$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31b1eb2b-5d53-3a19-bf47-b6c9eea6ac3e.roa File: 31b1eb2b-5d53-3a19-bf47-b6c9eea6ac3e.roa (raw, json) Hash identifier: gnh+zqEnMsfU/RQMqTlBxTFHlDBpXRxUZBTmP4HInfo= Subject key identifier: EF:28:42:D0:F7:18:50:0B:E7:16:45:60:06:E3:CD:9C:1F:DB:E4:77 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A51D07977ACE0DE2DD7E9F000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31b1eb2b-5d53-3a19-bf47-b6c9eea6ac3e.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.209.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:79:77:ac:e0:de:2d:d7:e9:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=7c31a012-fa9b-438c-81c0-36ee50c7b885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:24:a7:86:3c:7f:79:e8:e2:29:4c:34:16:33: 32:c6:89:56:0d:3e:ca:ff:a4:80:21:96:db:47:b2: 91:5f:98:c6:75:2d:53:a4:99:4a:84:c6:da:2c:7e: 0b:f3:29:ae:a0:33:ca:29:33:b6:61:a7:51:97:a3: 85:7f:3a:ef:92:39:61:23:ce:fb:d7:59:b3:32:1e: 0e:6a:ab:da:80:b0:fb:3d:67:df:02:18:46:7a:5b: 30:e5:45:95:b4:93:a7:f7:36:ce:5a:8d:bf:50:c7: 14:04:dd:32:9a:31:f7:38:76:4a:b9:ea:4f:1e:b4: 73:d9:d1:8e:a8:d8:6e:18:99:74:75:fe:dd:81:5e: a7:f6:58:0f:30:d5:7e:20:ad:a9:ab:d2:d3:91:a9: 1f:c5:d9:f5:75:e4:50:9b:17:0d:7c:85:47:db:50: 1b:c5:35:76:b9:c8:54:84:37:31:61:c2:7e:db:ae: ce:fd:20:f8:7b:90:64:48:e6:76:a5:c0:dc:d1:d0: 34:89:37:14:f1:87:4c:9c:3d:af:07:52:cb:01:e1: 3d:13:4a:ec:1d:bf:c2:f1:d6:e6:9c:48:08:30:89: 17:75:1f:62:d8:24:67:f7:6c:58:d0:3b:48:45:aa: 71:27:65:92:b2:40:a3:48:03:54:bc:8a:95:2c:d7: b6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:28:42:D0:F7:18:50:0B:E7:16:45:60:06:E3:CD:9C:1F:DB:E4:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31b1eb2b-5d53-3a19-bf47-b6c9eea6ac3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:e1:63:16:ac:9f:a6:8b:84:9d:a0:38:e9:9d:df:67:63:c6: fb:87:7c:94:8f:62:53:05:3b:30:92:cb:d4:6f:16:81:01:8c: e0:a1:48:e3:86:12:25:fc:b7:d2:0f:52:50:8a:29:d3:e3:83: 30:ab:e4:12:3a:42:60:d9:31:40:34:52:a6:8c:7b:a7:1e:77: d9:55:58:69:d9:49:33:7c:8b:61:24:dd:ce:c7:7d:1f:00:f4: ff:f8:34:dc:f5:f6:44:a1:bc:e2:8c:87:04:6b:8e:63:cc:af: a0:c7:c9:08:ed:54:bf:84:3f:e7:e5:65:0b:68:3f:26:f0:64: 81:69:3c:f1:47:82:f2:fa:94:c0:74:8c:7d:b1:a3:2f:83:af: 6e:f6:cc:68:1e:a7:8a:a9:8f:56:09:29:6c:22:7e:2e:06:5b: 89:12:3b:02:26:ba:93:e9:57:22:0e:e2:85:38:1e:91:8d:c8: 11:6e:93:46:60:5d:bb:b0:0b:77:6e:7f:13:6c:aa:00:64:71: 07:3a:73:99:fa:3a:c3:15:f1:4d:54:92:f8:d0:e4:74:21:2f: 74:97:a2:58:51:f3:2d:3e:96:89:5e:af:e4:4d:e7:17:a2:04: f1:6c:fe:e5:15:42:cc:dd:51:fb:06:ac:da:99:71:17:50:4d: 2c:5b:ab:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0Hl3rODeLdfp8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk N2MzMWEwMTItZmE5Yi00MzhjLTgxYzAtMzZlZTUwYzdiODg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCSnhjx/eejiKUw0FjMyxolWDT7K/6SAIZbb R7KRX5jGdS1TpJlKhMbaLH4L8ymuoDPKKTO2YadRl6OFfzrvkjlhI87711mzMh4O aqvagLD7PWffAhhGelsw5UWVtJOn9zbOWo2/UMcUBN0ymjH3OHZKuepPHrRz2dGO qNhuGJl0df7dgV6n9lgPMNV+IK2pq9LTkakfxdn1deRQmxcNfIVH21AbxTV2uchU hDcxYcJ+267O/SD4e5BkSOZ2pcDc0dA0iTcU8YdMnD2vB1LLAeE9E0rsHb/C8dbm nEgIMIkXdR9i2CRn92xY0DtIRapxJ2WSskCjSANUvIqVLNe2iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8oQtD3GFAL5xZFYAbjzZwf2+R3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzFiMWViMmItNWQ1My0z YTE5LWJmNDctYjZjOWVlYTZhYzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9FXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABThYxasn6aLhJ2gOOmd32djxvuHfJSPYlMFOzCSy9RvFoEBjOChSOOG EiX8t9IPUlCKKdPjgzCr5BI6QmDZMUA0UqaMe6ced9lVWGnZSTN8i2Ek3c7HfR8A 9P/4NNz19kShvOKMhwRrjmPMr6DHyQjtVL+EP+flZQtoPybwZIFpPPFHgvL6lMB0 jH2xoy+Dr272zGgep4qpj1YJKWwifi4GW4kSOwImupPpVyIO4oU4HpGNyBFuk0Zg XbuwC3dufxNsqgBkcQc6c5n6OsMV8U1UkvjQ5HQhL3SXolhR8y0+loler+RN5xei BPFs/uUVQszdUfsGrNqZcRdQTSxbq7c= -----END CERTIFICATE-----Generated at Sun Jun 29 12:25:29 2025 by rpki-client