$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e1df322-f179-3816-bf6c-ad0552d1d866.roa File: 9e1df322-f179-3816-bf6c-ad0552d1d866.roa (raw, json) Hash identifier: 0PLVOYwauEWCjzvcVCotOGj8owIj9YjC/EHWGfoqXpY= Subject key identifier: 71:C5:9E:C3:13:2D:D6:4B:FC:E9:33:0E:62:A6:DA:EB:75:D8:0F:CE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A51D07DBF405EEB6EEAE71700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e1df322-f179-3816-bf6c-ad0552d1d866.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 7713 IP address blocks: 23.212.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:7d:bf:40:5e:eb:6e:ea:e7:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=4f144fd7-2263-44be-a31e-7c1edf1a074a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a6:bd:3e:23:7c:00:a6:02:ed:09:75:5a:d3: d5:f1:25:a8:c5:f4:9f:ad:22:86:cc:6c:4d:91:48: 33:64:54:7a:dd:b3:62:6f:d1:50:bd:61:ac:4f:82: 3f:44:d9:41:76:ac:1e:4b:e0:00:32:44:9e:78:4a: 85:71:17:35:c2:d6:32:85:50:09:a7:c9:2b:fa:2c: f4:93:3f:90:e4:70:95:36:b3:72:08:d6:65:7c:d7: d3:97:ee:5e:e7:7f:1b:dc:2a:8b:3f:a6:e0:7f:55: c3:ec:7d:09:bb:15:18:71:73:41:21:26:27:52:25: 1c:69:10:52:d4:e1:6f:b4:3f:8a:84:95:87:75:7c: 14:23:27:aa:a6:fe:03:e3:a2:a3:e2:73:23:ad:5f: 89:60:8a:b6:b6:a9:53:28:55:0f:eb:28:bf:88:76: 5c:40:b2:b0:83:dc:40:32:c9:a7:bc:e8:54:d2:a1: 1f:6e:d7:5a:fd:a3:36:d1:a3:68:d3:c4:c1:f1:b3: 01:32:a8:23:05:7a:cb:8d:1b:61:e5:47:4c:05:6c: bf:c3:aa:d2:67:b3:eb:c0:7c:6e:36:64:cc:9e:3d: cc:47:39:30:f5:26:72:82:7e:c1:da:c3:fe:db:44: 91:84:9d:35:64:19:86:1b:24:91:db:43:67:19:09: 4c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C5:9E:C3:13:2D:D6:4B:FC:E9:33:0E:62:A6:DA:EB:75:D8:0F:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e1df322-f179-3816-bf6c-ad0552d1d866.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:1a:27:75:aa:9a:d1:1b:c0:8e:4c:22:05:83:cb:9a:ee:1b: 0a:bd:b6:b9:ec:6a:67:b3:7b:63:96:32:0e:9b:3e:0f:7d:2e: 22:0d:c2:f2:e3:b0:e8:9b:8f:de:c0:a6:0f:6f:fc:d2:ca:c4: ee:82:65:c0:ea:34:01:ec:d7:de:82:0a:00:c7:38:17:82:08: 6a:e5:5a:d8:54:37:2f:f8:9a:c8:d2:ed:e9:6f:65:3b:cd:16: 6d:10:af:ef:bf:c4:08:bc:3f:31:56:cf:1d:73:bb:3f:31:21: cd:2d:04:8f:b8:58:f2:9d:ac:05:29:02:fb:af:bf:fb:c7:03: 99:67:80:8f:a1:61:b2:ed:4c:3a:b7:01:d1:50:ba:ed:de:c0: 7e:cc:3a:45:2f:77:75:45:c5:2f:29:aa:4e:41:7b:c5:40:ee: 5b:a9:b1:69:7e:64:8a:5d:2d:62:41:8c:82:af:86:0d:ea:d6: 16:6b:91:17:2d:6e:74:ea:f5:95:92:39:57:46:c4:29:3f:91: e5:c9:72:29:50:4e:07:fc:d1:47:34:c3:f8:96:24:6e:c8:06: 73:da:51:e5:39:da:69:d1:32:99:e0:1c:f8:7c:8f:e8:16:2e: 60:01:ae:a9:1d:ff:48:bd:68:0a:58:11:21:17:4e:28:23:e4: df:21:ce:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0H2/QF7rburnFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk NGYxNDRmZDctMjI2My00NGJlLWEzMWUtN2MxZWRmMWEwNzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqa9PiN8AKYC7Ql1WtPV8SWoxfSfrSKGzGxN kUgzZFR63bNib9FQvWGsT4I/RNlBdqweS+AAMkSeeEqFcRc1wtYyhVAJp8kr+iz0 kz+Q5HCVNrNyCNZlfNfTl+5e538b3CqLP6bgf1XD7H0JuxUYcXNBISYnUiUcaRBS 1OFvtD+KhJWHdXwUIyeqpv4D46Kj4nMjrV+JYIq2tqlTKFUP6yi/iHZcQLKwg9xA MsmnvOhU0qEfbtda/aM20aNo08TB8bMBMqgjBXrLjRth5UdMBWy/w6rSZ7PrwHxu NmTMnj3MRzkw9SZygn7B2sP+20SRhJ01ZBmGGySR20NnGQlMBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHFnsMTLdZL/OkzDmKm2ut12A/OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWUxZGYzMjItZjE3OS0z ODE2LWJmNmMtYWQwNTUyZDFkODY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9RmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYaJ3WqmtEbwI5MIgWDy5ruGwq9trnsameze2OWMg6bPg99LiINwvLj sOibj97Apg9v/NLKxO6CZcDqNAHs196CCgDHOBeCCGrlWthUNy/4msjS7elvZTvN Fm0Qr++/xAi8PzFWzx1zuz8xIc0tBI+4WPKdrAUpAvuvv/vHA5lngI+hYbLtTDq3 AdFQuu3ewH7MOkUvd3VFxS8pqk5Be8VA7lupsWl+ZIpdLWJBjIKvhg3q1hZrkRct bnTq9ZWSOVdGxCk/keXJcilQTgf80Uc0w/iWJG7IBnPaUeU52mnRMpngHPh8j+gW LmABrqkd/0i9aApYESEXTigj5N8hzu8= -----END CERTIFICATE-----Generated at Sun Jun 29 13:58:59 2025 by rpki-client