$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b906ddb-df5a-3645-9396-bc2c41ac5c6e.roa File: 7b906ddb-df5a-3645-9396-bc2c41ac5c6e.roa (raw, json) Hash identifier: 2v9ftllKBICRDoEjUsO5wANLj9pqrOxAH1LQEfl84JI= Subject key identifier: 76:71:DA:01:B6:87:3C:35:3E:69:40:3A:A8:A3:65:51:17:BB:BA:90 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AECC3553EADF03582C339D280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b906ddb-df5a-3645-9396-bc2c41ac5c6e.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.223.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:55:3e:ad:f0:35:82:c3:39:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=c589ebed-5051-4165-bcc8-e012da19b392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4e:d5:ec:6e:a1:d5:ac:9b:0a:4e:fc:c6:dc: db:dc:b0:83:d7:b8:28:4e:89:ba:08:d5:67:6f:9f: 62:b5:21:95:44:7b:a8:54:dc:ff:a4:f7:33:36:e9: 24:b5:d9:a7:cb:15:33:a8:f8:c1:32:a2:f5:0e:1a: 9f:37:93:3c:80:46:d6:7a:94:d6:65:9e:ea:b8:b2: fc:16:a6:b3:75:b1:dd:12:55:35:0f:9d:ae:6d:da: 5a:ac:fa:8b:32:e3:3a:24:17:ca:96:ef:73:d4:48: fc:0e:bb:0d:70:81:bf:18:14:51:38:44:08:52:e4: 45:cb:df:74:86:0c:44:4e:92:63:bd:b9:75:3b:c7: 12:ec:83:d8:2e:10:59:bd:e5:4f:b1:a8:c1:dc:aa: 72:41:c0:2a:28:f3:60:7b:d4:ce:f6:77:18:16:d6: 92:ee:50:ef:65:96:ab:cc:69:85:2f:83:ce:1b:cc: ed:f0:db:26:4f:b2:d6:b9:ff:20:3e:00:54:86:eb: ab:84:b6:89:c1:28:05:09:f3:dd:2f:fa:59:2a:22: bb:89:b2:62:48:de:95:ca:c9:9b:98:04:77:07:53: 14:e4:79:7c:60:e2:66:8a:ee:41:7c:8b:15:7c:d7: a9:4e:69:53:58:66:1d:ff:87:d1:d0:67:c0:2a:c2: b3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:71:DA:01:B6:87:3C:35:3E:69:40:3A:A8:A3:65:51:17:BB:BA:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b906ddb-df5a-3645-9396-bc2c41ac5c6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:0b:64:80:a1:c6:3d:31:3a:25:7f:09:13:7b:0a:70:e4:16: 6b:41:86:2b:4d:76:29:df:57:88:ba:d1:f4:2b:e2:f8:60:c2: 09:e4:43:d0:a2:1a:06:fb:e2:03:0a:e6:05:9d:97:ea:54:a2: 8a:db:71:67:60:9f:e0:ea:67:25:f5:41:9c:26:6f:4c:07:a9: b0:74:c6:39:31:34:08:e0:64:c9:ed:20:ea:f4:23:d4:7a:0a: cd:fd:2a:d6:ab:27:9a:e9:d1:96:5e:5d:79:e9:41:9c:95:af: cd:39:05:66:5b:c5:16:29:42:f9:d9:e7:d5:c1:9f:d4:33:38: 5c:a2:ac:94:a8:b6:52:14:b8:6b:2c:a0:1d:3a:b5:08:e0:aa: e2:ef:56:25:7f:2c:11:69:b0:7a:a4:e2:1c:66:63:89:09:3e: e1:54:af:de:a0:df:15:57:48:ad:7f:52:59:dc:3e:05:d6:f0: c7:90:1a:ce:52:79:6b:94:dd:f1:aa:75:5f:f5:78:d1:0a:7b: b9:77:81:25:0b:ce:bc:e3:3e:ca:3d:66:eb:72:34:ef:cc:0a: 76:07:f3:ce:95:eb:73:d9:5c:e0:2b:42:42:aa:0b:5f:95:4f: da:c2:a0:af:a8:fb:f6:c8:9c:75:2f:11:d1:a3:8d:ba:1a:ff: 71:0e:26:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw1U+rfA1gsM50oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YzU4OWViZWQtNTA1MS00MTY1LWJjYzgtZTAxMmRhMTliMzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk07V7G6h1aybCk78xtzb3LCD17goTom6CNVn b59itSGVRHuoVNz/pPczNukktdmnyxUzqPjBMqL1DhqfN5M8gEbWepTWZZ7quLL8 FqazdbHdElU1D52ubdparPqLMuM6JBfKlu9z1Ej8DrsNcIG/GBRROEQIUuRFy990 hgxETpJjvbl1O8cS7IPYLhBZveVPsajB3KpyQcAqKPNge9TO9ncYFtaS7lDvZZar zGmFL4POG8zt8NsmT7LWuf8gPgBUhuurhLaJwSgFCfPdL/pZKiK7ibJiSN6Vysmb mAR3B1MU5Hl8YOJmiu5BfIsVfNepTmlTWGYd/4fR0GfAKsKzRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZx2gG2hzw1PmlAOqijZVEXu7qQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2I5MDZkZGItZGY1YS0z NjQ1LTkzOTYtYmMyYzQxYWM1YzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9+WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABILZIChxj0xOiV/CRN7CnDkFmtBhitNdinfV4i60fQr4vhgwgnkQ9Ci Ggb74gMK5gWdl+pUoorbcWdgn+DqZyX1QZwmb0wHqbB0xjkxNAjgZMntIOr0I9R6 Cs39KtarJ5rp0ZZeXXnpQZyVr805BWZbxRYpQvnZ59XBn9QzOFyirJSotlIUuGss oB06tQjgquLvViV/LBFpsHqk4hxmY4kJPuFUr96g3xVXSK1/UlncPgXW8MeQGs5S eWuU3fGqdV/1eNEKe7l3gSULzrzjPso9ZutyNO/MCnYH886V63PZXOArQkKqC1+V T9rCoK+o+/bInHUvEdGjjboa/3EOJkM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:47:45 2025 by rpki-client