$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/866f23d3-fc05-3d18-b5c6-e27b5a2792e4.roa File: 866f23d3-fc05-3d18-b5c6-e27b5a2792e4.roa (raw, json) Hash identifier: RL3sJona59tXfXTeWz6D9vTrF60ONrMasVUEtnSsDlY= Subject key identifier: 21:C6:27:BF:46:43:78:4C:77:CA:2A:79:E1:10:B9:6E:8A:E4:16:BD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A51D077C81F333FBA3F49F460 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/866f23d3-fc05-3d18-b5c6-e27b5a2792e4.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 16625 IP address blocks: 23.204.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:77:c8:1f:33:3f:ba:3f:49:f4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=7d09186c-82cd-47d6-b09a-84badd6569b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:56:76:42:ed:98:64:99:24:6c:03:a2:ed:08: 11:c7:4a:5d:4c:7f:e7:94:2a:1f:b0:29:3c:77:4a: c4:6f:e0:21:c1:3a:6b:bb:df:fa:f7:a5:30:65:9f: a0:b9:f3:51:c7:b9:e6:e0:4b:d6:6b:d0:43:6c:37: 1f:9d:67:04:a8:e8:90:1c:80:5a:c6:8b:6b:c5:93: 08:0f:b9:2c:d2:04:a6:7f:2f:80:a0:cc:52:2a:22: 7d:38:ac:03:64:47:cb:62:5b:50:7f:a3:b8:98:9f: 20:9d:f2:19:cc:6f:a0:79:e2:b1:ce:c8:d9:bd:6e: 09:47:8f:ea:a6:9b:a5:15:03:71:91:64:cc:b9:ac: 6e:b2:a6:8f:c2:3a:ce:ca:85:02:f7:85:f6:42:99: 66:c7:c8:86:cc:70:f6:be:da:4f:3d:0f:a3:8d:4c: 3a:75:05:25:c6:a0:14:63:9e:f7:87:f3:83:87:a2: b5:3d:21:e3:e5:6e:a9:d2:d0:14:55:e9:ad:2c:9f: 2b:0c:da:61:30:1b:01:f2:c6:36:18:3c:e0:76:a0: da:4e:e9:d8:31:23:0a:fa:74:e2:db:c9:86:ac:55: b7:de:0e:0d:bb:93:52:99:7f:b7:a7:63:d5:a3:ce: 4a:b6:c5:6b:3e:5d:b4:e9:5e:17:e3:9f:30:b7:85: f6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C6:27:BF:46:43:78:4C:77:CA:2A:79:E1:10:B9:6E:8A:E4:16:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/866f23d3-fc05-3d18-b5c6-e27b5a2792e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:c9:21:c2:5c:e1:16:72:57:54:13:62:4b:f0:7c:c1:fe:be: df:fc:37:e9:4c:4f:99:e1:d6:7e:91:89:9a:58:b4:c1:34:62: 0b:b1:d1:fa:f9:73:9d:bf:1e:be:76:ce:2b:1c:3f:9f:15:70: 15:17:99:7c:c9:c4:5d:2e:87:82:3d:a6:51:bf:dc:e9:ec:8f: 06:65:92:88:49:70:2e:09:65:09:c7:ac:11:c0:71:40:ac:be: 24:c4:50:14:ef:5c:ec:1b:c3:da:84:ce:e3:86:42:54:9c:c3: 5d:10:72:bd:d8:ec:cf:ec:c0:82:fd:20:62:4c:d1:e4:0a:db: 3a:98:05:f8:86:6f:61:f1:f4:e9:93:15:8e:3b:41:37:31:10: 88:fc:18:35:be:27:b8:52:64:06:f0:a1:3b:8c:20:c2:ed:8e: 4e:ca:a6:80:78:31:46:d0:73:d2:78:3a:9d:8e:39:aa:4f:13: 70:ca:82:e4:cf:25:bb:5b:cc:cb:76:aa:65:9d:5b:9e:ee:87: a7:9d:a9:80:1d:2c:eb:67:0d:4a:87:3d:ef:b3:8d:3e:4d:81: 3f:19:98:78:af:17:e9:c6:31:5c:cb:f6:21:0e:eb:26:8a:8f: 70:53:79:06:32:b2:e3:e1:2c:d6:e8:95:4c:11:b5:04:69:c2: 1b:8a:6f:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0HfIHzM/uj9J9GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk N2QwOTE4NmMtODJjZC00N2Q2LWIwOWEtODRiYWRkNjU2OWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVZ2Qu2YZJkkbAOi7QgRx0pdTH/nlCofsCk8 d0rEb+AhwTpru9/696UwZZ+gufNRx7nm4EvWa9BDbDcfnWcEqOiQHIBaxotrxZMI D7ks0gSmfy+AoMxSKiJ9OKwDZEfLYltQf6O4mJ8gnfIZzG+geeKxzsjZvW4JR4/q ppulFQNxkWTMuaxusqaPwjrOyoUC94X2Qplmx8iGzHD2vtpPPQ+jjUw6dQUlxqAU Y573h/ODh6K1PSHj5W6p0tAUVemtLJ8rDNphMBsB8sY2GDzgdqDaTunYMSMK+nTi 28mGrFW33g4Nu5NSmX+3p2PVo85KtsVrPl206V4X458wt4X2IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHGJ79GQ3hMd8oqeeEQuW6K5Ba9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODY2ZjIzZDMtZmMwNS0z ZDE4LWI1YzYtZTI3YjVhMjc5MmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8yGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnJIcJc4RZyV1QTYkvwfMH+vt/8N+lMT5nh1n6RiZpYtME0Ygux0fr5 c52/Hr52ziscP58VcBUXmXzJxF0uh4I9plG/3OnsjwZlkohJcC4JZQnHrBHAcUCs viTEUBTvXOwbw9qEzuOGQlScw10Qcr3Y7M/swIL9IGJM0eQK2zqYBfiGb2Hx9OmT FY47QTcxEIj8GDW+J7hSZAbwoTuMIMLtjk7KpoB4MUbQc9J4Op2OOapPE3DKguTP JbtbzMt2qmWdW57uh6edqYAdLOtnDUqHPe+zjT5NgT8ZmHivF+nGMVzL9iEO6yaK j3BTeQYysuPhLNbolUwRtQRpwhuKb+4= -----END CERTIFICATE-----Generated at Sun Jun 29 13:15:35 2025 by rpki-client