$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a0f2c93-4723-31c2-a45e-8f8eb8e52058.roa File: 8a0f2c93-4723-31c2-a45e-8f8eb8e52058.roa (raw, json) Hash identifier: A9SwAzyvltvdXoMUuPCe10MYeih1g5dw4BH2vRrWP/o= Subject key identifier: 35:53:03:E8:DD:60:77:93:A8:22:E0:76:F2:D3:BC:94:D7:83:27:C9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AA2C6463A0EDA2399B9F15780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a0f2c93-4723-31c2-a45e-8f8eb8e52058.roa Signing time: Fri 25 Jul 2025 13:01:04 +0000 ROA not before: Fri 25 Jul 2025 13:01:04 +0000 ROA not after: Thu 23 Oct 2025 13:01:04 +0000 asID: 16625 IP address blocks: 23.211.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a2:c6:46:3a:0e:da:23:99:b9:f1:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 25 13:01:04 2025 GMT Not After : Oct 23 13:01:04 2025 GMT Subject: CN=02a63708-8694-4cb3-9e68-04bf6b7554eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ab:c1:d2:a1:21:7e:1f:d9:81:4f:ff:5e:74: db:f7:ec:da:14:ae:9e:25:d1:18:b9:42:cb:e6:b2: c9:17:cc:8d:bb:f1:44:23:d7:3d:59:71:4b:db:9a: bf:73:fc:f5:c5:cb:91:c5:33:5d:5d:2d:c4:5e:3b: 53:8c:58:9c:99:ba:da:f2:86:18:a7:6c:9e:4f:dc: 13:09:09:3e:03:df:19:ee:df:2f:87:a9:8c:5c:ef: d7:cd:83:72:86:1f:8d:4e:5c:b0:99:ae:d6:3b:a2: 8c:02:75:e0:ea:81:c7:b9:e6:43:18:83:b1:54:f1: e3:dd:bb:b6:d6:6d:4d:a1:1e:3d:5e:93:ba:62:6a: 96:7b:e1:72:f8:f3:03:50:3d:5e:9f:c9:44:31:fe: 50:39:d6:20:17:a9:23:a3:18:b8:9a:d0:a9:06:0a: f7:f6:69:5c:6c:90:97:1e:30:bf:50:5a:f6:e1:03: 26:47:24:b2:1e:b2:0e:fb:d8:c4:30:30:f1:73:83: b1:ec:ff:ee:79:f5:83:93:cd:a2:35:c2:23:0e:a7: 0e:30:67:0b:be:20:38:18:5c:06:62:f6:a4:64:30: 21:fe:b6:b2:4f:40:fd:00:5d:4f:55:f3:ca:bf:55: 7d:59:d2:63:a5:61:e8:80:44:ee:a2:f1:f0:aa:ef: d7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:53:03:E8:DD:60:77:93:A8:22:E0:76:F2:D3:BC:94:D7:83:27:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a0f2c93-4723-31c2-a45e-8f8eb8e52058.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:32:66:de:d2:53:cd:83:d0:2f:8c:4d:fe:fb:73:3d:b1:76: ad:f4:71:18:bc:47:26:f0:a7:d5:20:4a:66:d7:da:33:d7:3f: 5b:b6:cc:be:94:86:19:b5:e9:5f:a0:d6:45:59:e8:bc:22:ad: cd:a0:c2:45:a7:37:df:b6:e0:88:7a:5e:b1:a3:8c:ce:5f:cb: f8:7c:54:9b:ca:9c:ab:01:86:5a:a0:e9:86:2b:24:f9:d6:0c: 0b:91:24:99:b4:12:b0:92:5b:6b:97:db:64:ac:36:65:45:32: 35:fe:1b:af:0b:25:72:b3:d3:31:70:0d:70:4e:46:e8:24:a8: 94:41:01:53:9b:0d:e5:63:0c:c0:3d:40:d1:14:b9:be:ea:59: 8d:59:bd:5c:09:21:f1:d8:dd:96:8a:06:a8:e6:ae:f1:99:44: c7:89:ad:b7:c6:ca:44:72:86:b4:03:91:06:79:7c:a7:e7:9f: 63:52:ec:f7:4a:c4:cd:5e:a4:bb:4a:4e:4d:96:88:c0:0d:37: 46:e2:9f:c5:46:d0:44:d0:2f:c8:62:27:2f:39:5f:3f:de:c5: 6d:b8:29:40:41:12:21:05:34:5c:9b:0e:3e:a6:2c:1a:38:01: b0:93:3e:c2:fb:91:b5:cb:be:f2:36:84:c6:0d:d0:82:b2:df: 23:d0:26:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqixkY6DtojmbnxV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyNTEzMDEwNFoXDTI1MTAyMzEzMDEwNFowLzEtMCsGA1UEAxMk MDJhNjM3MDgtODY5NC00Y2IzLTllNjgtMDRiZjZiNzU1NGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6vB0qEhfh/ZgU//XnTb9+zaFK6eJdEYuULL 5rLJF8yNu/FEI9c9WXFL25q/c/z1xcuRxTNdXS3EXjtTjFicmbra8oYYp2yeT9wT CQk+A98Z7t8vh6mMXO/XzYNyhh+NTlywma7WO6KMAnXg6oHHueZDGIOxVPHj3bu2 1m1NoR49XpO6YmqWe+Fy+PMDUD1en8lEMf5QOdYgF6kjoxi4mtCpBgr39mlcbJCX HjC/UFr24QMmRySyHrIO+9jEMDDxc4Ox7P/uefWDk82iNcIjDqcOMGcLviA4GFwG YvakZDAh/rayT0D9AF1PVfPKv1V9WdJjpWHogETuovHwqu/XAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVTA+jdYHeTqCLgdvLTvJTXgyfJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGEwZjJjOTMtNDcyMy0z MWMyLWE0NWUtOGY4ZWI4ZTUyMDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9PEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgyZt7SU82D0C+MTf77cz2xdq30cRi8Rybwp9UgSmbX2jPXP1u2zL6U hhm16V+g1kVZ6Lwirc2gwkWnN9+24Ih6XrGjjM5fy/h8VJvKnKsBhlqg6YYrJPnW DAuRJJm0ErCSW2uX22SsNmVFMjX+G68LJXKz0zFwDXBORugkqJRBAVObDeVjDMA9 QNEUub7qWY1ZvVwJIfHY3ZaKBqjmrvGZRMeJrbfGykRyhrQDkQZ5fKfnn2NS7PdK xM1epLtKTk2WiMANN0bin8VG0ETQL8hiJy85Xz/exW24KUBBEiEFNFybDj6mLBo4 AbCTPsL7kbXLvvI2hMYN0IKy3yPQJrU= -----END CERTIFICATE-----Generated at Tue Aug 5 17:08:11 2025 by rpki-client