$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ebaf966f-d274-34ea-abea-b67e5193dce5.roa File: ebaf966f-d274-34ea-abea-b67e5193dce5.roa (raw, json) Hash identifier: h/eloCSJK0AlczBaegnGwD8qbMjV0K1QPxdINi5HigA= Subject key identifier: 95:76:23:1B:84:57:D5:A4:78:A9:54:E0:3C:E5:6D:20:62:4F:C5:CD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AB651070DC960EC8E4F7D7680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ebaf966f-d274-34ea-abea-b67e5193dce5.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 20940 IP address blocks: 23.212.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:51:07:0d:c9:60:ec:8e:4f:7d:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=f72254f3-4581-4c50-911a-3f79e5fa1f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6d:db:08:4b:3f:c0:96:9f:5d:b5:0a:80:e5: 31:c8:33:93:05:1a:b6:82:11:95:b1:3f:ad:94:61: d8:04:04:72:fa:5f:75:78:e6:7d:a8:45:05:05:96: 7e:59:c0:ea:26:36:87:5c:f0:d9:7a:a5:74:3d:e5: a3:42:77:6c:36:9f:31:ae:5c:1f:a2:71:3c:91:70: e6:83:f9:20:3b:4d:0d:cb:7a:55:54:ed:d5:6f:5d: 47:0d:c4:50:13:4d:70:64:17:04:62:b7:48:f9:62: fb:d6:56:67:14:b6:1b:3c:01:d7:c1:3a:a8:0e:32: dd:a5:4f:9b:76:58:f2:44:9a:08:f2:d5:87:93:33: f7:f1:18:72:b2:ac:81:66:0a:e2:bc:5e:e1:4c:99: 48:51:c5:ad:e1:c2:8b:36:bb:32:a4:08:25:a2:12: ee:05:6a:0a:1d:75:d0:ac:c9:ac:f5:d5:ca:f9:37: 37:f7:b3:07:83:03:8e:3e:ad:43:f5:20:f5:c8:61: f7:39:5e:47:1c:8d:ed:48:e9:ef:91:ff:2b:43:10: 52:ee:92:04:07:b6:9f:d5:53:42:31:ab:f3:a7:da: 13:dd:e9:c2:69:de:ab:90:c4:e5:a8:45:1a:14:0d: 53:8c:fb:ab:e3:ef:e6:b3:08:bc:78:dc:71:89:2a: e7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:76:23:1B:84:57:D5:A4:78:A9:54:E0:3C:E5:6D:20:62:4F:C5:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ebaf966f-d274-34ea-abea-b67e5193dce5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:9e:af:51:0d:07:6e:53:61:e8:f4:19:de:78:53:23:f7:8e: 8a:e4:3d:8e:23:6c:18:ef:fc:21:ea:87:26:4c:2e:70:23:a2: 60:c8:95:6b:b6:fb:0f:6c:45:46:c7:05:d2:74:00:9d:37:d0: c8:9d:c2:8a:b4:18:5a:c7:e4:fd:95:52:5f:d3:ac:a5:3d:e0: 45:46:bd:54:4b:e4:d5:bc:ae:4d:9f:25:61:e6:29:12:17:49: 4d:61:97:9d:1c:a6:74:a4:2c:4e:a5:0e:48:a3:2c:6f:02:2c: df:11:e5:a5:e4:50:e7:e3:ad:58:21:6a:62:4d:2b:b5:bf:76: ed:12:8a:cd:9c:61:9a:ea:b8:f2:78:4d:7a:7c:a8:ad:09:aa: dd:fb:00:be:6c:19:c6:79:53:53:b4:be:47:71:82:32:78:dd: 99:d6:99:29:bd:21:0c:5d:46:cd:02:55:58:24:97:0a:8c:59: b5:5f:a5:55:82:aa:c4:f4:e8:71:79:c1:c3:d7:e7:21:8d:a4: 15:21:5a:17:5f:99:8a:27:64:57:70:88:c6:02:f2:82:a0:97: 07:d0:d2:1d:80:a0:41:e7:82:c6:15:61:6e:9e:97:2c:80:82: eb:42:ab:e1:c3:06:df:40:05:8c:02:cc:26:41:47:60:60:9a: 33:53:70:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UQcNyWDsjk99doAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZjcyMjU0ZjMtNDU4MS00YzUwLTkxMWEtM2Y3OWU1ZmExZjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW3bCEs/wJafXbUKgOUxyDOTBRq2ghGVsT+t lGHYBARy+l91eOZ9qEUFBZZ+WcDqJjaHXPDZeqV0PeWjQndsNp8xrlwfonE8kXDm g/kgO00Ny3pVVO3Vb11HDcRQE01wZBcEYrdI+WL71lZnFLYbPAHXwTqoDjLdpU+b dljyRJoI8tWHkzP38RhysqyBZgrivF7hTJlIUcWt4cKLNrsypAglohLuBWoKHXXQ rMms9dXK+Tc397MHgwOOPq1D9SD1yGH3OV5HHI3tSOnvkf8rQxBS7pIEB7af1VNC Mavzp9oT3enCad6rkMTlqEUaFA1TjPur4+/mswi8eNxxiSrn6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJV2IxuEV9WkeKlU4DzlbSBiT8XNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWJhZjk2NmYtZDI3NC0z NGVhLWFiZWEtYjY3ZTUxOTNkY2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9TvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6er1ENB25TYej0Gd54UyP3jorkPY4jbBjv/CHqhyZMLnAjomDIlWu2 +w9sRUbHBdJ0AJ030Midwoq0GFrH5P2VUl/TrKU94EVGvVRL5NW8rk2fJWHmKRIX SU1hl50cpnSkLE6lDkijLG8CLN8R5aXkUOfjrVghamJNK7W/du0Sis2cYZrquPJ4 TXp8qK0Jqt37AL5sGcZ5U1O0vkdxgjJ43ZnWmSm9IQxdRs0CVVgklwqMWbVfpVWC qsT06HF5wcPX5yGNpBUhWhdfmYonZFdwiMYC8oKglwfQ0h2AoEHngsYVYW6elyyA gutCq+HDBt9ABYwCzCZBR2BgmjNTcAI= -----END CERTIFICATE-----Generated at Mon Aug 4 22:16:40 2025 by rpki-client