$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fa595df-af0b-3c4a-8e30-b083d8befd01.roa File: 9fa595df-af0b-3c4a-8e30-b083d8befd01.roa (raw, json) Hash identifier: DMi8ark1aTskDuvO1t/1EKtN2Q0UFI+LFRWok5qFKfs= Subject key identifier: 25:FA:9C:76:54:BA:58:99:54:F3:3D:40:16:5F:F8:BA:10:4E:08:4B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4F05E076FB684FA1E1B34900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fa595df-af0b-3c4a-8e30-b083d8befd01.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 12222 IP address blocks: 23.200.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:e0:76:fb:68:4f:a1:e1:b3:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=f1c9ebad-70ff-4a0e-8616-5465976b169b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:80:a0:a0:a2:65:62:23:83:c3:7d:eb:af:0b: 56:8a:46:45:93:c3:be:70:25:dd:c8:a9:96:52:9d: 68:63:2e:56:4e:14:17:3b:ca:36:96:7b:22:09:0c: 26:5b:13:37:48:54:0d:25:24:bb:b7:b3:8e:96:82: 39:d0:73:db:07:a1:0b:4a:4a:2c:14:3b:48:cc:73: da:90:d3:3e:3c:fc:db:9f:b3:83:fe:00:0c:cd:d5: cb:ba:3c:23:7e:f8:0b:5a:5c:22:c5:30:d7:0c:fc: cc:2f:3f:78:c3:2a:5f:e8:70:d6:8a:63:0b:8e:87: 62:a9:89:cc:3e:8a:9e:eb:6c:ed:fc:f6:cb:e8:64: 0b:0b:ae:77:8f:44:31:f9:c9:50:86:a2:9f:2d:d4: b1:f3:36:a1:e1:04:4c:ff:dc:54:64:e6:de:6b:a9: b4:8c:ad:38:8e:08:8d:0d:9c:59:19:5f:a9:e1:72: 08:f5:bc:06:6b:53:6d:e0:14:4c:2b:71:31:88:b7: 5a:ee:bc:d3:38:20:8b:97:2b:19:21:17:98:9a:61: d2:ad:6f:b2:d2:3d:4f:e9:d0:21:36:69:03:d6:18: e6:8e:9e:e0:81:e1:d0:16:52:21:7c:e2:96:1c:19: f9:de:c5:c7:f5:91:0f:b9:78:e5:c8:7e:85:ba:79: 38:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FA:9C:76:54:BA:58:99:54:F3:3D:40:16:5F:F8:BA:10:4E:08:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fa595df-af0b-3c4a-8e30-b083d8befd01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:7f:fe:98:c2:e8:8f:54:67:d0:7b:ef:a7:ad:d0:31:e8:27: d4:c5:bb:76:6d:c1:89:c4:31:2a:6d:1e:05:76:5b:05:94:09: 90:d1:46:e4:ac:ef:25:8a:81:64:dc:b8:66:b7:c8:1b:a5:1d: 00:8e:0a:20:0d:b4:43:fa:0b:2a:a2:2e:6d:03:f6:c8:c8:dd: b6:32:29:ac:a6:ba:58:78:dc:48:f1:ce:90:28:ed:cd:16:a8: 58:da:c6:3f:3d:61:29:3e:8a:83:76:5c:07:c6:d3:3f:ad:9d: 9e:80:6b:e7:e7:a6:ae:8b:3e:a1:a4:2e:d1:da:a0:3b:8a:a8: 6a:70:70:df:77:35:47:f7:6a:cb:e7:89:36:26:07:62:76:a1: ce:57:30:9e:b5:54:85:85:38:46:43:1f:54:64:d8:cc:63:a0: 8e:62:d1:72:5f:74:08:d3:3d:a6:86:b3:cf:45:84:1e:69:30: 88:9c:74:c5:fc:f2:e3:f1:d5:97:98:5f:f3:58:e4:31:d2:05: 55:ad:e9:79:f4:34:d8:3a:c6:93:6b:ee:45:42:08:81:04:f2: 51:b5:46:30:08:be:a1:b1:23:d0:4e:88:37:70:40:83:96:89: 2a:54:16:69:e6:de:3a:81:2a:c6:be:b2:05:8d:87:0d:1d:1b: 8e:49:86:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBeB2+2hPoeGzSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk ZjFjOWViYWQtNzBmZi00YTBlLTg2MTYtNTQ2NTk3NmIxNjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsICgoKJlYiODw33rrwtWikZFk8O+cCXdyKmW Up1oYy5WThQXO8o2lnsiCQwmWxM3SFQNJSS7t7OOloI50HPbB6ELSkosFDtIzHPa kNM+PPzbn7OD/gAMzdXLujwjfvgLWlwixTDXDPzMLz94wypf6HDWimMLjodiqYnM Poqe62zt/PbL6GQLC653j0Qx+clQhqKfLdSx8zah4QRM/9xUZObea6m0jK04jgiN DZxZGV+p4XII9bwGa1Nt4BRMK3ExiLda7rzTOCCLlysZIReYmmHSrW+y0j1P6dAh NmkD1hjmjp7ggeHQFlIhfOKWHBn53sXH9ZEPuXjlyH6Funk4/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCX6nHZUuliZVPM9QBZf+LoQTghLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWZhNTk1ZGYtYWYwYi0z YzRhLThlMzAtYjA4M2Q4YmVmZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8gWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFV//pjC6I9UZ9B776et0DHoJ9TFu3ZtwYnEMSptHgV2WwWUCZDRRuSs 7yWKgWTcuGa3yBulHQCOCiANtEP6CyqiLm0D9sjI3bYyKaymulh43EjxzpAo7c0W qFjaxj89YSk+ioN2XAfG0z+tnZ6Aa+fnpq6LPqGkLtHaoDuKqGpwcN93NUf3asvn iTYmB2J2oc5XMJ61VIWFOEZDH1Rk2MxjoI5i0XJfdAjTPaaGs89FhB5pMIicdMX8 8uPx1ZeYX/NY5DHSBVWt6Xn0NNg6xpNr7kVCCIEE8lG1RjAIvqGxI9BOiDdwQIOW iSpUFmnm3jqBKsa+sgWNhw0dG45Jhos= -----END CERTIFICATE-----Generated at Sun Jun 29 13:46:10 2025 by rpki-client