$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e24d4ce-3670-324d-ac05-e7a124175628.roa File: 1e24d4ce-3670-324d-ac05-e7a124175628.roa (raw, json) Hash identifier: ghMD+XKrf1QUkcjO81ErKe9RHtY9i3yp94rDT7lAG/w= Subject key identifier: 2C:C0:7E:48:55:96:C5:06:EF:4B:62:D0:1C:30:6F:25:D2:46:5C:43 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8B0B6F0DFBED8016A45D7C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e24d4ce-3670-324d-ac05-e7a124175628.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.220.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:6f:0d:fb:ed:80:16:a4:5d:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=e2434617-36cb-4bd7-8200-e3ecd51649aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3c:58:fb:83:3d:c1:28:79:9f:c2:97:17:26: 0e:bf:11:54:f6:87:a0:37:da:87:35:49:95:91:44: 67:72:cc:76:ac:88:3c:16:4e:d2:7e:7f:86:14:a9: 02:86:e4:fe:ac:91:ea:42:a4:20:97:24:15:dc:ba: 28:3a:23:ae:63:5b:e1:e2:f1:b8:82:1b:1e:cf:85: bf:ba:27:1d:c7:0d:06:05:57:a0:de:e3:28:1a:21: de:ab:bc:e2:1f:7a:3c:da:72:07:f7:ab:3d:ba:5d: 36:93:25:ca:33:3e:a7:c5:23:69:63:b9:6a:4c:d7: 72:22:d6:35:d9:da:1f:18:3b:69:bd:af:8c:71:a1: 2c:b5:c1:85:39:00:8f:b8:0d:67:89:fe:f0:0f:e5: 76:8b:e9:da:56:fe:4c:cc:53:13:59:b2:5d:eb:d6: b7:9a:cf:88:60:c6:6b:d9:83:e6:83:5e:53:d3:c4: 43:d6:4b:48:fa:8d:dc:fb:b6:9b:da:f1:38:e4:03: 0f:73:ce:f9:c4:c9:82:57:32:42:2b:ff:6b:20:e5: 28:a6:98:b1:2a:42:c0:de:9b:45:6f:b3:50:98:a0: 06:0d:56:f6:cd:6c:19:89:60:83:6b:63:e9:4c:6d: b7:06:8d:3a:a5:ef:fc:96:22:96:07:e9:6f:3f:1c: b3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C0:7E:48:55:96:C5:06:EF:4B:62:D0:1C:30:6F:25:D2:46:5C:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e24d4ce-3670-324d-ac05-e7a124175628.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:26:01:5b:5e:10:36:f7:2e:65:9a:09:d2:81:a1:6b:f8:bc: 0b:c6:7e:42:42:98:5a:60:fa:b5:99:d1:ca:f2:d1:df:4d:50: c2:8e:cb:b2:11:e9:41:d5:60:f4:67:07:15:4b:71:00:91:ae: 5e:27:9c:2e:c2:a0:35:ba:25:35:ea:37:2a:79:a6:61:2c:e4: 46:17:8d:e5:66:4e:19:3e:ab:aa:8e:eb:48:1e:cc:f4:b3:5b: 78:36:12:32:42:4c:3f:da:2e:76:db:dc:28:61:1b:8c:a2:00: ea:e2:8d:23:3b:23:ac:15:9e:f4:93:73:a7:81:69:97:d3:53: 9d:a6:b0:90:78:27:b8:79:86:c4:03:c4:0a:8a:7a:6a:a7:45: 9e:0d:ce:dd:85:e7:47:85:d0:51:72:79:ac:07:0b:9d:0b:fd: f1:12:a5:9f:f3:c0:ad:76:6e:21:d6:52:50:78:f1:96:ee:1a: b2:de:49:e5:3e:32:99:05:fc:c8:54:9c:b0:c2:ff:76:f3:84: 6b:86:04:c9:60:05:98:8d:a4:f5:b8:3c:b5:87:3b:27:21:05: d5:a6:c9:a4:fb:b1:b9:e1:ce:9e:49:68:f4:9e:a1:49:c1:b1: f2:86:26:d2:de:2d:9e:7b:f4:02:75:a4:f0:93:ea:a4:a6:df: a5:2e:bd:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC28N++2AFqRdfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk ZTI0MzQ2MTctMzZjYi00YmQ3LTgyMDAtZTNlY2Q1MTY0OWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTxY+4M9wSh5n8KXFyYOvxFU9oegN9qHNUmV kURncsx2rIg8Fk7Sfn+GFKkChuT+rJHqQqQglyQV3LooOiOuY1vh4vG4ghsez4W/ uicdxw0GBVeg3uMoGiHeq7ziH3o82nIH96s9ul02kyXKMz6nxSNpY7lqTNdyItY1 2dofGDtpva+McaEstcGFOQCPuA1nif7wD+V2i+naVv5MzFMTWbJd69a3ms+IYMZr 2YPmg15T08RD1ktI+o3c+7ab2vE45AMPc875xMmCVzJCK/9rIOUoppixKkLA3ptF b7NQmKAGDVb2zWwZiWCDa2PpTG23Bo06pe/8liKWB+lvPxyzzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzAfkhVlsUG70ti0BwwbyXSRlxDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWUyNGQ0Y2UtMzY3MC0z MjRkLWFjMDUtZTdhMTI0MTc1NjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9yQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkmAVteEDb3LmWaCdKBoWv4vAvGfkJCmFpg+rWZ0cry0d9NUMKOy7IR 6UHVYPRnBxVLcQCRrl4nnC7CoDW6JTXqNyp5pmEs5EYXjeVmThk+q6qO60gezPSz W3g2EjJCTD/aLnbb3ChhG4yiAOrijSM7I6wVnvSTc6eBaZfTU52msJB4J7h5hsQD xAqKemqnRZ4Nzt2F50eF0FFyeawHC50L/fESpZ/zwK12biHWUlB48ZbuGrLeSeU+ MpkF/MhUnLDC/3bzhGuGBMlgBZiNpPW4PLWHOychBdWmyaT7sbnhzp5JaPSeoUnB sfKGJtLeLZ579AJ1pPCT6qSm36UuvW4= -----END CERTIFICATE-----Generated at Wed Jul 23 01:42:05 2025 by rpki-client