$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52b7f17a-1a4f-30b2-aa32-605cee7cdaca.roa File: 52b7f17a-1a4f-30b2-aa32-605cee7cdaca.roa (raw, json) Hash identifier: kilK2Q4LBx1X6H25KGfGzCx4u+Qbvk8vTcxJ1Xbmct4= Subject key identifier: 55:71:9F:6C:86:0C:47:B9:43:2A:CD:CF:CA:35:C8:A2:3D:8F:22:B9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8B0B6F2AB06580E8F8920900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52b7f17a-1a4f-30b2-aa32-605cee7cdaca.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.220.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:6f:2a:b0:65:80:e8:f8:92:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=dc551724-03d5-486d-9c53-4421bc21d5bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1c:15:21:11:2d:a9:05:9d:b4:b7:dd:1c:c4: 7e:f1:2c:04:9b:92:ab:1e:b5:c3:bc:96:c0:44:bc: 5c:4e:4a:17:ad:1f:80:ff:f0:51:a2:bd:f7:3b:17: 0c:94:d2:ce:07:f7:c1:dd:08:b9:65:5d:4c:16:9c: 78:6b:34:e3:1e:f5:0f:49:ed:e0:30:c9:0c:60:56: 5c:67:d4:cc:32:1c:70:c5:b1:c3:c8:34:66:94:c0: 34:ab:e1:72:34:91:ed:39:17:78:47:08:5f:11:02: 2f:85:32:e2:c0:fa:93:ce:79:ba:ae:9f:43:c2:a8: a7:1e:a6:6b:92:63:bd:88:ff:66:36:ca:be:2d:76: 90:2b:af:2f:ca:90:b6:a2:d3:08:3e:99:6c:8e:1b: c0:f9:eb:42:f8:32:20:18:80:a6:69:7e:c7:fc:8d: 5f:9f:50:70:81:52:31:02:39:b2:de:87:6f:03:f9: bc:f5:04:67:f1:08:32:38:8a:a0:26:04:ee:0c:d4: 1e:84:e8:02:3b:92:78:96:7a:40:9d:b4:da:e4:0e: 89:f4:cb:b6:f3:49:7b:1f:67:2c:d3:73:43:9e:07: 2c:18:70:fa:05:f1:3d:50:c4:72:ac:d5:ca:ff:04: 3f:55:44:66:9a:70:71:b9:aa:31:bd:44:cf:02:09: 8f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:71:9F:6C:86:0C:47:B9:43:2A:CD:CF:CA:35:C8:A2:3D:8F:22:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52b7f17a-1a4f-30b2-aa32-605cee7cdaca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:86:48:33:b5:d0:e9:84:0a:65:2c:3e:f3:44:97:b3:52:8e: 0f:3f:22:98:01:35:7f:17:d9:35:02:2e:35:8a:2d:f4:0d:32: 83:cb:9e:b8:0a:15:29:94:65:8c:5f:ae:eb:eb:19:7e:91:cd: 95:76:89:0f:2b:1b:74:93:47:ef:87:ba:4d:01:f1:db:da:23: 7d:66:a3:50:d1:b9:15:85:c8:f4:50:b6:7b:c3:ea:7b:19:2e: 2d:e4:5f:11:f0:49:f9:8a:aa:57:fe:21:e6:2c:02:f6:92:de: 1e:9b:ad:02:af:88:2c:44:b2:8c:20:56:18:f8:1a:07:0e:1f: b1:1d:d5:a1:7c:d6:22:74:99:97:b4:0e:f4:f1:a0:64:8d:57: 97:0b:2b:89:d2:5c:8f:50:42:8a:be:d0:ca:9d:22:db:51:4f: 47:0a:be:45:52:d8:a3:95:33:45:12:a9:04:e1:9d:41:0c:cb: 8c:5b:dc:57:93:5f:a4:42:ed:78:f4:7f:8d:2c:4d:fa:56:29: ee:b4:1f:a6:61:45:a1:9e:ba:5c:a8:16:75:eb:b6:3e:d7:ee: 4a:76:4f:fe:f2:b9:00:f7:3e:ff:94:98:e9:11:02:7b:07:aa: f6:2f:c0:8b:9c:f5:e9:6e:7d:8c:c2:28:61:33:ca:52:86:4e: 6d:bf:ee:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC28qsGWA6PiSCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk ZGM1NTE3MjQtMDNkNS00ODZkLTljNTMtNDQyMWJjMjFkNWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghwVIREtqQWdtLfdHMR+8SwEm5KrHrXDvJbA RLxcTkoXrR+A//BRor33OxcMlNLOB/fB3Qi5ZV1MFpx4azTjHvUPSe3gMMkMYFZc Z9TMMhxwxbHDyDRmlMA0q+FyNJHtORd4RwhfEQIvhTLiwPqTznm6rp9DwqinHqZr kmO9iP9mNsq+LXaQK68vypC2otMIPplsjhvA+etC+DIgGICmaX7H/I1fn1BwgVIx Ajmy3odvA/m89QRn8QgyOIqgJgTuDNQehOgCO5J4lnpAnbTa5A6J9Mu280l7H2cs 03NDngcsGHD6BfE9UMRyrNXK/wQ/VURmmnBxuaoxvUTPAgmPVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVxn2yGDEe5QyrNz8o1yKI9jyK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTJiN2YxN2EtMWE0Zi0z MGIyLWFhMzItNjA1Y2VlN2NkYWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9yjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASGSDO10OmECmUsPvNEl7NSjg8/IpgBNX8X2TUCLjWKLfQNMoPLnrgK FSmUZYxfruvrGX6RzZV2iQ8rG3STR++Huk0B8dvaI31mo1DRuRWFyPRQtnvD6nsZ Li3kXxHwSfmKqlf+IeYsAvaS3h6brQKviCxEsowgVhj4GgcOH7Ed1aF81iJ0mZe0 DvTxoGSNV5cLK4nSXI9QQoq+0MqdIttRT0cKvkVS2KOVM0USqQThnUEMy4xb3FeT X6RC7Xj0f40sTfpWKe60H6ZhRaGeulyoFnXrtj7X7kp2T/7yuQD3Pv+UmOkRAnsH qvYvwIuc9elufYzCKGEzylKGTm2/7lI= -----END CERTIFICATE-----Generated at Wed Jul 23 01:30:13 2025 by rpki-client