$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ad4c2a24-829b-3fba-83b8-442aa67d9b8b.roa File: ad4c2a24-829b-3fba-83b8-442aa67d9b8b.roa (raw, json) Hash identifier: stEkvR79k2k6ZQ8wm/NhgRuCx5xz7vBJha1eKbTDOSk= Subject key identifier: 1A:5E:97:3B:E5:99:FC:ED:FB:40:CA:08:A3:41:EE:C2:CA:6D:63:BC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A51D079C0D0CEC6A59904F100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ad4c2a24-829b-3fba-83b8-442aa67d9b8b.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.210.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:79:c0:d0:ce:c6:a5:99:04:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=201e69cc-8ca4-4f2a-89c7-e25b87e1de84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:85:a7:69:62:e1:22:94:53:90:cd:4c:aa:e3: 64:60:67:a0:e0:d4:da:27:e2:ec:14:70:b9:bb:c4: 96:9d:bf:e7:16:14:0e:51:64:d7:50:50:a7:62:a7: 2a:3e:99:79:e4:49:04:53:58:c7:38:c1:fc:fe:42: 64:a9:f0:6e:c5:af:2b:02:28:14:44:bc:5f:ee:d3: d9:31:6e:83:60:a6:32:c2:c0:a1:e6:5c:3a:ee:5d: e1:87:7a:ea:6c:a6:14:c2:b7:e9:ab:7d:af:b1:04: 3b:79:04:3d:4e:de:5f:a0:c5:0f:e6:c8:a3:c4:55: 96:d6:4b:c1:95:85:13:ee:fb:aa:43:7e:88:21:df: b4:83:b6:c6:d9:f8:67:6b:0c:16:55:b4:31:9d:1f: cb:ca:87:8e:df:35:c3:90:a7:d1:90:68:09:25:4b: 25:36:7a:9d:1f:22:55:fb:76:2b:50:0e:1e:7b:1a: 0c:79:58:06:09:c5:1e:cb:7d:2e:55:34:c5:f6:08: 86:86:73:89:40:73:2e:85:ea:1a:38:45:fb:5e:d8: e5:6d:9b:7c:34:d8:92:ae:b0:c6:cc:c7:18:79:3d: 4b:42:38:13:ea:46:9a:58:a6:48:07:0f:a4:fd:74: 88:cc:11:9b:c9:9d:04:e9:e9:24:35:c2:53:09:34: 57:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5E:97:3B:E5:99:FC:ED:FB:40:CA:08:A3:41:EE:C2:CA:6D:63:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ad4c2a24-829b-3fba-83b8-442aa67d9b8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:64:d5:69:ee:b2:3f:1c:26:11:be:fe:23:30:e4:0f:6b:83: 4d:8a:d9:67:2c:0c:f1:c1:95:7d:c5:17:93:4d:6f:be:e3:c9: 06:5a:72:b2:99:fb:75:e6:d7:8c:b2:1a:b9:06:38:59:94:53: 47:0c:2d:27:d0:4d:2d:dd:58:53:41:c1:70:7e:4f:4e:6f:da: b3:25:36:d8:99:50:f0:8c:0f:8c:57:14:59:12:5d:49:ca:38: 74:6e:b3:d8:d6:2f:b7:59:32:fc:8b:8b:4b:4a:b8:05:85:5c: a6:dc:b8:45:d3:02:4f:7f:14:d1:23:d0:47:12:9b:aa:13:72: 13:06:77:1e:1e:d3:10:4c:79:51:b4:39:32:c5:99:95:b2:fe: 16:96:f8:40:07:40:0f:83:d8:7f:0e:4b:aa:93:60:d7:2c:60: 09:e1:4e:de:1c:f0:ed:a0:74:22:a5:ea:07:d2:51:d1:46:fc: 03:c2:b1:1d:45:9a:d6:91:e5:ba:f0:8a:b1:40:8f:fa:48:8e: 4a:0e:ae:b6:7c:11:ee:75:ab:80:1d:f8:7b:50:6a:d7:a7:a4: 1e:47:b4:f6:a8:8e:c8:99:83:46:fb:c3:79:1c:88:d3:85:1c: b2:be:12:f0:b9:b0:d2:55:09:ac:d3:1b:01:7d:33:4b:72:8e: e2:6e:20:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0HnA0M7GpZkE8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk MjAxZTY5Y2MtOGNhNC00ZjJhLTg5YzctZTI1Yjg3ZTFkZTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYWnaWLhIpRTkM1MquNkYGeg4NTaJ+LsFHC5 u8SWnb/nFhQOUWTXUFCnYqcqPpl55EkEU1jHOMH8/kJkqfBuxa8rAigURLxf7tPZ MW6DYKYywsCh5lw67l3hh3rqbKYUwrfpq32vsQQ7eQQ9Tt5foMUP5sijxFWW1kvB lYUT7vuqQ36IId+0g7bG2fhnawwWVbQxnR/LyoeO3zXDkKfRkGgJJUslNnqdHyJV +3YrUA4eexoMeVgGCcUey30uVTTF9giGhnOJQHMuheoaOEX7XtjlbZt8NNiSrrDG zMcYeT1LQjgT6kaaWKZIBw+k/XSIzBGbyZ0E6ekkNcJTCTRXpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpelzvlmfzt+0DKCKNB7sLKbWO8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWQ0YzJhMjQtODI5Yi0z ZmJhLTgzYjgtNDQyYWE2N2Q5YjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9I4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdk1Wnusj8cJhG+/iMw5A9rg02K2WcsDPHBlX3FF5NNb77jyQZacrKZ +3Xm14yyGrkGOFmUU0cMLSfQTS3dWFNBwXB+T05v2rMlNtiZUPCMD4xXFFkSXUnK OHRus9jWL7dZMvyLi0tKuAWFXKbcuEXTAk9/FNEj0EcSm6oTchMGdx4e0xBMeVG0 OTLFmZWy/haW+EAHQA+D2H8OS6qTYNcsYAnhTt4c8O2gdCKl6gfSUdFG/APCsR1F mtaR5brwirFAj/pIjkoOrrZ8Ee51q4Ad+HtQatenpB5HtPaojsiZg0b7w3kciNOF HLK+EvC5sNJVCazTGwF9M0tyjuJuICA= -----END CERTIFICATE-----Generated at Sun Jun 29 19:06:20 2025 by rpki-client