$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c8a9926-b543-36c8-bd2c-e91eb4aabf9b.roa File: 2c8a9926-b543-36c8-bd2c-e91eb4aabf9b.roa (raw, json) Hash identifier: il1S4H49dCMxRnZG+0AixTy/Tlw7QLnN5r4ee6l2v6w= Subject key identifier: B1:D9:5E:05:75:22:8E:D5:09:5B:15:67:29:A0:5A:AD:EA:DD:44:33 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8B0B71DCD1FBBAB5A1BC0C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c8a9926-b543-36c8-bd2c-e91eb4aabf9b.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.222.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:71:dc:d1:fb:ba:b5:a1:bc:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=f7269e6c-2e12-4997-9e02-444ff0a86a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4c:83:12:94:5b:f6:24:ab:c3:94:a2:49:23: 7b:d5:0d:af:c5:d7:99:49:2d:f1:af:b1:a8:cc:b0: bf:4f:ce:23:eb:0c:29:0b:1f:60:b8:69:2c:5d:f0: 14:4b:77:61:22:3d:04:bf:51:c1:d2:f8:2d:06:4e: 06:c0:9f:71:b2:10:04:e9:4e:c2:77:4b:cc:13:58: 0f:5e:0a:ce:45:ae:95:f6:7f:cd:14:7f:ec:d7:64: 22:5d:fe:17:44:6e:4c:73:82:c2:16:15:ae:c5:ce: e8:d9:e6:30:2c:9d:91:1c:29:ee:2b:6e:b6:0a:8a: 27:8f:90:1c:c7:9d:ae:56:f5:14:fd:38:5d:4e:d6: 2c:8b:c2:15:6c:ef:31:ca:e4:fb:8c:7e:d2:96:93: 55:71:0d:f6:e3:16:cd:b4:91:d8:ef:e7:4b:47:70: 7a:4b:16:ed:eb:5d:e9:b1:57:64:9f:c2:bf:f5:51: 95:1a:6d:ae:71:8c:33:3b:d6:4b:f0:ae:9c:64:2a: 3a:e5:0a:89:4c:9d:00:69:00:36:e5:65:8c:40:f3: f7:c8:e2:c9:d3:06:f1:51:14:b2:e8:fe:ab:2b:dd: 9f:f9:b8:80:31:e0:66:e0:26:72:8a:3d:dc:5f:74: a8:d3:96:6a:1a:ba:60:77:ac:9e:55:e8:ab:de:06: d5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D9:5E:05:75:22:8E:D5:09:5B:15:67:29:A0:5A:AD:EA:DD:44:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c8a9926-b543-36c8-bd2c-e91eb4aabf9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:7a:27:04:e5:9d:2f:58:45:45:ef:03:18:6e:ac:e7:0f:57: 81:e4:d4:98:24:f6:db:70:c0:ad:7b:0e:e7:9a:de:a3:eb:57: c8:9a:80:58:d9:0c:2f:d0:ff:9a:dc:a8:53:4b:19:54:d8:3b: 3a:f1:5a:fd:64:66:d3:e6:0a:17:62:7e:bd:95:84:2c:42:a7: e3:fc:9a:67:a8:5b:36:23:75:f6:3f:e2:df:14:d5:7f:66:f1: ed:74:5b:03:34:b2:cd:f9:1f:fd:19:47:83:4a:ff:63:2b:7e: 37:87:53:b2:4e:64:ba:fe:79:82:71:86:d9:7f:91:71:56:be: 45:d6:2b:c8:0b:25:2c:0f:61:9a:d0:cc:3b:d2:db:99:a8:e9: f9:d7:fd:5f:77:5c:05:54:30:7b:da:08:3b:91:7a:30:84:0c: 48:d9:1e:7e:2b:c3:c4:0b:a0:50:b4:bc:ee:be:52:b9:b7:e6: e0:68:b2:5b:e3:a3:e7:bf:cc:ce:c9:da:98:dd:ad:fc:3e:5b: fb:a3:98:89:7c:8b:bc:ea:6e:64:d9:b7:06:6d:10:0a:1f:82: 9a:22:86:32:49:bc:4b:54:04:45:50:2f:d5:ff:de:cc:da:d8: 32:10:26:5c:f4:b4:de:51:3c:73:58:df:a9:a3:f4:49:0c:d9: b3:27:b2:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC3Hc0fu6taG8DIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk ZjcyNjllNmMtMmUxMi00OTk3LTllMDItNDQ0ZmYwYTg2YTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEyDEpRb9iSrw5SiSSN71Q2vxdeZSS3xr7Go zLC/T84j6wwpCx9guGksXfAUS3dhIj0Ev1HB0vgtBk4GwJ9xshAE6U7Cd0vME1gP XgrORa6V9n/NFH/s12QiXf4XRG5Mc4LCFhWuxc7o2eYwLJ2RHCnuK262Coonj5Ac x52uVvUU/ThdTtYsi8IVbO8xyuT7jH7SlpNVcQ324xbNtJHY7+dLR3B6Sxbt613p sVdkn8K/9VGVGm2ucYwzO9ZL8K6cZCo65QqJTJ0AaQA25WWMQPP3yOLJ0wbxURSy 6P6rK92f+biAMeBm4CZyij3cX3So05ZqGrpgd6yeVeir3gbVXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHZXgV1Io7VCVsVZymgWq3q3UQzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmM4YTk5MjYtYjU0My0z NmM4LWJkMmMtZTkxZWI0YWFiZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF94BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI56JwTlnS9YRUXvAxhurOcPV4Hk1Jgk9ttwwK17Duea3qPrV8iagFjZ DC/Q/5rcqFNLGVTYOzrxWv1kZtPmChdifr2VhCxCp+P8mmeoWzYjdfY/4t8U1X9m 8e10WwM0ss35H/0ZR4NK/2MrfjeHU7JOZLr+eYJxhtl/kXFWvkXWK8gLJSwPYZrQ zDvS25mo6fnX/V93XAVUMHvaCDuRejCEDEjZHn4rw8QLoFC0vO6+Urm35uBoslvj o+e/zM7J2pjdrfw+W/ujmIl8i7zqbmTZtwZtEAofgpoihjJJvEtUBEVQL9X/3sza 2DIQJlz0tN5RPHNY36mj9EkM2bMnsiM= -----END CERTIFICATE-----Generated at Wed Jul 23 01:23:42 2025 by rpki-client