$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fd8a58e-620e-3a3b-afab-b7c249b0ac16.roa File: 5fd8a58e-620e-3a3b-afab-b7c249b0ac16.roa (raw, json) Hash identifier: dKMTXct3LVNS0TmJitmiEFtrkIKLHl9Grpemja3YpQA= Subject key identifier: 66:A5:3F:FA:C2:9B:82:3A:93:A9:A9:6A:57:5A:D6:2C:D1:45:6F:1A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8B0B6FB34C4A3155656EDEC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fd8a58e-620e-3a3b-afab-b7c249b0ac16.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 16625 IP address blocks: 23.220.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:6f:b3:4c:4a:31:55:65:6e:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=1048cf0b-5608-4065-8e7d-144345f5848a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f2:be:1e:45:77:7c:c8:cb:b9:65:86:75:d8: a4:2c:39:e4:b5:56:f0:fc:1e:c8:2e:5f:50:46:60: be:ca:80:79:d5:9d:89:23:26:3c:04:36:ab:1a:df: 7a:1b:b5:89:8d:ab:a3:d5:18:c6:ec:0b:f8:72:2d: 58:b2:45:2e:8e:fa:41:8f:bb:d8:8a:8c:c4:6e:d0: f5:bd:26:1c:3d:d3:c8:62:c7:4f:20:98:b2:4a:7d: c1:5d:9b:f1:f3:e0:23:c6:1d:c4:ff:02:dc:cd:58: 5f:d6:7a:0c:1a:3e:d9:e2:ca:6c:fb:66:33:44:3d: b1:5b:4f:ff:53:f6:bc:97:4e:cb:39:15:ef:fe:44: b0:39:b0:bd:66:b1:a4:09:3e:54:fc:78:c6:fb:42: 1f:29:b9:ba:da:f8:2d:91:d3:08:f9:d7:99:a4:0c: ab:0c:7c:ca:d7:7a:6c:bb:ac:e7:75:00:e3:c8:33: 39:48:54:e6:2f:50:0b:ee:6e:35:51:9a:8e:cd:7f: be:39:a7:c1:1b:c5:3b:4c:3c:a7:bf:f2:08:81:eb: c0:3a:91:4b:13:31:3b:95:d3:bd:2f:63:92:9b:57: 0a:81:7d:e7:c8:a7:0d:58:56:1a:d6:a1:6c:61:9e: 41:e3:37:94:96:ce:f8:5f:08:17:30:95:29:b4:80: 6d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A5:3F:FA:C2:9B:82:3A:93:A9:A9:6A:57:5A:D6:2C:D1:45:6F:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fd8a58e-620e-3a3b-afab-b7c249b0ac16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:fa:16:89:48:17:e7:17:3c:35:da:9f:cd:14:07:6a:37:77: 6e:81:4e:b5:40:ff:a0:c6:15:60:a9:e8:b1:e9:7e:0d:ae:fd: 22:b7:52:b4:8c:92:c2:98:a0:2e:8c:74:e9:5e:4d:d5:ea:9b: 1c:72:0d:8d:40:71:4d:46:bb:8a:be:e4:3c:c0:96:0b:b0:3a: b2:ef:59:c0:5c:40:9f:fe:6f:b1:04:fa:e4:d3:09:a8:40:bb: 36:95:23:45:7c:79:aa:ca:80:7c:a4:02:2b:05:56:9d:2a:b5: 18:16:7d:65:e9:9d:07:53:ee:26:93:95:34:3e:9f:96:27:54: 5c:e5:b8:61:84:2a:e1:bd:8b:c7:a0:30:38:89:a9:02:ea:07: 30:22:32:fa:38:ac:d6:7c:87:e7:48:21:0d:3d:c5:fb:55:ad: f7:ec:25:c7:10:58:0f:e3:d7:59:28:d8:8e:ad:ff:61:1e:b6: d0:2e:46:2e:7d:78:a9:57:97:7b:c7:26:e1:81:6c:20:8f:13: c9:e9:14:4b:45:c6:1e:52:9b:83:fc:f9:6f:76:f6:6e:05:26: 79:20:7a:16:15:39:e2:9c:4e:d3:fe:d4:4e:cc:af:88:f9:71: f0:6c:e3:75:e8:89:33:a7:06:38:7f:1c:2b:0c:1c:e5:c2:02: 4e:0e:8d:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC2+zTEoxVWVu3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk MTA0OGNmMGItNTYwOC00MDY1LThlN2QtMTQ0MzQ1ZjU4NDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PK+HkV3fMjLuWWGddikLDnktVbw/B7ILl9Q RmC+yoB51Z2JIyY8BDarGt96G7WJjauj1RjG7Av4ci1YskUujvpBj7vYiozEbtD1 vSYcPdPIYsdPIJiySn3BXZvx8+Ajxh3E/wLczVhf1noMGj7Z4sps+2YzRD2xW0// U/a8l07LORXv/kSwObC9ZrGkCT5U/HjG+0IfKbm62vgtkdMI+deZpAyrDHzK13ps u6zndQDjyDM5SFTmL1AL7m41UZqOzX++OafBG8U7TDynv/IIgevAOpFLEzE7ldO9 L2OSm1cKgX3nyKcNWFYa1qFsYZ5B4zeUls74XwgXMJUptIBtWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGalP/rCm4I6k6mpalda1izRRW8aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWZkOGE1OGUtNjIwZS0z YTNiLWFmYWItYjdjMjQ5YjBhYzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9zYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACv6FolIF+cXPDXan80UB2o3d26BTrVA/6DGFWCp6LHpfg2u/SK3UrSM ksKYoC6MdOleTdXqmxxyDY1AcU1Gu4q+5DzAlguwOrLvWcBcQJ/+b7EE+uTTCahA uzaVI0V8earKgHykAisFVp0qtRgWfWXpnQdT7iaTlTQ+n5YnVFzluGGEKuG9i8eg MDiJqQLqBzAiMvo4rNZ8h+dIIQ09xftVrffsJccQWA/j11ko2I6t/2EettAuRi59 eKlXl3vHJuGBbCCPE8npFEtFxh5Sm4P8+W929m4FJnkgehYVOeKcTtP+1E7Mr4j5 cfBs43XoiTOnBjh/HCsMHOXCAk4OjT8= -----END CERTIFICATE-----Generated at Tue Jul 22 19:32:53 2025 by rpki-client