$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f590f36e-f719-334a-af58-56a5d427e2b0.roa File: f590f36e-f719-334a-af58-56a5d427e2b0.roa (raw, json) Hash identifier: gJbtoMEAHhfkFWViO4w7OgwYXO2pPvKJw2yNcj+XPms= Subject key identifier: EC:4A:33:34:72:BD:A1:8E:1C:30:5B:9C:B8:F4:39:E0:E3:AD:BA:21 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A480AEBB468ABF96C0DD86A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f590f36e-f719-334a-af58-56a5d427e2b0.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 20940 IP address blocks: 23.221.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:eb:b4:68:ab:f9:6c:0d:d8:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=d19d6e5f-10f7-499d-a3b2-af9e047fac61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a0:f0:19:b3:42:b8:e8:b6:f3:e2:78:4c:9a: fe:17:ad:c3:72:32:9a:cb:8c:3b:14:52:73:79:d6: 9f:38:48:f5:08:87:9a:00:f2:06:89:35:0e:76:cd: 59:b5:23:a1:b2:ce:92:7c:29:97:9e:d8:98:a7:4b: 4a:d4:7b:69:51:61:10:07:ce:19:fc:c9:c3:84:03: 17:e9:41:dc:da:2d:ee:7d:01:cd:60:71:b1:fb:47: 39:63:28:57:b6:10:a8:46:3c:35:d7:0c:e2:30:39: 62:d0:b1:3c:92:e2:86:5b:e1:f3:64:14:28:f2:1b: 76:63:4d:62:a5:f5:43:89:49:bf:3f:7c:3c:26:71: 11:81:5b:4f:a4:d3:83:bf:b5:7e:b1:38:67:da:d3: 83:7c:c3:17:70:c9:f5:f0:0f:18:2a:ff:80:f5:22: 60:e1:14:46:26:a1:f1:58:12:17:af:2a:09:6a:55: c3:b9:aa:89:7b:61:c6:51:f0:1a:6b:ff:19:10:80: 4d:9f:b7:a1:c8:52:a4:0a:4f:6d:3a:24:85:d0:00: fd:b9:6d:61:86:9d:24:e2:84:f6:d5:52:72:0f:34: 3c:a3:1e:22:81:5e:8c:63:fa:1b:be:00:cc:ec:fb: 28:dc:e6:ab:d4:ee:11:28:d8:9a:36:d3:1c:ae:18: 22:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4A:33:34:72:BD:A1:8E:1C:30:5B:9C:B8:F4:39:E0:E3:AD:BA:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f590f36e-f719-334a-af58-56a5d427e2b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:08:b7:79:a6:13:cd:41:a7:68:fc:b3:21:cb:59:61:c2:2e: 50:f9:14:2f:cd:1c:ad:55:9e:31:69:22:6a:c0:30:06:32:85: 32:3f:63:78:02:cc:4b:59:c5:76:ce:c3:05:21:e5:23:22:45: f4:c5:c1:9a:04:bb:6a:ac:97:54:42:95:25:af:a7:41:be:67: e1:89:4a:9a:da:52:ef:91:6c:00:e7:de:f8:d3:0e:55:7c:75: 03:59:84:da:f0:00:99:21:da:ac:02:1c:86:4c:95:e8:08:82: 4e:cc:8c:23:98:29:75:ac:58:ff:9f:be:aa:14:5e:13:1e:14: df:9c:e7:0c:53:62:1c:f1:a2:cd:57:6d:bb:f5:ac:69:e1:49: 10:06:c4:64:a0:19:09:d0:c4:73:57:42:56:50:75:68:bf:02: ed:d0:58:ee:f3:d0:d1:74:7f:ce:2b:37:36:c1:3b:e3:a5:29: 43:e1:74:45:55:e9:91:04:d7:74:fb:9a:f8:d1:bc:0b:1e:35: 37:be:c3:fc:76:ef:f5:44:02:57:01:79:a1:e5:65:e8:b3:df: 82:c5:64:29:3a:8f:1d:ad:bb:27:fd:03:52:6c:75:3f:69:3c: cb:50:eb:70:b8:d1:fc:8f:c9:50:33:cc:f3:91:ff:af:31:1a: f8:52:b1:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICuu0aKv5bA3YagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk ZDE5ZDZlNWYtMTBmNy00OTlkLWEzYjItYWY5ZTA0N2ZhYzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aDwGbNCuOi28+J4TJr+F63DcjKay4w7FFJz edafOEj1CIeaAPIGiTUOds1ZtSOhss6SfCmXntiYp0tK1HtpUWEQB84Z/MnDhAMX 6UHc2i3ufQHNYHGx+0c5YyhXthCoRjw11wziMDli0LE8kuKGW+HzZBQo8ht2Y01i pfVDiUm/P3w8JnERgVtPpNODv7V+sThn2tODfMMXcMn18A8YKv+A9SJg4RRGJqHx WBIXryoJalXDuaqJe2HGUfAaa/8ZEIBNn7ehyFKkCk9tOiSF0AD9uW1hhp0k4oT2 1VJyDzQ8ox4igV6MY/obvgDM7Pso3Oar1O4RKNiaNtMcrhgi2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxKMzRyvaGOHDBbnLj0OeDjrbohMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjU5MGYzNmUtZjcxOS0z MzRhLWFmNTgtNTZhNWQ0MjdlMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF93GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcIt3mmE81Bp2j8syHLWWHCLlD5FC/NHK1VnjFpImrAMAYyhTI/Y3gC zEtZxXbOwwUh5SMiRfTFwZoEu2qsl1RClSWvp0G+Z+GJSpraUu+RbADn3vjTDlV8 dQNZhNrwAJkh2qwCHIZMlegIgk7MjCOYKXWsWP+fvqoUXhMeFN+c5wxTYhzxos1X bbv1rGnhSRAGxGSgGQnQxHNXQlZQdWi/Au3QWO7z0NF0f84rNzbBO+OlKUPhdEVV 6ZEE13T7mvjRvAseNTe+w/x27/VEAlcBeaHlZeiz34LFZCk6jx2tuyf9A1JsdT9p PMtQ63C40fyPyVAzzPOR/68xGvhSsc4= -----END CERTIFICATE-----Generated at Sun Jun 29 13:46:10 2025 by rpki-client