$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f00e4241-0f1d-3acd-bdf2-7ea798ffded2.roa File: f00e4241-0f1d-3acd-bdf2-7ea798ffded2.roa (raw, json) Hash identifier: R2LAcocqYlx2zfVcluQtmDZwvyHmCPU0zDdcgoHzzyY= Subject key identifier: C3:2A:1C:DD:17:22:1A:65:D3:DF:B6:8E:A7:2B:8F:EC:ED:8B:A9:B7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC2E0E611B3754737FCFAFC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f00e4241-0f1d-3acd-bdf2-7ea798ffded2.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 35994 IP address blocks: 23.208.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:e6:11:b3:75:47:37:fc:fa:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=fd5891ea-1b34-4e0c-a390-47e6c7bff6d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:97:a2:31:1a:d1:51:26:47:e1:5d:ff:9f:4e: b8:6f:a9:04:3f:68:af:79:00:dc:2c:9c:6b:c5:20: 4e:48:37:1e:e1:e7:82:e0:7f:89:6a:7e:97:41:f1: 4f:33:08:da:b0:e6:23:49:9a:ae:7d:44:21:11:28: 17:f5:12:63:c7:e1:bf:cf:fa:2b:63:ac:9d:cd:92: 20:b5:56:36:9d:7c:8f:ac:ea:ec:12:d2:fa:9b:01: 62:6f:58:ea:4c:7a:0d:c4:6c:04:b4:4b:cb:da:29: ca:49:86:58:7b:66:71:6f:65:69:55:15:c0:35:64: 27:ce:18:db:94:c4:87:55:be:bc:cf:15:dc:43:f5: b3:02:76:04:72:73:bb:0f:ed:86:55:a9:31:3b:fd: 92:02:7c:57:9a:63:8a:59:4b:87:ae:d1:14:99:dd: a4:05:e9:08:7d:b1:ee:d2:23:c1:62:7b:86:67:9b: 90:5b:da:5b:fc:d2:17:69:ef:b2:b0:22:40:94:7b: d7:9c:49:cf:73:37:df:ad:dc:38:29:4d:0f:91:6d: 57:0d:73:67:c6:54:74:a8:f5:01:46:e5:a3:99:82: 47:62:4f:80:b7:73:8d:ed:29:91:8c:31:49:5d:46: 2c:7c:7a:fb:bc:21:24:a3:18:46:86:7d:73:64:d1: 52:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2A:1C:DD:17:22:1A:65:D3:DF:B6:8E:A7:2B:8F:EC:ED:8B:A9:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f00e4241-0f1d-3acd-bdf2-7ea798ffded2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ff:ad:5f:c8:88:e0:ad:97:95:dc:d7:ca:dc:03:81:38:00: 5b:d1:ce:93:2d:93:ce:cb:21:69:1e:d2:31:28:e5:c2:e1:11: 09:3b:60:a7:58:61:c0:9c:e8:d9:a5:62:3c:85:70:48:e6:92: 20:f2:38:78:87:a4:ca:39:cd:87:4e:04:82:cd:33:5b:a8:12: 63:a4:8a:e0:c0:ab:9c:b9:60:60:8e:b2:b4:b6:b8:fe:93:25: 1d:7e:16:e2:64:39:f2:3b:97:43:3d:8d:ff:e3:4e:23:04:36: f6:6f:42:09:8c:77:ca:ec:ae:90:6f:c7:72:83:3c:4f:3f:17: 81:e3:3b:60:eb:9d:02:bc:6c:af:2d:70:3c:7e:aa:ca:8d:44: d7:88:67:ee:82:df:b2:31:e9:1c:53:71:ba:b3:01:ec:ed:63: 40:f2:9d:b6:dc:53:c8:05:ea:5d:9e:33:79:18:6e:36:4c:3c: ad:9d:3f:ff:30:7c:99:e0:43:d6:5e:ef:d4:e6:e2:b4:4c:d4: f7:c2:e1:da:e7:97:a4:90:ef:ea:45:1b:1f:fb:61:3c:84:b3: 01:8e:a8:08:be:00:39:f0:23:c4:9e:89:8c:44:b4:e5:5c:e2: cf:1e:ff:41:2a:a5:ca:f8:ec:95:cf:72:ad:b3:3e:c6:15:bb: 7c:36:b7:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4OYRs3VHN/z6/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZmQ1ODkxZWEtMWIzNC00ZTBjLWEzOTAtNDdlNmM3YmZmNmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZeiMRrRUSZH4V3/n064b6kEP2iveQDcLJxr xSBOSDce4eeC4H+Jan6XQfFPMwjasOYjSZqufUQhESgX9RJjx+G/z/orY6ydzZIg tVY2nXyPrOrsEtL6mwFib1jqTHoNxGwEtEvL2inKSYZYe2Zxb2VpVRXANWQnzhjb lMSHVb68zxXcQ/WzAnYEcnO7D+2GVakxO/2SAnxXmmOKWUuHrtEUmd2kBekIfbHu 0iPBYnuGZ5uQW9pb/NIXae+ysCJAlHvXnEnPczffrdw4KU0PkW1XDXNnxlR0qPUB RuWjmYJHYk+At3ON7SmRjDFJXUYsfHr7vCEkoxhGhn1zZNFSlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMqHN0XIhpl09+2jqcrj+zti6m3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjAwZTQyNDEtMGYxZC0z YWNkLWJkZjItN2VhNzk4ZmZkZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ARMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEn/rV/IiOCtl5Xc18rcA4E4AFvRzpMtk87LIWke0jEo5cLhEQk7YKdY YcCc6NmlYjyFcEjmkiDyOHiHpMo5zYdOBILNM1uoEmOkiuDAq5y5YGCOsrS2uP6T JR1+FuJkOfI7l0M9jf/jTiMENvZvQgmMd8rsrpBvx3KDPE8/F4HjO2DrnQK8bK8t cDx+qsqNRNeIZ+6C37Ix6RxTcbqzAeztY0DynbbcU8gF6l2eM3kYbjZMPK2dP/8w fJngQ9Ze79Tm4rRM1PfC4drnl6SQ7+pFGx/7YTyEswGOqAi+ADnwI8SeiYxEtOVc 4s8e/0Eqpcr47JXPcq2zPsYVu3w2t+k= -----END CERTIFICATE-----Generated at Sat Aug 23 13:01:21 2025 by rpki-client