$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5f3676c-9e90-3e8d-97a6-a8bda714cded.roa File: f5f3676c-9e90-3e8d-97a6-a8bda714cded.roa (raw, json) Hash identifier: KCn/ixFeWFMl8tn18YHYVteSxItHQImppHxqBoT0GWM= Subject key identifier: 26:80:24:D5:8B:E5:63:40:30:71:32:75:DF:7D:3F:F7:6C:61:53:1B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A9D30F3AE36DCD1E784839800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5f3676c-9e90-3e8d-97a6-a8bda714cded.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 16625 IP address blocks: 23.196.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f3:ae:36:dc:d1:e7:84:83:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=35f65c09-790d-4467-ae0e-ea519d8b297c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:57:be:73:07:98:d6:57:c5:20:cf:13:7b:15: 74:ca:5b:27:e2:f8:0a:71:72:75:99:90:10:74:b6: ee:5f:20:74:1f:ca:e3:5f:05:4c:62:db:80:30:00: be:2a:35:65:60:ec:2a:68:30:33:ae:c7:bb:83:49: 6b:21:20:b5:0b:fa:af:d7:7e:68:d4:63:03:d0:f5: 4e:c0:e3:e7:03:a6:61:a9:13:1b:a8:ef:3d:2e:59: ac:d6:a8:89:e0:95:ff:8e:36:68:44:60:fb:d3:84: c0:98:ea:25:f2:f9:c4:67:c7:15:03:1f:d8:27:5d: 32:94:5b:f1:21:f5:bc:3b:ef:26:f4:1f:95:e8:08: 89:e6:19:a8:e4:f2:75:8c:ab:b7:5e:12:c1:f6:2e: 45:2b:bb:98:78:e6:f0:cf:f0:b6:35:be:4c:f6:68: 6c:39:94:81:2a:7b:1f:9d:d3:b6:74:b1:e6:e6:ee: 6c:4a:e7:65:12:1d:1e:a8:b8:56:ea:21:a7:a4:c7: 9f:c5:93:3f:e4:96:bf:7e:6d:c0:5a:a1:2c:97:4b: 82:7b:c6:b5:20:9c:a2:d2:de:13:2a:dd:3e:f0:9e: bf:67:04:b6:71:21:18:bf:c5:34:b2:9a:0b:04:ca: 86:10:80:8b:d6:f4:ce:f5:59:31:27:b2:07:fb:f3: 4c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:80:24:D5:8B:E5:63:40:30:71:32:75:DF:7D:3F:F7:6C:61:53:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5f3676c-9e90-3e8d-97a6-a8bda714cded.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.196.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:9e:2e:71:d9:06:fe:8d:7a:4e:6b:e1:88:90:a6:e4:5a:24: 22:e5:d6:08:34:41:3d:fd:d7:48:1a:12:e1:37:c0:1a:9d:e9: c2:6e:55:d0:f0:16:4c:eb:02:0e:e2:81:4e:9a:80:34:88:da: ac:a9:85:b3:ea:2d:f7:dc:ee:f1:2d:00:b0:e7:44:54:d7:2e: 29:c0:c6:fc:04:ef:32:45:61:6c:4a:04:0b:f4:ba:98:3e:d6: 89:0a:ab:ea:2f:8f:89:7f:21:f4:22:62:65:11:44:19:4a:9b: 3d:68:6b:83:9b:27:9f:85:08:a3:8d:c4:39:28:ec:7f:a4:20: c7:9a:07:35:6e:30:1d:10:f7:ef:01:fa:4d:8e:53:7b:ae:54: d1:ea:7e:ed:e4:74:fb:5a:f4:c7:da:e9:88:d8:b2:45:56:78: 7f:7d:c7:99:20:31:fc:86:89:51:df:44:77:64:08:dc:93:e1: 3d:9c:cc:13:0d:db:06:2c:7f:d1:ca:71:9e:3f:10:ca:5a:29: 70:ee:aa:6c:64:d5:36:a0:e0:2f:d9:d9:49:33:cc:db:c8:58: 4e:38:69:fb:67:a1:a0:69:8f:12:0f:09:6d:1f:a2:bf:d5:0b: 60:ea:f0:bc:9f:88:05:4c:49:a9:e6:df:6b:a1:3f:0d:e3:a9: 25:d3:2f:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPOuNtzR54SDmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk MzVmNjVjMDktNzkwZC00NDY3LWFlMGUtZWE1MTlkOGIyOTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Fe+cweY1lfFIM8TexV0ylsn4vgKcXJ1mZAQ dLbuXyB0H8rjXwVMYtuAMAC+KjVlYOwqaDAzrse7g0lrISC1C/qv135o1GMD0PVO wOPnA6ZhqRMbqO89Llms1qiJ4JX/jjZoRGD704TAmOol8vnEZ8cVAx/YJ10ylFvx IfW8O+8m9B+V6AiJ5hmo5PJ1jKu3XhLB9i5FK7uYeObwz/C2Nb5M9mhsOZSBKnsf ndO2dLHm5u5sSudlEh0eqLhW6iGnpMefxZM/5Ja/fm3AWqEsl0uCe8a1IJyi0t4T Kt0+8J6/ZwS2cSEYv8U0spoLBMqGEICL1vTO9VkxJ7IH+/NMzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCaAJNWL5WNAMHEydd99P/dsYVMbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjVmMzY3NmMtOWU5MC0z ZThkLTk3YTYtYThiZGE3MTRjZGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF8RIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqeLnHZBv6Nek5r4YiQpuRaJCLl1gg0QT3910gaEuE3wBqd6cJuVdDw FkzrAg7igU6agDSI2qyphbPqLffc7vEtALDnRFTXLinAxvwE7zJFYWxKBAv0upg+ 1okKq+ovj4l/IfQiYmURRBlKmz1oa4ObJ5+FCKONxDko7H+kIMeaBzVuMB0Q9+8B +k2OU3uuVNHqfu3kdPta9Mfa6YjYskVWeH99x5kgMfyGiVHfRHdkCNyT4T2czBMN 2wYsf9HKcZ4/EMpaKXDuqmxk1Tag4C/Z2UkzzNvIWE44aftnoaBpjxIPCW0for/V C2Dq8LyfiAVMSanm32uhPw3jqSXTL2Q= -----END CERTIFICATE-----Generated at Mon Aug 4 18:21:10 2025 by rpki-client