$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b61ca34a-b134-3aea-85e0-4dc95e34af1c.roa File: b61ca34a-b134-3aea-85e0-4dc95e34af1c.roa (raw, json) Hash identifier: lAD2ZQz853rKLE433zn9HyT2vdqflrS7UyCZc1Y1FX0= Subject key identifier: E6:38:FC:63:C1:70:1C:75:B3:3E:92:C6:FC:27:66:0E:C8:C7:31:D8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A46A5B2419F3C10A51650FE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b61ca34a-b134-3aea-85e0-4dc95e34af1c.roa Signing time: Sun 22 Jun 2025 13:01:03 +0000 ROA not before: Sun 22 Jun 2025 13:01:03 +0000 ROA not after: Sat 20 Sep 2025 13:01:03 +0000 asID: 16625 IP address blocks: 23.208.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:46:a5:b2:41:9f:3c:10:a5:16:50:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 22 13:01:03 2025 GMT Not After : Sep 20 13:01:03 2025 GMT Subject: CN=3777a758-86af-4a8a-8675-26c6446298bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d2:8b:53:18:f0:65:de:f3:a6:5c:db:ad:f1: 4f:7d:89:cb:5f:1a:c3:3d:98:4e:11:cb:a0:55:9a: 7f:33:c5:1b:54:6a:ed:d6:94:9a:4d:f1:40:e3:e4: 4d:70:41:0e:12:50:59:02:3e:b3:b0:50:53:ef:da: 08:c7:a8:59:01:a7:47:76:9b:99:9e:1f:fb:40:00: e1:92:5e:24:c9:03:fb:f7:8b:1f:f9:75:53:c5:bc: 2c:43:7d:89:49:32:33:24:14:ed:bd:20:c2:41:ac: 63:e1:93:9d:9b:91:d6:3a:a2:51:d4:42:f4:07:b7: a6:81:13:64:2c:23:54:c4:ee:d8:00:c1:26:73:16: 89:d2:82:3f:f8:aa:65:91:6d:df:36:65:d7:40:21: 98:ed:38:f8:14:68:6a:52:6b:24:00:78:ae:82:49: 6b:11:68:4c:db:9b:d6:b6:3c:9f:d5:4f:cc:e1:a1: cc:b2:82:ba:20:19:0c:a0:a6:0b:b5:e0:d1:5e:4e: 93:29:3b:3d:bf:be:88:57:be:56:47:75:f9:ae:f8: 99:ec:8f:ff:33:df:25:9e:d6:91:e9:f6:2d:0b:ec: 9b:da:b6:9d:6f:36:4b:4d:2e:54:48:ee:07:22:0a: 6d:33:ce:fd:3a:9c:a0:41:0f:83:66:d9:5c:b2:06: 1d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:38:FC:63:C1:70:1C:75:B3:3E:92:C6:FC:27:66:0E:C8:C7:31:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b61ca34a-b134-3aea-85e0-4dc95e34af1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:49:94:bc:59:5d:93:4c:dc:be:98:af:7f:ba:5f:46:a9:7a: 19:13:76:1d:f9:b8:2d:34:84:23:73:bc:2b:da:bc:42:62:83: bf:1a:bb:b3:be:00:f4:1e:a7:6d:dd:98:c7:70:63:06:53:8a: 8c:fc:ae:d4:af:42:ff:f7:54:c3:4a:be:29:39:7c:eb:51:76: 07:65:e1:af:fc:05:fa:80:a5:6c:e3:ce:df:11:92:77:ec:f1: 46:a9:9e:c6:99:dc:04:70:48:3b:16:f3:5b:0a:44:28:0e:9f: 17:b7:f0:37:62:b5:98:95:ae:88:07:a9:a2:ec:cb:94:7d:7b: fe:08:90:cd:29:d4:51:c5:6f:cf:19:56:ff:c3:5e:25:1d:d2: 19:93:ba:8f:b6:00:65:cf:8a:eb:ed:d1:6c:42:dd:1d:03:94: 5e:20:02:a3:f8:41:ff:3d:d3:c9:f1:ff:9b:31:ea:4c:02:00: d0:38:b3:e9:91:89:2b:ab:d8:9e:e9:3b:b4:31:19:f2:82:b1: 0b:1a:85:13:a9:bb:b7:3b:2b:c1:4d:63:a4:e3:2a:cf:4f:c0: 55:6c:72:a1:ff:d0:b3:30:85:e9:8e:dc:33:27:a8:5d:db:bd: f3:4c:be:e5:16:69:b5:51:4c:74:5d:61:2b:c5:64:ef:97:27: 6f:c5:bb:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpGpbJBnzwQpRZQ/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyMjEzMDEwM1oXDTI1MDkyMDEzMDEwM1owLzEtMCsGA1UEAxMk Mzc3N2E3NTgtODZhZi00YThhLTg2NzUtMjZjNjQ0NjI5OGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdKLUxjwZd7zplzbrfFPfYnLXxrDPZhOEcug VZp/M8UbVGrt1pSaTfFA4+RNcEEOElBZAj6zsFBT79oIx6hZAadHdpuZnh/7QADh kl4kyQP794sf+XVTxbwsQ32JSTIzJBTtvSDCQaxj4ZOdm5HWOqJR1EL0B7emgRNk LCNUxO7YAMEmcxaJ0oI/+KplkW3fNmXXQCGY7Tj4FGhqUmskAHiugklrEWhM25vW tjyf1U/M4aHMsoK6IBkMoKYLteDRXk6TKTs9v76IV75WR3X5rviZ7I//M98lntaR 6fYtC+yb2radbzZLTS5USO4HIgptM879OpygQQ+DZtlcsgYd3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOY4/GPBcBx1sz6SxvwnZg7IxzHYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjYxY2EzNGEtYjEzNC0z YWVhLTg1ZTAtNGRjOTVlMzRhZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9DEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlJlLxZXZNM3L6Yr3+6X0apehkTdh35uC00hCNzvCvavEJig78au7O+ APQep23dmMdwYwZTioz8rtSvQv/3VMNKvik5fOtRdgdl4a/8BfqApWzjzt8Rknfs 8UapnsaZ3ARwSDsW81sKRCgOnxe38DditZiVrogHqaLsy5R9e/4IkM0p1FHFb88Z Vv/DXiUd0hmTuo+2AGXPiuvt0WxC3R0DlF4gAqP4Qf8908nx/5sx6kwCANA4s+mR iSur2J7pO7QxGfKCsQsahROpu7c7K8FNY6TjKs9PwFVscqH/0LMwhemO3DMnqF3b vfNMvuUWabVRTHRdYSvFZO+XJ2/Fu6M= -----END CERTIFICATE-----Generated at Sun Jun 29 14:05:37 2025 by rpki-client