$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/899c1f86-efa0-3f0a-a51b-66eb8a290b96.roa File: 899c1f86-efa0-3f0a-a51b-66eb8a290b96.roa (raw, json) Hash identifier: D1MZVXOCcesJO2ZEmswtdpWaVZxirC+9OaAnUhXBdKQ= Subject key identifier: F4:97:80:DC:24:3F:AA:23:B9:B6:61:DA:51:AB:40:11:88:34:F5:0D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A77809EEBE55BC6745503CBD8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/899c1f86-efa0-3f0a-a51b-66eb8a290b96.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.205.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:9e:eb:e5:5b:c6:74:55:03:cb:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=65435af7-8149-457d-a73c-5983ca0c9248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c4:57:d2:97:95:3f:e7:13:0a:d4:52:dc:59: 42:ce:ee:3e:26:66:66:6d:36:16:0c:af:35:77:76: 72:3a:3b:88:8e:ff:3c:86:1f:dc:e5:fe:c3:ad:c4: f0:ef:2b:5b:97:0c:a0:8c:5c:7a:19:2a:55:29:89: 20:ad:79:23:3e:8b:7e:e9:78:26:ba:10:3e:a0:15: 11:5c:c1:68:f3:a7:0e:d8:04:00:ed:0d:53:32:83: d3:fe:a5:f7:51:2b:93:ed:db:d1:9c:16:ea:f7:09: 39:ae:bc:57:ca:78:3f:99:36:5e:39:bc:f9:c0:6d: 36:a2:95:ad:4b:a4:b3:2f:ef:d0:47:45:f0:a2:bf: a4:4c:7d:8e:0b:21:ff:92:db:a6:51:1d:9e:24:6e: c2:be:5b:0a:0e:42:7f:a5:d9:fc:db:29:c9:29:1e: d1:53:fb:d4:1f:84:d6:ec:75:20:a1:e6:f2:41:f8: 99:3e:d8:f9:10:48:ad:bb:8c:a1:0f:01:9e:1b:57: 59:a2:64:20:e1:3b:e1:09:7a:63:24:a9:3c:c4:80: 04:0f:5f:68:8f:f8:d2:59:06:7c:f4:b1:76:92:85: 3b:d1:96:06:92:24:93:7d:67:38:2f:db:25:8b:ce: f7:32:53:91:ca:ec:10:3f:85:33:f3:44:86:ef:fc: 9a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:97:80:DC:24:3F:AA:23:B9:B6:61:DA:51:AB:40:11:88:34:F5:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/899c1f86-efa0-3f0a-a51b-66eb8a290b96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:4b:41:e4:49:b8:b9:eb:78:fb:81:b9:57:d9:3f:75:b7:44: 7e:03:3c:4c:58:21:20:0f:01:57:77:fd:19:ff:ee:0d:e0:b4: 93:4c:2d:4e:7d:c2:72:01:63:fa:02:a7:1d:48:36:88:d4:c6: 5f:ee:fc:b5:1a:7e:c8:0c:c3:7e:36:3d:70:7c:03:39:be:cd: 6a:f8:ff:c5:0a:ea:b6:39:99:46:23:84:be:06:ae:f4:f9:6c: f6:dd:d3:0c:ca:5b:d5:52:d9:a1:3e:a3:3c:ad:75:af:9e:c5: 92:93:fe:41:12:29:31:be:22:2d:d6:1c:30:47:ee:bd:bb:17: 86:9d:d4:7d:b8:1d:14:17:2e:61:58:2c:1a:86:37:5e:31:2c: a0:84:8e:65:bf:0b:4d:68:5d:83:33:aa:3a:be:0a:e6:a8:85: e7:11:99:8a:3f:d5:65:36:d6:d0:d0:e8:2f:68:1c:c1:16:3d: 51:c7:ea:25:2c:a2:7e:19:18:a0:cb:82:13:14:b1:4a:d4:13: 5c:a9:7c:f5:57:d3:b9:a7:bf:75:eb:1c:f9:85:11:17:c0:87: b3:ea:e9:02:1a:62:0f:00:e4:9d:e2:e4:5a:2f:b7:7a:42:83: 21:03:5a:34:8d:74:ff:e3:57:3b:53:99:3f:9a:95:e0:3a:da: 38:28:0d:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gJ7r5VvGdFUDy9gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk NjU0MzVhZjctODE0OS00NTdkLWE3M2MtNTk4M2NhMGM5MjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocRX0peVP+cTCtRS3FlCzu4+JmZmbTYWDK81 d3ZyOjuIjv88hh/c5f7DrcTw7ytblwygjFx6GSpVKYkgrXkjPot+6XgmuhA+oBUR XMFo86cO2AQA7Q1TMoPT/qX3USuT7dvRnBbq9wk5rrxXyng/mTZeObz5wG02opWt S6SzL+/QR0Xwor+kTH2OCyH/ktumUR2eJG7CvlsKDkJ/pdn82ynJKR7RU/vUH4TW 7HUgoebyQfiZPtj5EEitu4yhDwGeG1dZomQg4TvhCXpjJKk8xIAED19oj/jSWQZ8 9LF2koU70ZYGkiSTfWc4L9sli873MlORyuwQP4Uz80SG7/yamwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSXgNwkP6ojubZh2lGrQBGINPUNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODk5YzFmODYtZWZhMC0z ZjBhLWE1MWItNjZlYjhhMjkwYjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF81aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxLQeRJuLnrePuBuVfZP3W3RH4DPExYISAPAVd3/Rn/7g3gtJNMLU59 wnIBY/oCpx1INojUxl/u/LUafsgMw342PXB8Azm+zWr4/8UK6rY5mUYjhL4GrvT5 bPbd0wzKW9VS2aE+ozytda+exZKT/kESKTG+Ii3WHDBH7r27F4ad1H24HRQXLmFY LBqGN14xLKCEjmW/C01oXYMzqjq+CuaohecRmYo/1WU21tDQ6C9oHMEWPVHH6iUs on4ZGKDLghMUsUrUE1ypfPVX07mnv3XrHPmFERfAh7Pq6QIaYg8A5J3i5Fovt3pC gyEDWjSNdP/jVztTmT+aleA62jgoDV4= -----END CERTIFICATE-----Generated at Wed Aug 6 00:52:33 2025 by rpki-client