$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0c5231c-6933-3b40-aa6c-89c0a4d997db.roa File: c0c5231c-6933-3b40-aa6c-89c0a4d997db.roa (raw, json) Hash identifier: w5ULnHZaq9IsNB+UfNhjojKkDOq0ePj9Vg5fTh5f/XM= Subject key identifier: 54:F6:B7:DD:DF:47:C5:AF:6F:6C:4E:D1:DE:33:CC:9E:AC:28:67:E9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AB91BDE3E548B601317667BA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0c5231c-6933-3b40-aa6c-89c0a4d997db.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 20940 IP address blocks: 23.195.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:de:3e:54:8b:60:13:17:66:7b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=8f9362af-984f-4ef1-9454-036ed32e1c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1b:b9:62:fb:f6:88:90:52:b5:39:fd:7d:0e: e0:5d:3c:9b:06:13:d9:df:2a:19:87:fe:c9:d6:7e: b0:98:a7:c4:f9:6a:1a:a9:4a:c8:3d:e8:3f:2e:e9: fc:76:9f:2d:9b:49:67:53:21:d7:ae:67:a4:31:a6: 49:48:7f:d1:70:28:bc:f3:32:53:9e:a9:19:71:10: f9:15:27:06:cc:75:6d:bf:c3:6d:ef:ae:46:07:d6: 2c:10:3f:9a:05:f1:13:61:8f:b3:9d:11:f0:3c:7f: b1:c0:b4:40:06:eb:f6:5d:d2:4a:2d:09:79:b7:33: 1f:79:75:ff:78:a7:86:da:56:b0:b8:20:de:69:5c: d9:41:6d:bc:4d:cd:a3:12:e8:24:b4:85:48:11:f3: dc:d2:e0:86:84:fc:3b:bd:e0:1d:46:b5:4a:9c:5b: e0:1d:17:90:f8:9a:00:af:0c:92:08:c7:75:bb:28: aa:87:45:e0:af:03:a1:c7:b2:00:93:b7:fc:4b:ec: 69:59:4c:8d:5f:86:7b:f2:c6:33:05:0a:27:07:3d: 01:f8:77:21:9c:14:8e:e7:04:4e:33:cc:38:49:6a: f1:e0:d0:35:21:6d:9d:6b:a6:00:5c:c3:d1:50:67: a8:47:b0:4f:ac:57:dc:bf:81:1f:49:6c:76:65:9f: ab:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F6:B7:DD:DF:47:C5:AF:6F:6C:4E:D1:DE:33:CC:9E:AC:28:67:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0c5231c-6933-3b40-aa6c-89c0a4d997db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:0d:c6:4c:65:5a:ee:7d:31:ee:b3:31:ac:29:a7:12:a5:2f: 58:91:93:7c:3b:89:e7:85:6a:f7:96:01:32:7a:55:6e:2c:71: 9c:31:ac:a9:40:5e:9e:14:90:f4:84:62:10:90:de:85:4d:f1: dc:e5:9f:40:01:ec:b4:1d:a8:c2:44:01:67:c4:44:dc:80:2a: a5:f3:70:85:d8:ad:f6:cd:37:57:9a:12:70:7f:7d:fe:b6:b2: 7e:01:d7:be:79:f5:73:9c:35:62:a0:6d:38:61:47:6a:dc:d3: 49:78:b3:54:52:3f:b4:31:3d:09:c8:55:be:10:7e:26:ed:8e: 13:be:57:ca:dd:5d:88:29:21:98:94:76:ab:3a:cc:03:29:a1: 92:da:16:0c:39:73:7b:24:f1:8e:f7:09:98:30:92:cc:dc:c3: 34:af:9a:46:49:d8:91:55:97:c4:b5:6c:cf:85:c5:8a:32:e7: 3b:10:f0:ac:a6:13:61:ad:4d:3c:df:b5:8e:74:b5:e9:81:72: c1:6b:a6:e2:50:b0:54:c3:f5:e2:45:d8:13:81:94:07:b4:e2: 88:ba:bf:2d:a0:bb:db:db:6f:1a:a4:0e:b2:fd:0b:12:23:0e: 96:c0:ea:bf:bb:82:92:25:11:b1:18:d4:e5:4b:6e:d7:4c:d9: 66:48:27:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G94+VItgExdme6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk OGY5MzYyYWYtOTg0Zi00ZWYxLTk0NTQtMDM2ZWQzMmUxYzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihu5Yvv2iJBStTn9fQ7gXTybBhPZ3yoZh/7J 1n6wmKfE+WoaqUrIPeg/Lun8dp8tm0lnUyHXrmekMaZJSH/RcCi88zJTnqkZcRD5 FScGzHVtv8Nt765GB9YsED+aBfETYY+znRHwPH+xwLRABuv2XdJKLQl5tzMfeXX/ eKeG2lawuCDeaVzZQW28Tc2jEugktIVIEfPc0uCGhPw7veAdRrVKnFvgHReQ+JoA rwySCMd1uyiqh0XgrwOhx7IAk7f8S+xpWUyNX4Z78sYzBQonBz0B+HchnBSO5wRO M8w4SWrx4NA1IW2da6YAXMPRUGeoR7BPrFfcv4EfSWx2ZZ+rEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFT2t93fR8Wvb2xO0d4zzJ6sKGfpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzBjNTIzMWMtNjkzMy0z YjQwLWFhNmMtODljMGE0ZDk5N2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8NrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkNxkxlWu59Me6zMawppxKlL1iRk3w7ieeFaveWATJ6VW4scZwxrKlA Xp4UkPSEYhCQ3oVN8dzln0AB7LQdqMJEAWfERNyAKqXzcIXYrfbNN1eaEnB/ff62 sn4B17559XOcNWKgbThhR2rc00l4s1RSP7QxPQnIVb4QfibtjhO+V8rdXYgpIZiU dqs6zAMpoZLaFgw5c3sk8Y73CZgwkszcwzSvmkZJ2JFVl8S1bM+FxYoy5zsQ8Kym E2GtTTzftY50temBcsFrpuJQsFTD9eJF2BOBlAe04oi6vy2gu9vbbxqkDrL9CxIj DpbA6r+7gpIlEbEY1OVLbtdM2WZIJx8= -----END CERTIFICATE-----Generated at Mon Aug 4 15:05:10 2025 by rpki-client