$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbd2c005-1ed8-3585-b980-5114134ad389.roa File: cbd2c005-1ed8-3585-b980-5114134ad389.roa (raw, json) Hash identifier: WYQWXxQRaA7ClfB2ZMQ3wbTaQu1hjc/kuv81/axXTUw= Subject key identifier: C4:80:50:DB:60:A6:D0:9A:34:BB:F1:52:6A:22:2D:2B:65:B5:12:8B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A549B33D274CDBB51771A5F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbd2c005-1ed8-3585-b980-5114134ad389.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 20940 IP address blocks: 23.196.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:33:d2:74:cd:bb:51:77:1a:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=9dd5c71c-84a3-48b2-9657-8af5489908fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f7:31:5f:43:48:bd:fe:4a:7d:f3:7b:b2:48: 08:d8:07:92:ed:00:f4:a6:43:b8:93:f5:a9:78:38: 2e:16:a4:5f:40:79:c0:f2:68:fd:ec:ca:fa:a8:04: 25:09:4b:88:eb:82:9f:6c:14:57:1f:34:f0:34:1b: dc:65:65:90:c7:82:3d:25:d0:e5:e9:92:7a:f5:21: 9d:ab:4c:4f:fd:e4:72:8d:86:b8:14:d2:b0:f9:0f: 50:35:08:3a:5e:10:f7:f8:99:f9:ed:80:70:98:ca: 2f:c9:81:cc:cd:5f:42:42:91:c5:df:89:9e:b4:22: 1e:41:86:19:a7:33:14:95:82:14:86:09:7a:ae:3e: ae:fb:14:b0:b0:45:17:04:01:c8:36:15:14:92:45: f0:13:87:00:42:79:14:8e:59:0b:67:6a:66:66:fb: 8b:75:db:8d:67:86:51:98:6a:b8:3f:47:7b:7f:b4: 78:47:70:39:77:bf:e0:f4:47:40:00:56:5b:06:1d: b8:d2:d4:db:6c:a3:91:89:a2:2f:a5:60:a8:bb:cd: 94:e8:58:80:d3:78:b3:a8:2d:77:19:09:f2:a1:de: 20:b5:76:88:87:d3:64:69:b2:a8:2a:de:1e:66:60: 8b:32:5b:60:67:a0:42:68:2e:b9:a7:1e:8b:bd:55: de:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:80:50:DB:60:A6:D0:9A:34:BB:F1:52:6A:22:2D:2B:65:B5:12:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbd2c005-1ed8-3585-b980-5114134ad389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.196.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:6c:44:c3:ac:95:e4:87:76:45:37:fe:71:4b:f0:39:89:6d: 8c:db:42:6e:18:ec:81:6b:1a:e3:04:c1:9e:e3:55:9f:fc:60: ec:34:81:48:c1:14:ed:bd:8b:b1:c2:f7:04:a6:d4:66:27:a7: f6:3d:20:d9:3d:ca:e3:d9:ea:a1:36:fc:68:67:35:db:01:ff: 06:37:db:2f:7b:f0:68:a0:f4:a2:83:d9:8c:f2:62:46:dc:c9: 08:b1:cb:c3:80:c9:52:73:fe:47:44:bd:5b:62:ee:b2:dd:ae: a7:27:11:2b:25:72:1d:9e:12:1c:82:05:2b:8b:b1:2c:96:05: a9:02:80:76:5c:da:6e:3d:de:60:65:f4:59:cb:d3:3b:21:4b: 98:d7:cf:5c:43:91:39:46:75:fa:68:81:e0:9e:2a:a0:d8:66: b3:50:3a:10:8b:e0:53:95:5f:da:22:69:68:d9:81:ee:a6:bb: 89:be:56:bf:ab:ae:30:8c:99:23:e7:7f:a5:8f:57:c7:34:57: c4:a6:32:8a:1e:cc:89:71:91:fa:18:9a:ad:93:6b:06:0f:ff: 1c:83:15:5a:0a:42:08:d9:1a:f2:00:80:15:dd:f7:aa:ce:48: 83:cc:8a:65:bc:f0:5b:28:2b:fa:4e:b8:c2:31:5a:9c:8a:ca: e3:ad:3d:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmzPSdM27UXcaX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk OWRkNWM3MWMtODRhMy00OGIyLTk2NTctOGFmNTQ4OTkwOGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfcxX0NIvf5KffN7skgI2AeS7QD0pkO4k/Wp eDguFqRfQHnA8mj97Mr6qAQlCUuI64KfbBRXHzTwNBvcZWWQx4I9JdDl6ZJ69SGd q0xP/eRyjYa4FNKw+Q9QNQg6XhD3+Jn57YBwmMovyYHMzV9CQpHF34metCIeQYYZ pzMUlYIUhgl6rj6u+xSwsEUXBAHINhUUkkXwE4cAQnkUjlkLZ2pmZvuLdduNZ4ZR mGq4P0d7f7R4R3A5d7/g9EdAAFZbBh240tTbbKORiaIvpWCou82U6FiA03izqC13 GQnyod4gtXaIh9NkabKoKt4eZmCLMltgZ6BCaC65px6LvVXe2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSAUNtgptCaNLvxUmoiLStltRKLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2JkMmMwMDUtMWVkOC0z NTg1LWI5ODAtNTExNDEzNGFkMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8RAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1sRMOsleSHdkU3/nFL8DmJbYzbQm4Y7IFrGuMEwZ7jVZ/8YOw0gUjB FO29i7HC9wSm1GYnp/Y9INk9yuPZ6qE2/GhnNdsB/wY32y978Gig9KKD2YzyYkbc yQixy8OAyVJz/kdEvVti7rLdrqcnESslch2eEhyCBSuLsSyWBakCgHZc2m493mBl 9FnL0zshS5jXz1xDkTlGdfpogeCeKqDYZrNQOhCL4FOVX9oiaWjZge6mu4m+Vr+r rjCMmSPnf6WPV8c0V8SmMooezIlxkfoYmq2TawYP/xyDFVoKQgjZGvIAgBXd96rO SIPMimW88FsoK/pOuMIxWpyKyuOtPbE= -----END CERTIFICATE-----Generated at Tue Jul 1 08:01:09 2025 by rpki-client