$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cfa90f3-881b-3bd1-a44d-d26fadb9de95.roa File: 4cfa90f3-881b-3bd1-a44d-d26fadb9de95.roa (raw, json) Hash identifier: TSlIKDkSdVQHgYoUTrn+ozXZNTarU7/w4fFCTArnxiA= Subject key identifier: 71:F0:78:E0:34:D7:AF:75:28:FE:3B:02:5F:F7:45:87:D9:65:4C:69 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8B0B69CEA52FEFA87FFF4940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cfa90f3-881b-3bd1-a44d-d26fadb9de95.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 16625 IP address blocks: 23.222.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:69:ce:a5:2f:ef:a8:7f:ff:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=6d4dac51-426c-41e7-9898-661056a468f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4f:e8:d7:c3:34:88:41:97:6a:a7:32:44:43: d8:5f:cc:5e:44:28:42:57:d8:f3:c3:45:84:41:3b: 12:63:dd:a7:8b:f8:e2:7d:63:19:a3:ae:1f:b6:f4: 2c:ec:5a:72:dc:90:d3:f6:04:69:c5:22:b5:d3:42: 35:f4:00:b9:77:17:ef:f7:b5:33:78:eb:95:c2:07: 03:ae:6d:5f:fd:eb:d1:cc:70:19:11:da:b3:fa:d0: 2f:08:ba:c0:8c:e6:12:5d:cc:d3:1e:a3:ea:73:b0: a0:78:a8:c9:a2:76:6d:85:a9:fb:af:3f:01:e8:d6: fb:6e:ce:d6:61:7a:b7:b6:6f:24:7d:0f:dc:b4:6f: 99:1f:0a:30:30:f7:7b:8d:10:7b:41:c3:e1:62:51: 53:c5:d3:20:90:4d:f3:97:be:9d:c7:2f:f7:ca:e8: 40:98:3c:d0:e5:4c:97:0c:1b:ce:a7:1f:17:cd:5c: d0:81:b9:e9:f4:35:5d:a7:27:76:39:af:fc:a3:53: 5c:37:97:92:58:ca:87:c4:ba:86:00:9e:45:28:36: 3c:bf:03:0f:2d:a6:b7:a3:79:19:c8:30:c4:e3:67: c6:6f:60:99:a0:e3:e7:fa:7e:d4:de:41:81:a2:9b: 76:43:96:d7:a5:31:08:1d:e1:80:16:17:8e:df:88: 4d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F0:78:E0:34:D7:AF:75:28:FE:3B:02:5F:F7:45:87:D9:65:4C:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cfa90f3-881b-3bd1-a44d-d26fadb9de95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:81:39:90:a0:5c:0b:1d:c3:06:90:47:c6:18:94:24:7f:c6: 79:00:12:2c:ea:6b:59:31:55:ae:f6:3d:eb:9a:5c:a4:29:d5: 4c:1c:98:68:e9:b3:e9:0c:f1:41:8d:42:b6:f4:53:44:07:0e: 78:bf:7e:ef:58:cf:0d:8a:57:16:6f:05:5b:0e:df:d7:3c:b0: 56:b7:65:66:d7:d5:64:cd:c0:18:1a:46:38:0e:a3:0b:e5:f8: 41:7c:48:cf:66:10:a9:7c:8f:98:78:3a:b2:f2:af:ab:c2:68: f2:fb:69:e4:4c:bb:6e:1d:58:13:62:b3:52:d3:3c:ee:63:b7: 45:84:8a:4c:6b:54:5c:43:28:6f:14:f2:0f:50:16:51:d2:e6: 63:e3:59:d8:04:d9:af:6d:8d:d2:fe:dd:6f:19:30:33:f0:81: 4f:26:6e:ba:39:2e:13:85:71:c1:93:2d:f1:a3:f8:7d:c7:7d: 65:60:f5:6b:44:21:d1:e8:50:71:d8:aa:bf:7f:78:d8:bf:fc: d9:bf:8a:57:dc:66:7c:02:ef:bf:de:2f:be:db:9f:3f:0e:cc: 53:b2:cb:07:15:71:44:91:17:b5:a1:f2:15:d9:70:f7:ea:48: 43:ce:63:de:cc:1f:35:17:e7:64:a4:26:98:56:97:b9:d1:00: 23:0f:98:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC2nOpS/vqH//SUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk NmQ0ZGFjNTEtNDI2Yy00MWU3LTk4OTgtNjYxMDU2YTQ2OGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk/o18M0iEGXaqcyREPYX8xeRChCV9jzw0WE QTsSY92ni/jifWMZo64ftvQs7Fpy3JDT9gRpxSK100I19AC5dxfv97UzeOuVwgcD rm1f/evRzHAZEdqz+tAvCLrAjOYSXczTHqPqc7CgeKjJonZthan7rz8B6Nb7bs7W YXq3tm8kfQ/ctG+ZHwowMPd7jRB7QcPhYlFTxdMgkE3zl76dxy/3yuhAmDzQ5UyX DBvOpx8XzVzQgbnp9DVdpyd2Oa/8o1NcN5eSWMqHxLqGAJ5FKDY8vwMPLaa3o3kZ yDDE42fGb2CZoOPn+n7U3kGBopt2Q5bXpTEIHeGAFheO34hNZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHweOA01691KP47Al/3RYfZZUxpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGNmYTkwZjMtODgxYi0z YmQxLWE0NGQtZDI2ZmFkYjlkZTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF94gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGBOZCgXAsdwwaQR8YYlCR/xnkAEizqa1kxVa72PeuaXKQp1UwcmGjp s+kM8UGNQrb0U0QHDni/fu9Yzw2KVxZvBVsO39c8sFa3ZWbX1WTNwBgaRjgOowvl +EF8SM9mEKl8j5h4OrLyr6vCaPL7aeRMu24dWBNis1LTPO5jt0WEikxrVFxDKG8U 8g9QFlHS5mPjWdgE2a9tjdL+3W8ZMDPwgU8mbro5LhOFccGTLfGj+H3HfWVg9WtE IdHoUHHYqr9/eNi//Nm/ilfcZnwC77/eL77bnz8OzFOyywcVcUSRF7Wh8hXZcPfq SEPOY97MHzUX52SkJphWl7nRACMPmMc= -----END CERTIFICATE-----Generated at Tue Jul 22 19:32:00 2025 by rpki-client