$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6b9fef8-a73e-33dd-b850-43950fe7417a.roa File: e6b9fef8-a73e-33dd-b850-43950fe7417a.roa (raw, json) Hash identifier: 3gCCIn8laQ/WJ7Je6Z+vZtGjhVDuD0fqZJazEBcgpFE= Subject key identifier: 61:57:C2:BE:43:AF:88:FA:53:38:14:6D:F9:E5:BA:BC:54:82:5F:22 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8840A226F02D6517DD763F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6b9fef8-a73e-33dd-b850-43950fe7417a.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 16625 IP address blocks: 23.218.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:a2:26:f0:2d:65:17:dd:76:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=18110d91-2008-4540-ae37-70cd05ed0c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ac:71:bd:04:b4:26:39:a4:4b:64:d2:f2:5a: 78:4f:9a:30:13:81:00:2c:f1:83:b4:e3:ac:a4:bf: b5:48:a7:9a:e5:3f:27:ea:7f:46:7f:53:bf:9d:67: 67:04:46:2b:ab:77:8f:eb:d2:41:ef:b4:fd:11:a9: 63:0d:6c:64:c6:2f:77:9f:76:9c:2c:ac:31:bb:c6: 6a:fb:25:42:d2:e2:a3:b6:03:84:e9:91:99:1f:d0: 39:7a:3f:08:dd:04:1b:96:59:12:ef:60:26:35:3f: eb:3b:e7:23:00:6f:e4:0a:59:cd:22:98:e0:f5:1a: 5c:0a:11:29:e1:ed:85:07:5a:be:45:1e:cc:18:ea: 39:75:88:d8:60:e2:f0:b2:a9:78:94:95:7d:2c:81: 68:d2:32:41:f9:ef:81:2a:07:ec:e8:bf:89:2f:98: 66:89:0d:67:46:32:89:37:88:a0:15:a9:9b:6b:55: 16:1d:b8:6a:56:ea:67:6d:0d:8e:f9:0d:f3:36:df: e0:81:22:f8:29:63:dc:bd:92:97:60:3e:0d:6b:13: 61:6d:78:60:25:0e:0a:00:56:63:33:83:cf:06:48: 95:c8:dd:f5:25:9a:79:12:41:79:ea:11:b2:66:25: 02:7d:58:04:67:5e:64:f9:2a:d1:05:f9:43:56:e6: d8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:57:C2:BE:43:AF:88:FA:53:38:14:6D:F9:E5:BA:BC:54:82:5F:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6b9fef8-a73e-33dd-b850-43950fe7417a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:c7:b4:ca:c9:0e:7b:8e:da:a0:17:7f:42:53:c4:f6:21:db: 2e:8e:ad:37:8b:26:9c:fd:5a:cf:be:c4:3f:92:78:50:2d:fa: d6:a0:02:26:3a:b8:70:0c:ad:94:d7:29:08:37:5f:d1:62:0e: 1d:c5:e7:42:c7:3d:3b:b4:e5:52:e2:4c:a6:7b:91:7e:11:92: 93:da:65:2e:47:92:3d:33:fb:08:df:14:97:65:41:2b:18:76: 67:d1:7b:ab:38:2a:08:88:f3:6d:fe:d3:03:e2:c1:cc:04:18: 29:2e:2d:0e:a2:b1:17:cb:4b:bf:14:e8:b6:00:df:9d:7f:f9: be:79:c2:ca:92:4a:d1:a8:36:09:e2:db:07:ea:ff:a9:84:ec: 9d:37:7a:a4:fc:8c:2b:3b:34:3c:48:f9:75:65:35:0d:67:d8: 05:6b:5c:d5:8b:f0:65:96:1d:29:e6:92:df:4c:5b:f6:01:ea: bb:77:c3:ab:f2:ef:20:e8:cd:9e:b9:1d:c8:7a:6e:6f:af:cd: ea:4e:b3:0d:cb:ee:55:a9:0d:41:c3:96:ca:b4:cc:2c:8c:05: 22:78:25:b2:be:3b:1b:3e:4f:12:43:b0:f0:8e:3b:2a:c0:2a: 2c:23:9f:28:9a:78:a2:e9:75:0e:ab:1e:c0:1d:30:ad:c4:db: f1:eb:f6:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQKIm8C1lF912PwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk MTgxMTBkOTEtMjAwOC00NTQwLWFlMzctNzBjZDA1ZWQwYzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKxxvQS0JjmkS2TS8lp4T5owE4EALPGDtOOs pL+1SKea5T8n6n9Gf1O/nWdnBEYrq3eP69JB77T9EaljDWxkxi93n3acLKwxu8Zq +yVC0uKjtgOE6ZGZH9A5ej8I3QQbllkS72AmNT/rO+cjAG/kClnNIpjg9RpcChEp 4e2FB1q+RR7MGOo5dYjYYOLwsql4lJV9LIFo0jJB+e+BKgfs6L+JL5hmiQ1nRjKJ N4igFamba1UWHbhqVupnbQ2O+Q3zNt/ggSL4KWPcvZKXYD4NaxNhbXhgJQ4KAFZj M4PPBkiVyN31JZp5EkF56hGyZiUCfVgEZ15k+SrRBflDVubYkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFXwr5Dr4j6UzgUbfnlurxUgl8iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTZiOWZlZjgtYTczZS0z M2RkLWI4NTAtNDM5NTBmZTc0MTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9qwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHHtMrJDnuO2qAXf0JTxPYh2y6OrTeLJpz9Ws++xD+SeFAt+tagAiY6 uHAMrZTXKQg3X9FiDh3F50LHPTu05VLiTKZ7kX4RkpPaZS5Hkj0z+wjfFJdlQSsY dmfRe6s4KgiI823+0wPiwcwEGCkuLQ6isRfLS78U6LYA351/+b55wsqSStGoNgni 2wfq/6mE7J03eqT8jCs7NDxI+XVlNQ1n2AVrXNWL8GWWHSnmkt9MW/YB6rt3w6vy 7yDozZ65Hch6bm+vzepOsw3L7lWpDUHDlsq0zCyMBSJ4JbK+Oxs+TxJDsPCOOyrA KiwjnyiaeKLpdQ6rHsAdMK3E2/Hr9nA= -----END CERTIFICATE-----Generated at Mon Aug 4 19:09:54 2025 by rpki-client