$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8c7765e-1217-3cb8-a8c2-b637778c7a92.roa File: c8c7765e-1217-3cb8-a8c2-b637778c7a92.roa (raw, json) Hash identifier: Ow4udHKLrkJEUfY80tO8vJ2WrKdSmr74GJXc8sB4wXc= Subject key identifier: 32:8B:B3:8C:B7:68:38:F6:7D:6D:C5:3F:36:2B:21:34:0A:C3:14:88 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC87641EECCA9325D4B5F9300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8c7765e-1217-3cb8-a8c2-b637778c7a92.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 24319 IP address blocks: 23.214.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:41:ee:cc:a9:32:5d:4b:5f:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=f2d37eef-711e-4a87-853f-3ecb3b121127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:11:bd:56:3e:8e:49:0e:7f:a4:b4:c6:1f:88: 58:b3:44:17:58:fd:9d:f5:de:ef:9f:71:5f:37:48: 9a:c2:44:9f:6c:c8:81:c5:57:6a:62:9d:b5:65:45: 25:df:97:d7:f6:e0:9d:9f:28:b0:6a:88:4f:54:d8: 79:08:73:c0:a7:69:7c:5d:0f:58:f1:d2:e4:49:42: 06:b4:0a:3d:51:bd:4b:87:30:82:0b:b5:b6:18:4b: 99:9b:98:0a:20:6b:f1:92:eb:00:74:c3:7c:dd:29: d4:f6:54:b7:d6:89:ac:90:2f:33:cb:94:12:7a:49: b5:e8:71:89:79:39:70:08:94:4a:31:cd:27:1f:8e: 63:c7:5b:12:8a:0b:d3:f0:80:9f:1b:85:d4:b2:f9: 81:26:f7:30:6c:14:27:9a:1a:d5:46:ea:bb:9f:0f: 6f:07:56:ca:9f:a9:25:ad:f1:13:ac:e8:f3:ca:ad: 8c:58:d4:d1:c5:de:84:20:88:1a:35:a6:8d:26:46: f8:21:f9:5e:cb:c5:69:33:3e:a0:9f:08:f5:b8:79: 56:a5:90:a0:79:2c:81:3e:38:4c:8e:9c:55:49:96: 8b:b1:7a:ac:a3:0f:1d:33:36:67:77:34:43:36:4c: a4:67:a0:7b:7e:21:17:b0:52:cd:5c:3d:0b:b3:ff: 18:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8B:B3:8C:B7:68:38:F6:7D:6D:C5:3F:36:2B:21:34:0A:C3:14:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8c7765e-1217-3cb8-a8c2-b637778c7a92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:7a:63:dc:c5:fe:58:99:c7:6a:6d:42:08:df:73:eb:1a:c0: df:b1:74:8f:57:7a:42:77:5f:81:07:b1:6d:a8:16:85:13:b3: 3d:1a:ce:21:a6:5d:a1:af:91:c4:c9:6a:51:a5:24:8d:42:57: 6c:e4:e2:16:fa:10:bc:fe:54:e0:84:70:69:e8:28:1a:75:d5: 69:d1:56:b5:1f:75:73:a6:40:ee:7f:07:df:83:fa:37:cf:eb: a0:0a:40:8a:a9:4f:51:9d:b7:6b:c8:3c:5d:cc:38:b0:34:3b: 0b:e1:a7:66:f6:7b:78:64:52:95:44:5b:4b:e5:7a:aa:78:a6: 49:d3:2e:20:77:01:81:ca:18:21:1f:8f:48:64:bd:9d:27:f9: 30:68:b6:69:79:8f:ff:b3:0f:8b:a9:f3:59:ec:d9:e2:ce:f0: 09:03:b2:f2:98:e4:21:c3:2b:1e:5b:bb:ef:0d:f0:a4:95:ed: 92:a6:0d:e9:7f:1b:aa:0a:13:53:40:98:0b:d8:6f:34:6a:c3: b5:12:04:49:bc:d8:84:42:7c:6b:d9:2a:d9:bf:45:a4:af:bf: f1:30:38:a2:ad:6a:6c:9f:12:ae:af:7d:b9:14:9d:3b:19:10: bc:ca:8e:93:b4:39:37:4b:6b:58:ee:8b:37:20:59:63:d7:63: d9:11:a4:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdkHuzKkyXUtfkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZjJkMzdlZWYtNzExZS00YTg3LTg1M2YtM2VjYjNiMTIxMTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxG9Vj6OSQ5/pLTGH4hYs0QXWP2d9d7vn3Ff N0iawkSfbMiBxVdqYp21ZUUl35fX9uCdnyiwaohPVNh5CHPAp2l8XQ9Y8dLkSUIG tAo9Ub1LhzCCC7W2GEuZm5gKIGvxkusAdMN83SnU9lS31omskC8zy5QSekm16HGJ eTlwCJRKMc0nH45jx1sSigvT8ICfG4XUsvmBJvcwbBQnmhrVRuq7nw9vB1bKn6kl rfETrOjzyq2MWNTRxd6EIIgaNaaNJkb4Ifley8VpMz6gnwj1uHlWpZCgeSyBPjhM jpxVSZaLsXqsow8dMzZndzRDNkykZ6B7fiEXsFLNXD0Ls/8YcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKLs4y3aDj2fW3FPzYrITQKwxSIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzhjNzc2NWUtMTIxNy0z Y2I4LWE4YzItYjYzNzc3OGM3YTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ZxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABp6Y9zF/liZx2ptQgjfc+sawN+xdI9XekJ3X4EHsW2oFoUTsz0aziGm XaGvkcTJalGlJI1CV2zk4hb6ELz+VOCEcGnoKBp11WnRVrUfdXOmQO5/B9+D+jfP 66AKQIqpT1Gdt2vIPF3MOLA0Owvhp2b2e3hkUpVEW0vleqp4pknTLiB3AYHKGCEf j0hkvZ0n+TBotml5j/+zD4up81ns2eLO8AkDsvKY5CHDKx5bu+8N8KSV7ZKmDel/ G6oKE1NAmAvYbzRqw7USBEm82IRCfGvZKtm/RaSvv/EwOKKtamyfEq6vfbkUnTsZ ELzKjpO0OTdLa1juizcgWWPXY9kRpN8= -----END CERTIFICATE-----Generated at Sat Aug 23 16:56:16 2025 by rpki-client