$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21d89750-73ed-3220-b125-c6787a7e3508.roa File: 21d89750-73ed-3220-b125-c6787a7e3508.roa (raw, json) Hash identifier: TMkq8kKrdqWxUJEL1P88RpZC7Pb77pL2kOyq5RQYXeY= Subject key identifier: AC:2E:ED:44:C3:25:4C:5E:A6:9C:E2:7D:93:B5:88:3D:A9:B1:A3:2B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4F05E046B5D7C33DEF982C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21d89750-73ed-3220-b125-c6787a7e3508.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 16625 IP address blocks: 23.198.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:e0:46:b5:d7:c3:3d:ef:98:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=3c7a80ea-9eb7-4a2f-82bd-9f0e601fe20d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:59:7c:89:a1:71:4e:ad:ec:31:7d:72:7e:84: ce:fb:b6:c7:03:02:43:90:97:ab:8a:65:da:8a:e7: b7:14:5c:a4:2a:29:cd:95:ad:e3:5d:9a:22:61:4d: 39:f5:99:1e:28:88:d9:d3:de:83:a1:5f:bd:7e:3f: 02:f7:c7:a9:0b:5e:e5:a8:62:75:92:b3:1f:7b:53: 20:4c:a1:a3:a4:b2:be:05:e0:82:33:46:1d:eb:75: 85:09:18:64:39:46:63:b4:0a:a3:59:c5:85:92:3b: 94:f7:f3:ce:a9:18:ee:4e:3c:82:8c:d4:d7:ae:75: 83:5c:27:03:b4:1e:e9:8f:e8:6e:92:eb:2e:03:c0: 84:07:47:87:c6:93:cd:77:a1:d2:f6:67:4c:22:58: 4f:aa:c6:a2:52:9e:ad:ce:e7:b1:41:a3:08:8c:41: ba:93:3b:79:b4:52:7d:47:a7:bc:b5:d4:60:76:9b: 39:e7:6e:4f:bf:8c:43:b8:ca:0f:ff:9b:e1:fd:93: b3:bd:07:5f:a8:ea:d3:b0:70:54:29:44:cf:19:f2: bf:c3:ac:15:21:fe:d0:6a:c0:b0:66:f9:5a:3f:ba: d3:52:80:d1:b0:84:c9:af:d4:7d:6c:70:1c:3e:12: 76:86:07:d7:18:bd:15:c1:1e:ce:41:cf:6b:c7:9f: b0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2E:ED:44:C3:25:4C:5E:A6:9C:E2:7D:93:B5:88:3D:A9:B1:A3:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21d89750-73ed-3220-b125-c6787a7e3508.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.198.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:82:d3:0d:42:49:dc:d1:77:71:f8:6f:a0:82:d0:fd:2e:e3: b4:ff:2a:57:0d:7b:b4:ec:af:81:c2:37:13:22:15:ed:c6:1c: 4b:6a:65:67:ea:23:29:d3:68:a3:be:40:b4:aa:af:9a:79:59: 70:5b:25:c7:a5:da:60:55:1e:41:b0:32:2f:77:88:18:1a:8d: c7:50:08:4a:8a:e1:bc:b7:bf:ef:6a:8d:11:a1:ec:19:43:b1: a5:7b:42:7e:5f:2f:96:e6:08:26:a1:ad:ca:d6:30:b2:88:a1: d8:c6:39:a7:72:f4:23:18:1b:67:e3:c6:18:3f:51:03:7c:7c: 5f:46:c9:e6:e0:47:f4:77:bf:86:23:12:88:f3:df:eb:63:d6: 7a:89:03:90:a7:f7:46:23:7c:f1:67:5b:c5:0e:99:20:7f:0e: df:6c:0c:fa:e4:0b:83:be:62:da:12:43:91:c7:dc:3e:ce:33: cd:1c:19:f0:86:04:56:d0:5c:00:f3:9a:0c:84:5b:4b:29:13: 00:9b:77:51:a3:c9:b3:aa:d7:1e:a0:57:39:5d:67:82:43:31: 35:89:7e:f8:52:92:98:14:80:24:80:6d:8c:78:11:a3:2a:a4: 8a:3a:e2:00:12:e5:6a:23:4e:eb:ed:c3:18:e5:a3:7c:2d:fd: 05:7b:46:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBeBGtdfDPe+YLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk M2M3YTgwZWEtOWViNy00YTJmLTgyYmQtOWYwZTYwMWZlMjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1l8iaFxTq3sMX1yfoTO+7bHAwJDkJerimXa iue3FFykKinNla3jXZoiYU059ZkeKIjZ096DoV+9fj8C98epC17lqGJ1krMfe1Mg TKGjpLK+BeCCM0Yd63WFCRhkOUZjtAqjWcWFkjuU9/POqRjuTjyCjNTXrnWDXCcD tB7pj+hukusuA8CEB0eHxpPNd6HS9mdMIlhPqsaiUp6tzuexQaMIjEG6kzt5tFJ9 R6e8tdRgdps5525Pv4xDuMoP/5vh/ZOzvQdfqOrTsHBUKUTPGfK/w6wVIf7QasCw ZvlaP7rTUoDRsITJr9R9bHAcPhJ2hgfXGL0VwR7OQc9rx5+w1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwu7UTDJUxeppzifZO1iD2psaMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjFkODk3NTAtNzNlZC0z MjIwLWIxMjUtYzY3ODdhN2UzNTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8bAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGC0w1CSdzRd3H4b6CC0P0u47T/KlcNe7Tsr4HCNxMiFe3GHEtqZWfq IynTaKO+QLSqr5p5WXBbJcel2mBVHkGwMi93iBgajcdQCEqK4by3v+9qjRGh7BlD saV7Qn5fL5bmCCahrcrWMLKIodjGOady9CMYG2fjxhg/UQN8fF9GyebgR/R3v4Yj Eojz3+tj1nqJA5Cn90YjfPFnW8UOmSB/Dt9sDPrkC4O+YtoSQ5HH3D7OM80cGfCG BFbQXADzmgyEW0spEwCbd1GjybOq1x6gVzldZ4JDMTWJfvhSkpgUgCSAbYx4EaMq pIo64gAS5WojTuvtwxjlo3wt/QV7Rp0= -----END CERTIFICATE-----Generated at Mon Jun 30 19:51:40 2025 by rpki-client