$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f8f5272-931a-3c65-a6d3-014af3db641b.roa File: 4f8f5272-931a-3c65-a6d3-014af3db641b.roa (raw, json) Hash identifier: BpztDgzvVJPKufi+M5mQ0V5skKlnDl0fhV05qujMRm4= Subject key identifier: C9:76:7D:D7:39:E3:6F:EC:8D:CE:BC:8E:5B:7C:AD:B6:44:A9:89:14 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE9F67DC24113ED55832C9C90 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f8f5272-931a-3c65-a6d3-014af3db641b.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.207.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:7d:c2:41:13:ed:55:83:2c:9c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=3e11997f-2842-4904-bb50-6eb9c27aa9e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:46:96:d0:f1:c5:85:b1:7e:1b:c3:ea:ac:d1: 25:9e:77:8d:f6:b6:f0:5a:1c:57:00:25:ee:d2:57: 39:0a:dd:b2:d6:29:fc:08:5e:bf:2a:35:a1:37:2b: be:3c:ba:21:0c:6e:64:80:7e:d7:1f:95:11:07:ac: b8:ea:5b:10:46:d1:ad:f6:eb:79:06:7e:d3:3f:ae: eb:3b:06:fa:5e:d2:11:7d:b0:9f:9b:0b:16:46:3f: c6:cd:a7:69:a9:91:23:87:34:b5:18:d1:e6:3c:20: 2e:2c:27:00:30:fa:15:c3:42:eb:42:56:0c:e2:dd: ac:32:c2:e5:78:5b:0b:bc:b8:a5:bd:17:92:0c:86: 6e:1a:35:37:3a:e6:10:e7:81:c6:01:48:84:9a:08: 8c:a8:fd:fa:2a:59:4e:e4:4a:61:85:af:8a:cd:17: 9b:46:3d:33:af:54:c9:58:5b:a3:af:35:fb:99:ff: ca:f7:11:7d:e9:fc:81:21:5e:99:39:b5:dc:6b:ee: 8c:c3:66:9e:15:8b:5f:59:d7:3d:4c:f8:f3:d6:70: f2:6f:9c:39:fd:96:2a:e0:7a:d0:41:76:4b:50:6c: c0:7b:ca:95:3e:c5:94:10:fc:98:86:d5:ee:0d:a6: 4e:90:72:38:88:52:a4:04:e6:6a:3d:c9:63:e0:7c: 51:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:76:7D:D7:39:E3:6F:EC:8D:CE:BC:8E:5B:7C:AD:B6:44:A9:89:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f8f5272-931a-3c65-a6d3-014af3db641b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:48:bb:03:71:e1:a0:70:68:2d:01:c6:fc:96:a4:c8:64:66: 94:83:19:7b:de:28:71:55:52:a1:b1:45:ae:33:a1:e6:ff:e9: e4:8d:cd:5e:65:ed:e9:1d:db:19:c3:18:67:97:09:f9:0e:e7: f7:0d:86:69:92:14:d3:2d:87:f5:0c:30:05:25:81:dd:b8:e9: 4c:4a:4e:aa:73:78:f3:9f:a7:dc:f6:dd:eb:0d:62:fd:f0:9d: b3:62:31:55:1a:bd:82:4b:db:5d:59:70:3f:cd:09:3f:fa:7f: 86:e0:32:70:c4:f4:42:d5:f1:95:35:d9:77:64:2f:8e:ea:8a: 41:2e:50:96:ac:e7:a9:7e:45:72:16:e1:49:45:77:28:a2:ef: c8:24:d0:5a:02:cd:cc:0e:c8:62:e4:6d:c3:26:8e:16:ef:58: 9b:20:dc:9e:85:8f:13:dc:5b:40:a9:5d:75:05:f4:d0:a4:2e: 8f:b5:20:2c:2d:44:ad:6c:90:bf:ff:99:ef:92:93:ee:55:4c: bf:6f:04:66:f9:ad:22:94:89:72:d1:0e:53:24:78:93:1e:75: ba:3f:e6:be:54:f5:05:b4:64:42:2d:55:d7:fd:88:15:51:fc: 53:19:37:2b:4e:08:fd:19:a8:23:bb:48:ad:88:27:86:40:be: b0:2d:f6:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9n3CQRPtVYMsnJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk M2UxMTk5N2YtMjg0Mi00OTA0LWJiNTAtNmViOWMyN2FhOWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUaW0PHFhbF+G8PqrNElnneN9rbwWhxXACXu 0lc5Ct2y1in8CF6/KjWhNyu+PLohDG5kgH7XH5URB6y46lsQRtGt9ut5Bn7TP67r Owb6XtIRfbCfmwsWRj/GzadpqZEjhzS1GNHmPCAuLCcAMPoVw0LrQlYM4t2sMsLl eFsLvLilvReSDIZuGjU3OuYQ54HGAUiEmgiMqP36KllO5Ephha+KzRebRj0zr1TJ WFujrzX7mf/K9xF96fyBIV6ZObXca+6Mw2aeFYtfWdc9TPjz1nDyb5w5/ZYq4HrQ QXZLUGzAe8qVPsWUEPyYhtXuDaZOkHI4iFKkBOZqPclj4HxR6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMl2fdc542/sjc68jlt8rbZEqYkUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGY4ZjUyNzItOTMxYS0z YzY1LWE2ZDMtMDE0YWYzZGI2NDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8/aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlIuwNx4aBwaC0BxvyWpMhkZpSDGXveKHFVUqGxRa4zoeb/6eSNzV5l 7ekd2xnDGGeXCfkO5/cNhmmSFNMth/UMMAUlgd246UxKTqpzePOfp9z23esNYv3w nbNiMVUavYJL211ZcD/NCT/6f4bgMnDE9ELV8ZU12XdkL47qikEuUJas56l+RXIW 4UlFdyii78gk0FoCzcwOyGLkbcMmjhbvWJsg3J6FjxPcW0CpXXUF9NCkLo+1ICwt RK1skL//me+Sk+5VTL9vBGb5rSKUiXLRDlMkeJMedbo/5r5U9QW0ZEItVdf9iBVR /FMZNytOCP0ZqCO7SK2IJ4ZAvrAt9gQ= -----END CERTIFICATE-----Generated at Sat Aug 23 17:32:48 2025 by rpki-client