$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0542d4d1-a8fd-3e03-a8d1-84bce1a167f4.roa File: 0542d4d1-a8fd-3e03-a8d1-84bce1a167f4.roa (raw, json) Hash identifier: 4Rs4WJiDM0s6NSScvGksKi9moqtXl6DL47A3V8UnoUg= Subject key identifier: D9:C1:0D:93:7A:23:2B:6D:CF:34:29:52:99:92:91:E4:A9:8E:D3:40 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8B0B6FDF3CDF27D4B2F26700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0542d4d1-a8fd-3e03-a8d1-84bce1a167f4.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 4788 IP address blocks: 23.220.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:6f:df:3c:df:27:d4:b2:f2:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=8e129055-a061-406d-a3d1-36066bd3023f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:df:e2:44:37:a6:10:f3:75:d3:82:6e:da:97: 5f:f7:57:0a:d1:39:2d:37:d5:d6:da:2e:31:59:6c: 62:c0:d3:d7:6b:07:02:c8:dc:a7:d8:ef:70:f1:56: 71:6d:e1:b3:d0:3b:88:e2:c9:a6:2e:ea:e9:c4:c6: 62:d4:72:0b:e6:71:eb:9a:c6:b4:7e:b8:db:c1:74: 19:32:fe:c7:a0:46:5c:78:be:92:33:b8:f4:b5:ab: 18:9a:1a:fc:e3:df:fc:9c:65:a9:bb:ca:77:56:a8: b3:25:15:e9:47:3e:c9:c7:be:9b:20:97:87:1d:ff: 4a:38:18:d4:91:dd:72:b3:64:7a:6c:31:19:08:2d: ff:fa:48:9d:41:bc:47:12:8b:c4:e9:53:c3:31:6b: fd:3f:3c:e1:2e:f8:27:8d:cd:b2:1c:e0:84:bc:b7: 1a:ce:0d:89:b5:f0:72:84:b7:be:aa:2c:04:ab:3c: 58:cc:27:23:d1:49:4b:dc:9a:9c:98:0b:ec:61:b6: f5:d5:50:f3:f7:dd:c4:cd:0a:3e:90:e1:ed:24:3c: fc:d8:b9:f4:4d:01:57:ac:1f:6b:00:57:8e:8b:57: f4:16:ec:53:c2:1d:d0:09:cd:f7:6e:9f:2d:cd:3c: 73:3f:07:89:73:95:d5:67:8f:e1:8f:5a:ae:c0:d4: 99:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C1:0D:93:7A:23:2B:6D:CF:34:29:52:99:92:91:E4:A9:8E:D3:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0542d4d1-a8fd-3e03-a8d1-84bce1a167f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:96:30:e8:6c:8d:37:ed:62:f9:4c:b3:6e:5b:5b:eb:aa:59: 6b:cc:9f:f5:89:51:4f:de:55:ab:62:a3:c0:64:51:f3:d5:cf: b1:a1:ea:94:43:e3:36:68:6c:a3:76:96:4e:79:b4:35:d6:ce: 72:fe:b1:39:d4:f7:2f:e6:cb:31:a6:61:43:ef:07:38:e2:24: 12:d9:d6:e3:36:7e:4b:76:48:ed:6b:00:f8:52:fb:87:0f:9c: 27:3e:9c:35:97:e5:90:43:14:8a:1f:66:52:fe:78:70:5c:03: ed:3b:90:b5:d1:be:b4:69:86:00:95:a2:54:09:41:1d:cd:4a: ae:ce:16:70:a2:8e:c8:f1:a6:29:c0:0b:5b:bc:3d:79:be:89: bc:27:45:8d:aa:73:33:cd:e6:c3:c2:e2:1e:a5:dc:1a:03:e7: 42:48:fd:eb:57:4d:66:51:56:a9:06:41:ef:f6:bf:cc:fe:df: f5:3c:3f:f0:11:be:7b:71:c5:2b:c1:3b:5b:b6:d3:35:af:ca: 53:06:04:e9:d0:5f:6d:69:e9:7b:25:a8:18:fa:18:95:3a:ec: ea:38:5f:6a:0b:14:92:43:7b:c1:06:6a:54:d8:43:1e:da:ae: 64:57:3b:c9:32:43:35:2b:6e:7f:82:fd:23:da:70:8f:e4:f6: 33:d7:e1:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC2/fPN8n1LLyZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk OGUxMjkwNTUtYTA2MS00MDZkLWEzZDEtMzYwNjZiZDMwMjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd/iRDemEPN104Ju2pdf91cK0TktN9XW2i4x WWxiwNPXawcCyNyn2O9w8VZxbeGz0DuI4smmLurpxMZi1HIL5nHrmsa0frjbwXQZ Mv7HoEZceL6SM7j0tasYmhr849/8nGWpu8p3VqizJRXpRz7Jx76bIJeHHf9KOBjU kd1ys2R6bDEZCC3/+kidQbxHEovE6VPDMWv9PzzhLvgnjc2yHOCEvLcazg2JtfBy hLe+qiwEqzxYzCcj0UlL3JqcmAvsYbb11VDz993EzQo+kOHtJDz82Ln0TQFXrB9r AFeOi1f0FuxTwh3QCc33bp8tzTxzPweJc5XVZ4/hj1quwNSZFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnBDZN6IyttzzQpUpmSkeSpjtNAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDU0MmQ0ZDEtYThmZC0z ZTAzLWE4ZDEtODRiY2UxYTE2N2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWWMOhsjTftYvlMs25bW+uqWWvMn/WJUU/eVatio8BkUfPVz7Gh6pRD 4zZobKN2lk55tDXWznL+sTnU9y/myzGmYUPvBzjiJBLZ1uM2fkt2SO1rAPhS+4cP nCc+nDWX5ZBDFIofZlL+eHBcA+07kLXRvrRphgCVolQJQR3NSq7OFnCijsjxpinA C1u8PXm+ibwnRY2qczPN5sPC4h6l3BoD50JI/etXTWZRVqkGQe/2v8z+3/U8P/AR vntxxSvBO1u20zWvylMGBOnQX21p6XslqBj6GJU67Oo4X2oLFJJDe8EGalTYQx7a rmRXO8kyQzUrbn+C/SPacI/k9jPX4Sk= -----END CERTIFICATE-----Generated at Tue Jul 22 19:31:37 2025 by rpki-client