$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2307b0b-1ad1-3676-b25b-f684d0180b5d.roa File: d2307b0b-1ad1-3676-b25b-f684d0180b5d.roa (raw, json) Hash identifier: Zt7U4rVmh2tOV1h5kqZELY0FfzDEabxuq0lwGQ6alF8= Subject key identifier: 48:C9:6D:66:94:59:80:03:F4:0E:BB:9B:78:B6:34:CA:D0:59:07:A9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A51D07A6035FC6265E33A93C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2307b0b-1ad1-3676-b25b-f684d0180b5d.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 7713 IP address blocks: 23.217.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:7a:60:35:fc:62:65:e3:3a:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=10e009c3-d511-4e95-9eba-a19d04c94935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c8:e7:22:49:00:b8:52:5b:49:a9:6b:2a:b3: 5a:19:c6:3e:bc:e2:d1:c5:ef:a1:a5:53:e8:77:8d: de:17:e6:9c:24:c4:16:f9:de:a7:b0:6c:63:f5:a4: 59:c0:38:ec:61:2c:c5:b3:fd:f7:e7:4e:d8:87:1d: c8:26:10:24:70:d3:16:74:ed:2d:57:28:5b:02:2d: 93:e2:58:b4:fe:03:ef:7f:6c:5c:78:62:9f:51:b7: 08:ff:bc:ef:d4:1e:cd:ce:1d:80:f1:74:67:46:f8: 48:aa:22:03:b0:3f:35:d3:5f:b8:cd:a6:07:6c:46: 91:fc:f2:3d:5d:45:9d:9c:6f:d1:b7:d3:fa:df:72: 67:60:13:66:21:32:7e:2c:0c:a4:3a:e9:91:f1:f6: 2f:5d:3e:0c:cf:c8:ed:40:66:47:88:8e:92:9b:2d: 32:95:11:4b:2d:53:0b:b0:85:f0:82:c0:f5:e6:f9: e1:77:a0:37:bc:0f:c0:60:5e:ba:f6:46:6c:75:37: 95:f1:4a:72:4d:76:51:a8:30:4b:08:fa:b6:65:cf: 3b:1c:d7:e0:3f:31:4c:8a:33:88:3c:7c:84:36:cd: df:b5:8b:45:b3:de:92:0d:1b:7c:5b:8c:8b:27:d5: c7:f8:50:7e:8a:87:98:cf:86:5d:4a:a6:94:fa:40: 94:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C9:6D:66:94:59:80:03:F4:0E:BB:9B:78:B6:34:CA:D0:59:07:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2307b0b-1ad1-3676-b25b-f684d0180b5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:f9:bf:1f:9e:a5:7c:2f:bd:23:ef:17:ec:e5:04:c6:9a:ca: cc:a4:76:af:bc:6f:bc:6a:69:a1:9c:34:0c:71:58:25:32:7a: 90:86:48:5c:cf:2b:4c:f6:e0:8b:9b:9a:de:81:8a:ec:54:40: b3:c2:72:04:f9:11:db:98:e4:48:53:01:08:eb:dc:c0:e8:8d: b2:d0:0e:eb:00:c5:58:0d:94:05:73:f5:1f:69:87:2a:02:d2: 23:93:ae:65:14:4a:8a:58:ef:1f:50:7c:ef:2a:b1:0f:b2:8e: 27:5f:db:b9:b8:63:a2:0d:2f:d1:0e:bb:a8:b4:43:e1:d5:1b: 30:13:c4:e4:22:ab:a6:26:f3:5f:b7:ab:0a:f7:24:89:03:9f: 80:b6:c7:17:ea:b8:49:97:58:5b:8c:af:ca:6d:e3:51:6f:b4: b5:11:69:6e:17:7d:03:5f:a1:db:ad:a9:a0:4d:c3:66:55:e5: c1:45:98:18:3e:8b:83:35:3e:f1:e2:76:21:e6:4f:ba:30:42: 8f:f3:ac:56:49:72:bc:29:0d:76:51:6c:fa:64:0b:ec:02:e1: 82:53:ee:e7:76:fa:eb:c3:88:8a:a0:5c:68:88:e0:ff:8b:0a: 98:c6:2b:0e:4c:91:67:ef:90:25:e9:13:94:e8:6e:3b:74:c2: 7c:b5:05:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0HpgNfxiZeM6k8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk MTBlMDA5YzMtZDUxMS00ZTk1LTllYmEtYTE5ZDA0Yzk0OTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8jnIkkAuFJbSalrKrNaGcY+vOLRxe+hpVPo d43eF+acJMQW+d6nsGxj9aRZwDjsYSzFs/33507Yhx3IJhAkcNMWdO0tVyhbAi2T 4li0/gPvf2xceGKfUbcI/7zv1B7Nzh2A8XRnRvhIqiIDsD8101+4zaYHbEaR/PI9 XUWdnG/Rt9P633JnYBNmITJ+LAykOumR8fYvXT4Mz8jtQGZHiI6Smy0ylRFLLVML sIXwgsD15vnhd6A3vA/AYF669kZsdTeV8UpyTXZRqDBLCPq2Zc87HNfgPzFMijOI PHyENs3ftYtFs96SDRt8W4yLJ9XH+FB+ioeYz4ZdSqaU+kCUDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjJbWaUWYAD9A67m3i2NMrQWQepMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDIzMDdiMGItMWFkMS0z Njc2LWIyNWItZjY4NGQwMTgwYjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9kQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFf5vx+epXwvvSPvF+zlBMaaysykdq+8b7xqaaGcNAxxWCUyepCGSFzP K0z24Iubmt6BiuxUQLPCcgT5EduY5EhTAQjr3MDojbLQDusAxVgNlAVz9R9phyoC 0iOTrmUUSopY7x9QfO8qsQ+yjidf27m4Y6INL9EOu6i0Q+HVGzATxOQiq6Ym81+3 qwr3JIkDn4C2xxfquEmXWFuMr8pt41FvtLURaW4XfQNfodutqaBNw2ZV5cFFmBg+ i4M1PvHidiHmT7owQo/zrFZJcrwpDXZRbPpkC+wC4YJT7ud2+uvDiIqgXGiI4P+L CpjGKw5MkWfvkCXpE5Tobjt0wny1BSI= -----END CERTIFICATE-----Generated at Sun Jun 29 19:04:36 2025 by rpki-client