsSSHlqgFEopX5w6ZEC9rCFvr0FbzfSlj1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOTNzvd2h7i3U83KF7cSaRtp7ypMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODc0MDY3MmYtOGZjNC0z Yzk0LTg1NDgtNDJhMmQxZDExNDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8XUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpaFEPaV0Ny5Y57uwqFb/zCrIudCQ3upf+JiixH+9g7+zrMeYY+G1z2 cTDDBu9gOqBh6pS3Zg8pR2DhZ9Kl2Iqgtr5IF7IUXN3RTcz/RAaIc762I9rucPKT 70HJE3yZqV7RFDy4Y7pVGLu6ZC9X4gRZxcG9VzHj25r4xT9wQW3h4pOBS9OaVsws Bcd7CSCKND9D12DqQIGH8F6sWBAqxI3bUQGloSGSHqS2w+HD2m5xVWR/zoYU0ZAH dq3wV6FGKGkdZe593DU1fPLaRXy+pTHWSel4f8NWnsdP0n/HS898ULQhtc+36bFu sWFhT3dsDAzmLTEcMl6qJXyaK4zhTRo= -----END CERTIFICATE-----Generated at Tue Aug 5 20:15:14 2025 by rpki-client