$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ebede14e-0434-3754-a625-e42c83144144.roa File: ebede14e-0434-3754-a625-e42c83144144.roa (raw, json) Hash identifier: j2mWimZZGEwD8IUleTw5hILe6/8CPqWGCKsSzo9MY/8= Subject key identifier: 85:ED:60:FF:89:02:41:76:A2:E4:F0:13:E7:61:AF:82:C3:29:22:E8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AB91C04DB0563E16ACBCAB440 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ebede14e-0434-3754-a625-e42c83144144.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 16625 IP address blocks: 23.209.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1c:04:db:05:63:e1:6a:cb:ca:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=762599bd-2afe-4dc0-815e-0073c22cd741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:47:c3:9e:8a:8d:f8:d9:d3:f2:bd:e8:54:2c: cd:40:73:98:a8:e3:f0:f5:4b:b2:79:b3:7a:97:5d: e3:27:3f:8d:83:b1:2a:29:b5:0d:2a:58:5c:23:a3: 3e:44:1a:95:a3:59:89:f0:0d:29:1a:09:3a:ba:4a: c9:3e:61:51:4c:91:4e:ce:5d:88:2d:63:e7:c3:e2: c2:ef:04:35:60:9e:54:3b:1e:62:40:9f:e6:09:5b: 14:29:49:28:56:db:65:c9:3a:a9:f3:9f:7b:82:64: ab:41:bf:e8:ce:9e:23:be:4b:73:b2:18:2e:b8:ae: 2d:95:ee:78:2e:35:ce:43:38:1b:9c:61:c6:0d:84: 99:bd:a3:5f:33:70:ae:8c:93:20:7e:b7:da:cc:38: c2:8f:96:34:30:ac:be:0c:90:11:4f:cc:45:6e:72: 6e:89:99:0c:7d:54:7c:9c:12:d0:51:ed:92:16:fc: 1b:79:ae:a1:cf:f4:41:6d:98:84:3c:dc:eb:c9:d3: 5e:19:f6:0e:57:13:8d:b8:49:79:61:08:a4:42:24: 4b:88:44:fe:fb:97:a4:93:b0:26:69:97:ef:70:dd: 19:da:4a:da:6f:27:df:a3:ab:c9:11:ac:a0:df:db: 65:ee:ab:3b:b1:5a:9c:72:6c:6a:56:fe:37:a4:16: 52:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:ED:60:FF:89:02:41:76:A2:E4:F0:13:E7:61:AF:82:C3:29:22:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ebede14e-0434-3754-a625-e42c83144144.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:00:6a:1b:cd:dd:52:93:1a:dc:96:bc:f8:a7:a3:6c:16:a3: 63:d3:39:4b:84:e3:5e:b0:5a:79:e9:ea:82:fc:f8:10:60:ed: 3a:b0:ab:83:e7:81:4b:83:d0:1e:00:5d:1e:a0:5d:28:da:a0: be:f8:00:ca:56:06:23:b5:a4:5b:6e:09:d1:8e:d3:a0:ae:79: cc:31:be:95:67:82:18:5b:94:39:46:32:8e:d0:8a:88:d5:5b: af:a8:b6:33:2d:27:61:86:a4:e3:81:f4:56:d5:b2:da:66:44: 54:85:3b:9d:89:bd:6e:53:1b:2c:f3:76:6e:70:e8:b2:25:0e: bb:09:34:9e:10:14:14:1e:d1:10:12:43:cc:d1:2b:bc:34:24: 18:d8:ba:a6:42:b9:f6:71:e1:84:e2:f0:1d:64:77:38:a2:7b: d0:ca:71:e7:6b:2c:e4:a6:bd:2f:3d:87:b5:7a:6b:64:21:6e: a0:52:21:8d:74:ae:ff:1b:27:20:3c:aa:2f:5c:31:f3:7d:8f: 87:c7:01:f3:91:ff:8c:91:25:71:52:5e:b7:04:0b:11:c3:33: 64:c8:7e:98:7a:1d:c6:c2:ef:7c:d4:f5:9a:e9:f2:b5:83:53: 59:d5:6d:87:e0:d1:c8:c3:1d:21:e1:2d:00:4f:80:ba:28:2c: 09:f4:97:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5HATbBWPhasvKtEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NzYyNTk5YmQtMmFmZS00ZGMwLTgxNWUtMDA3M2MyMmNkNzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0fDnoqN+NnT8r3oVCzNQHOYqOPw9UuyebN6 l13jJz+Ng7EqKbUNKlhcI6M+RBqVo1mJ8A0pGgk6ukrJPmFRTJFOzl2ILWPnw+LC 7wQ1YJ5UOx5iQJ/mCVsUKUkoVttlyTqp8597gmSrQb/ozp4jvktzshguuK4tle54 LjXOQzgbnGHGDYSZvaNfM3CujJMgfrfazDjCj5Y0MKy+DJART8xFbnJuiZkMfVR8 nBLQUe2SFvwbea6hz/RBbZiEPNzrydNeGfYOVxONuEl5YQikQiRLiET++5ekk7Am aZfvcN0Z2krabyffo6vJEayg39tl7qs7sVqccmxqVv43pBZSvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXtYP+JAkF2ouTwE+dhr4LDKSLoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWJlZGUxNGUtMDQzNC0z NzU0LWE2MjUtZTQyYzgzMTQ0MTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9HUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcAahvN3VKTGtyWvPino2wWo2PTOUuE416wWnnp6oL8+BBg7Tqwq4Pn gUuD0B4AXR6gXSjaoL74AMpWBiO1pFtuCdGO06CuecwxvpVnghhblDlGMo7QiojV W6+otjMtJ2GGpOOB9FbVstpmRFSFO52JvW5TGyzzdm5w6LIlDrsJNJ4QFBQe0RAS Q8zRK7w0JBjYuqZCufZx4YTi8B1kdziie9DKcedrLOSmvS89h7V6a2QhbqBSIY10 rv8bJyA8qi9cMfN9j4fHAfOR/4yRJXFSXrcECxHDM2TIfph6HcbC73zU9Zrp8rWD U1nVbYfg0cjDHSHhLQBPgLooLAn0lyk= -----END CERTIFICATE-----Generated at Wed Aug 6 13:03:18 2025 by rpki-client