$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfa78834-2e2a-3c72-aaf7-7b51e3c70fd0.roa File: cfa78834-2e2a-3c72-aaf7-7b51e3c70fd0.roa (raw, json) Hash identifier: iHWcyNh7u/eST9FyMCtj6zwk8JOsQDRMB4Kzbbl+U0A= Subject key identifier: 23:3E:EA:0D:DB:A1:AC:80:FF:9C:88:AE:73:66:88:B5:CC:4E:D5:17 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A6290A9021E759C2137017CC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfa78834-2e2a-3c72-aaf7-7b51e3c70fd0.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16625 IP address blocks: 23.197.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:a9:02:1e:75:9c:21:37:01:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=91e2fe40-3085-4605-b416-06546398d6c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bf:e9:52:63:b1:53:8c:5d:97:cf:0a:c7:b9: 98:93:22:23:97:49:f4:af:47:ad:d3:07:0d:71:59: 29:16:88:7d:8b:89:6f:cd:2a:b0:c4:46:88:27:af: 20:bf:4a:6e:8f:e4:c7:e0:0a:00:d1:60:4e:0a:39: 54:3b:a4:43:b0:8a:7a:45:1d:25:37:81:66:fc:a7: 31:ac:b6:75:d2:47:5e:9c:bd:01:86:ed:ed:d6:4c: 0b:1c:74:8f:1c:fc:df:4b:45:98:84:c4:30:b1:7b: 7b:11:8f:c5:b6:1e:9e:80:66:b8:75:40:3e:b9:8d: 6b:23:df:b0:67:d2:9a:fe:68:d2:a1:a9:83:e3:d9: 5e:65:39:2e:f0:cd:1b:6b:7f:48:a0:1f:c7:0a:57: 66:33:69:d0:06:64:95:06:8f:cf:93:b3:ad:8c:60: 48:0d:fa:7e:40:12:1d:59:50:a4:d9:e2:d3:42:11: d5:1f:81:93:82:a4:82:fb:fe:ee:33:2d:25:32:f5: f8:c5:ac:3b:24:c5:49:ae:99:62:d0:27:f6:f1:ca: 41:0f:86:10:f6:26:af:e3:92:41:5b:cb:3c:a2:c6: 50:46:27:8d:97:f0:3d:d7:70:89:ce:b0:6e:92:56: 1c:ef:66:81:c3:71:f9:ef:bd:fb:4f:e1:4c:b5:65: 64:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3E:EA:0D:DB:A1:AC:80:FF:9C:88:AE:73:66:88:B5:CC:4E:D5:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfa78834-2e2a-3c72-aaf7-7b51e3c70fd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:a8:15:75:dc:a8:76:14:03:ec:fb:b1:6e:01:f4:27:ce:7c: a0:20:fc:f8:b5:ff:8e:70:ad:5f:fc:67:8f:ba:05:cf:24:41: 1a:d0:06:e7:3f:fa:e4:d4:21:3b:89:b3:bd:8d:af:e2:0e:29: 2a:fe:80:6c:09:19:db:47:b6:27:78:63:5c:72:60:22:c0:be: 07:1c:8a:20:32:f3:7e:bd:47:70:a0:c8:60:31:c8:37:37:ad: ec:d6:6c:22:9b:ec:c7:7a:b8:f8:f0:cd:ec:39:06:3c:b4:60: 28:d8:1e:d0:c1:fe:82:1b:10:f8:be:87:88:8c:9f:0e:e0:d9: d9:72:27:ba:df:42:30:43:c3:f9:27:c6:ae:44:5e:cc:9e:89: c3:99:ff:89:c6:03:04:a4:43:29:29:ce:70:02:e2:5c:53:b4: a5:65:4e:b5:a9:dc:d8:0d:06:72:b1:81:8e:64:3a:72:69:60: 47:12:b7:53:41:12:43:99:f9:41:ec:4c:a6:9a:b1:d7:4a:dd: 18:96:41:ba:02:8d:3b:85:ee:de:84:5e:17:a1:60:36:19:08: f2:91:f3:53:f9:3a:bc:40:93:9f:61:03:75:4f:80:43:94:ed: 4b:25:08:a0:88:1f:8a:5d:d1:10:9e:1c:f1:17:60:0b:7c:b9: 02:18:04:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikKkCHnWcITcBfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk OTFlMmZlNDAtMzA4NS00NjA1LWI0MTYtMDY1NDYzOThkNmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL/pUmOxU4xdl88Kx7mYkyIjl0n0r0et0wcN cVkpFoh9i4lvzSqwxEaIJ68gv0puj+TH4AoA0WBOCjlUO6RDsIp6RR0lN4Fm/Kcx rLZ10kdenL0Bhu3t1kwLHHSPHPzfS0WYhMQwsXt7EY/Fth6egGa4dUA+uY1rI9+w Z9Ka/mjSoamD49leZTku8M0ba39IoB/HCldmM2nQBmSVBo/Pk7OtjGBIDfp+QBId WVCk2eLTQhHVH4GTgqSC+/7uMy0lMvX4xaw7JMVJrpli0Cf28cpBD4YQ9iav45JB W8s8osZQRieNl/A913CJzrBuklYc72aBw3H57737T+FMtWVkWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCM+6g3boayA/5yIrnNmiLXMTtUXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2ZhNzg4MzQtMmUyYS0z YzcyLWFhZjctN2I1MWUzYzcwZmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8X0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmoFXXcqHYUA+z7sW4B9CfOfKAg/Pi1/45wrV/8Z4+6Bc8kQRrQBuc/ +uTUITuJs72Nr+IOKSr+gGwJGdtHtid4Y1xyYCLAvgcciiAy8369R3CgyGAxyDc3 rezWbCKb7Md6uPjwzew5Bjy0YCjYHtDB/oIbEPi+h4iMnw7g2dlyJ7rfQjBDw/kn xq5EXsyeicOZ/4nGAwSkQykpznAC4lxTtKVlTrWp3NgNBnKxgY5kOnJpYEcSt1NB EkOZ+UHsTKaasddK3RiWQboCjTuF7t6EXhehYDYZCPKR81P5OrxAk59hA3VPgEOU 7UslCKCIH4pd0RCeHPEXYAt8uQIYBLQ= -----END CERTIFICATE-----Generated at Mon Aug 4 18:12:59 2025 by rpki-client