$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/738625c3-3912-3bfa-a763-9902bf2e6b9c.roa File: 738625c3-3912-3bfa-a763-9902bf2e6b9c.roa (raw, json) Hash identifier: Ny1OS1QdZLxsCfprttstEgwpuICO1adPrlT7g+6SorI= Subject key identifier: 79:E6:82:18:DF:2A:A5:B4:2F:62:C8:1F:97:31:90:2D:03:9C:9C:B9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A51D07B295252527BFF945760 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/738625c3-3912-3bfa-a763-9902bf2e6b9c.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.203.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:7b:29:52:52:52:7b:ff:94:57:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=74b162dc-8ace-4e53-8285-8c53aa95a7e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d5:a3:42:7d:94:99:a7:94:83:48:5d:ac:61: 54:7d:02:ff:63:77:6d:9b:29:6e:be:c2:dc:e5:0c: b6:81:be:9f:72:ea:46:a3:8c:78:1d:95:6c:34:e7: 0d:19:9f:11:2c:d9:1a:90:85:3f:06:c0:89:49:ee: d3:a5:62:30:a1:d6:58:81:8a:b0:7b:63:0a:1a:5e: 9c:dd:be:f1:5c:10:b4:9c:15:72:34:26:34:7b:bf: c6:ed:05:de:25:58:f5:5f:32:db:1a:1d:db:a3:75: 8e:65:44:29:b3:78:8e:bc:a9:c1:bf:a1:49:17:b0: 3d:24:62:c4:6f:a2:4b:1d:c9:7f:5c:cd:5d:1c:b1: 1e:d4:de:a0:87:54:c1:f4:b8:61:d1:be:35:86:07: 9c:a3:7c:d5:cc:f0:dd:0d:a7:4f:b6:08:a7:fc:b5: 1c:1b:85:a2:ba:f9:2f:ee:ae:b7:95:34:e8:50:de: b2:93:b7:88:6d:66:c5:90:07:3a:57:04:5f:6c:43: 1b:16:0f:23:6c:44:95:0e:9c:6d:60:d3:7e:a8:32: ee:ba:d2:7b:94:03:fe:f0:ee:5d:8f:96:22:7e:45: c0:e2:6e:ef:3f:92:f6:5c:f4:13:9e:e0:03:df:ba: 43:2d:de:96:d1:e9:d7:14:12:ed:9f:77:eb:47:9e: 43:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E6:82:18:DF:2A:A5:B4:2F:62:C8:1F:97:31:90:2D:03:9C:9C:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/738625c3-3912-3bfa-a763-9902bf2e6b9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:89:cc:f6:e6:58:75:28:92:3e:64:f4:a6:47:05:05:48:f4: 82:c8:08:cf:6e:bf:66:b5:16:be:01:ed:9c:67:07:eb:f7:a4: a9:74:42:90:2d:27:fb:bd:de:75:e0:e6:0c:2f:5f:a5:14:26: 6b:96:8c:44:46:05:da:bc:fb:7e:c6:dd:a8:2e:a4:50:94:aa: 59:dd:21:2f:8e:53:0d:b6:22:a9:50:0a:b9:e2:ab:7c:27:78: fe:7c:8f:90:f7:1a:7e:92:cf:f7:d4:0b:63:8a:3a:0b:b1:32: b7:2e:89:f6:e9:6a:12:1e:1a:0f:9e:60:66:b7:7d:0f:35:3c: f0:d0:36:e6:fc:30:27:ca:a6:1e:25:9c:db:c3:63:c8:74:0d: 35:40:af:d2:2a:77:df:d3:73:b8:2e:3e:fb:71:fd:fc:f4:bd: 61:66:ba:52:88:79:a5:1c:b3:af:33:2c:98:aa:c3:83:d1:d3: 12:22:e5:10:98:92:cc:be:64:f2:cc:c5:01:ff:d3:76:ba:14: 39:83:5e:26:14:a2:5f:08:64:93:14:34:62:0c:2e:ca:a8:6b: 94:cb:13:7e:01:f6:f2:ba:64:99:be:b1:2e:71:bc:23:3e:c1: a4:b7:3f:71:3c:72:fd:e0:67:45:95:c0:f4:37:df:8f:e4:f4: ee:a2:a9:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0HspUlJSe/+UV2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk NzRiMTYyZGMtOGFjZS00ZTUzLTgyODUtOGM1M2FhOTVhN2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9WjQn2UmaeUg0hdrGFUfQL/Y3dtmyluvsLc 5Qy2gb6fcupGo4x4HZVsNOcNGZ8RLNkakIU/BsCJSe7TpWIwodZYgYqwe2MKGl6c 3b7xXBC0nBVyNCY0e7/G7QXeJVj1XzLbGh3bo3WOZUQps3iOvKnBv6FJF7A9JGLE b6JLHcl/XM1dHLEe1N6gh1TB9Lhh0b41hgeco3zVzPDdDadPtgin/LUcG4Wiuvkv 7q63lTToUN6yk7eIbWbFkAc6VwRfbEMbFg8jbESVDpxtYNN+qDLuutJ7lAP+8O5d j5YifkXA4m7vP5L2XPQTnuAD37pDLd6W0enXFBLtn3frR55DQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHnmghjfKqW0L2LIH5cxkC0DnJy5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzM4NjI1YzMtMzkxMi0z YmZhLWE3NjMtOTkwMmJmMmU2YjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8uVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuJzPbmWHUokj5k9KZHBQVI9ILICM9uv2a1Fr4B7ZxnB+v3pKl0QpAt J/u93nXg5gwvX6UUJmuWjERGBdq8+37G3agupFCUqlndIS+OUw22IqlQCrniq3wn eP58j5D3Gn6Sz/fUC2OKOguxMrcuifbpahIeGg+eYGa3fQ81PPDQNub8MCfKph4l nNvDY8h0DTVAr9Iqd9/Tc7guPvtx/fz0vWFmulKIeaUcs68zLJiqw4PR0xIi5RCY ksy+ZPLMxQH/03a6FDmDXiYUol8IZJMUNGIMLsqoa5TLE34B9vK6ZJm+sS5xvCM+ waS3P3E8cv3gZ0WVwPQ334/k9O6iqZQ= -----END CERTIFICATE-----Generated at Sun Jun 29 13:44:34 2025 by rpki-client