$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8614b32a-2b24-3288-aa66-942237dbf140.roa File: 8614b32a-2b24-3288-aa66-942237dbf140.roa (raw, json) Hash identifier: b0EKeDnp8UifUwqLuogLQKMP2Q9YPvwDsPnOODaoEV4= Subject key identifier: AF:AD:A5:5B:72:D6:4B:61:11:64:BE:DE:B1:EF:C1:26:76:CA:68:8E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4F05E059293BE3770A3F8900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8614b32a-2b24-3288-aa66-942237dbf140.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 16625 IP address blocks: 23.198.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:e0:59:29:3b:e3:77:0a:3f:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=1a3e6aa4-16e5-489d-b567-ab44dd9b6fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9c:cf:a5:0f:7c:1a:05:39:c5:a8:d7:84:e9: 3b:6c:3c:ac:ee:8e:0c:d3:da:a6:cb:f2:eb:86:56: ad:90:e8:63:be:13:13:63:8f:86:a0:30:14:7d:c4: 84:ae:af:1e:a0:66:1f:8d:5c:49:e7:80:44:19:b6: 84:6f:9b:61:3c:ac:0a:44:cf:57:6b:4b:a2:ca:00: 72:ac:6a:fc:8c:51:ff:0e:13:58:c4:bf:d0:ef:16: 44:54:97:06:99:e0:41:8e:29:13:9a:54:44:32:05: 9b:48:43:1c:93:76:3b:c0:86:32:75:37:df:ef:4a: 95:7a:32:79:af:7b:16:18:be:76:9a:b5:90:18:34: a8:b2:14:10:d3:96:06:d9:69:d2:82:0c:b6:b9:b1: 93:e3:ee:03:78:45:b4:49:cb:88:ac:e3:f2:c9:bb: 29:46:04:e8:94:bb:93:51:54:b8:b3:d8:c1:14:75: c7:ff:1f:ce:9d:b3:1b:7c:6f:8d:f8:83:9f:57:61: 3b:4f:70:4f:1a:67:9b:98:2b:98:73:10:8b:18:e2: f1:76:ac:78:a0:e0:c0:ea:a6:34:8a:2f:e7:d3:2d: 4a:4a:96:7a:0b:ed:18:1a:d1:e9:a6:40:e8:43:fc: f9:4d:f3:79:9e:0f:66:1e:ec:23:d5:b2:ae:35:d5: cc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AD:A5:5B:72:D6:4B:61:11:64:BE:DE:B1:EF:C1:26:76:CA:68:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8614b32a-2b24-3288-aa66-942237dbf140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.198.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:56:d6:6e:13:0f:d3:78:42:31:16:96:5f:e3:04:3e:1e:48: 8b:08:5d:7f:4f:81:18:92:96:dc:91:d2:1e:47:e6:73:ad:45: 6a:37:70:9e:03:84:9c:d0:3c:b3:c8:a2:07:46:fa:4a:a2:96: b5:d5:d0:b0:22:10:74:40:94:99:5f:f4:b9:43:64:2a:bf:27: 3e:26:05:df:4b:83:27:12:79:46:53:57:e8:0e:d9:86:9c:b8: f5:b9:42:6f:5f:03:e1:96:06:a4:65:90:a6:35:3d:d4:de:11: 29:08:ef:8a:14:ab:e1:da:6b:ee:96:94:9e:5c:27:a0:9a:9a: 4e:d4:7a:17:4a:b1:9a:9c:67:c8:1b:af:fb:cd:79:7e:36:6f: 10:83:a3:8a:72:0b:4c:af:f7:84:cd:24:01:32:40:82:2f:b9: 40:15:9f:37:c6:db:7a:8a:c5:26:d5:d0:bd:f3:a9:33:ab:aa: 18:bc:48:3c:61:7c:b9:c7:a3:47:c5:1d:aa:62:6e:29:bd:2f: 70:9d:52:25:10:28:44:51:7b:15:1e:ba:8c:2e:3c:c1:e2:ce: 47:ad:a5:95:7c:41:bd:09:b5:2b:8c:12:01:9e:1d:98:d6:0e: 30:07:ac:fc:79:01:f8:41:13:ed:16:7a:04:a5:0d:e4:2b:ac: 86:3d:1f:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBeBZKTvjdwo/iQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk MWEzZTZhYTQtMTZlNS00ODlkLWI1NjctYWI0NGRkOWI2ZmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpzPpQ98GgU5xajXhOk7bDys7o4M09qmy/Lr hlatkOhjvhMTY4+GoDAUfcSErq8eoGYfjVxJ54BEGbaEb5thPKwKRM9Xa0uiygBy rGr8jFH/DhNYxL/Q7xZEVJcGmeBBjikTmlREMgWbSEMck3Y7wIYydTff70qVejJ5 r3sWGL52mrWQGDSoshQQ05YG2WnSggy2ubGT4+4DeEW0ScuIrOPyybspRgTolLuT UVS4s9jBFHXH/x/OnbMbfG+N+IOfV2E7T3BPGmebmCuYcxCLGOLxdqx4oODA6qY0 ii/n0y1KSpZ6C+0YGtHppkDoQ/z5TfN5ng9mHuwj1bKuNdXM0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+tpVty1kthEWS+3rHvwSZ2ymiOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODYxNGIzMmEtMmIyNC0z Mjg4LWFhNjYtOTQyMjM3ZGJmMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8bQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRW1m4TD9N4QjEWll/jBD4eSIsIXX9PgRiSltyR0h5H5nOtRWo3cJ4D hJzQPLPIogdG+kqilrXV0LAiEHRAlJlf9LlDZCq/Jz4mBd9LgycSeUZTV+gO2Yac uPW5Qm9fA+GWBqRlkKY1PdTeESkI74oUq+Haa+6WlJ5cJ6Camk7UehdKsZqcZ8gb r/vNeX42bxCDo4pyC0yv94TNJAEyQIIvuUAVnzfG23qKxSbV0L3zqTOrqhi8SDxh fLnHo0fFHapibim9L3CdUiUQKERRexUeuowuPMHizketpZV8Qb0JtSuMEgGeHZjW DjAHrPx5AfhBE+0WegSlDeQrrIY9H1I= -----END CERTIFICATE-----Generated at Sun Jun 29 17:46:47 2025 by rpki-client