$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d4813b4-c479-3bfa-a1d6-ccecb022bf40.roa File: 8d4813b4-c479-3bfa-a1d6-ccecb022bf40.roa (raw, json) Hash identifier: GQmjiX7L+PHE+DEWaa2BYuYFcw3q5fGEJsm5uOzcB7Q= Subject key identifier: 87:0F:2C:66:FE:FE:11:5E:48:5A:41:4D:AD:EE:E0:1A:82:03:32:0D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8B0B734CDE8188CC54F0C0C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d4813b4-c479-3bfa-a1d6-ccecb022bf40.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 35994 IP address blocks: 23.222.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:73:4c:de:81:88:cc:54:f0:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=5b0f66e9-ff0c-429c-9af0-7d8dfcc64997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:df:ec:42:72:06:34:25:15:ed:45:e0:ff:5e: dc:9f:d5:10:3d:39:e7:63:12:6e:17:fb:ae:73:cc: 55:f1:90:e6:30:05:74:ec:87:5a:dd:d3:85:73:37: f5:92:87:c0:e9:df:8d:74:f7:6f:cb:04:e3:60:45: f1:8e:03:e8:c3:c9:03:4a:6e:1c:4e:f7:12:5c:b2: 80:48:c5:73:d6:b9:75:53:0b:f7:fc:63:b2:00:29: d7:03:ca:f9:e6:5d:74:1f:b2:02:27:e1:66:40:d5: df:2d:a5:3a:f0:32:e9:9e:8a:d3:07:d1:1f:ee:3d: 98:3a:15:e6:b3:61:4a:b9:e8:b5:48:cf:89:c0:9b: c3:59:7f:41:59:0c:74:2d:8d:41:f0:79:27:b2:79: 47:46:09:a9:32:f1:9f:d5:4b:60:49:cd:b1:c7:4c: dc:7e:76:6f:04:e9:ca:b7:92:62:1d:44:da:9b:e5: 3f:d5:26:d1:cd:24:84:47:20:02:ca:f4:42:29:84: 2f:6e:09:ae:03:a3:56:cd:ef:48:43:6c:17:46:73: 83:0a:64:4a:39:12:86:91:0b:df:99:fe:fc:d4:6b: d7:00:d0:18:8d:53:9d:68:1a:06:a6:0e:e6:fc:ac: 66:74:ab:07:1c:2e:75:43:a0:ad:7c:b3:07:50:5e: 57:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0F:2C:66:FE:FE:11:5E:48:5A:41:4D:AD:EE:E0:1A:82:03:32:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d4813b4-c479-3bfa-a1d6-ccecb022bf40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:e6:e0:de:4c:7c:5c:a4:a6:e2:eb:a7:af:6b:c7:2d:ac:aa: c9:2e:2c:55:be:6e:b2:56:1a:8c:0d:8a:3b:6b:72:a3:80:ee: 01:7f:d1:73:67:cf:9e:ee:dd:51:9a:89:f9:0c:df:ba:b6:2e: b4:46:28:46:b0:53:9e:35:fe:96:72:2b:28:d7:c7:6a:93:6c: 87:49:e8:d9:ce:c4:26:af:3c:44:2b:cb:cf:0b:ee:00:bf:ad: e5:bd:38:a7:fc:ce:cd:be:91:47:7e:1c:24:9e:2c:15:e6:46: 67:0c:ed:2d:5c:6c:3e:36:a5:b3:67:2d:fd:77:6d:df:50:c5: fc:22:79:0e:93:36:37:b3:59:60:a1:13:b8:c8:af:88:75:e9: d2:cc:c0:5a:ed:3e:55:69:9e:f7:20:45:1b:58:2a:ce:4c:bc: c2:25:6b:26:f1:76:ce:96:cd:a5:50:71:a6:d3:b8:7b:79:9a: 97:49:63:d5:fd:00:b5:c2:a4:b5:1b:63:37:d9:7e:35:46:81: ce:7a:71:bc:de:a9:e3:81:fe:3b:c2:47:d7:5f:7a:93:8e:7f: 38:3c:b7:c1:2f:8a:88:81:d7:1c:0d:2e:ae:4c:53:a9:0b:db: 20:6f:5e:18:f7:73:de:6c:4d:31:e0:27:a5:62:66:02:7f:66: 8a:bf:43:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC3NM3oGIzFTwwMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk NWIwZjY2ZTktZmYwYy00MjljLTlhZjAtN2Q4ZGZjYzY0OTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit/sQnIGNCUV7UXg/17cn9UQPTnnYxJuF/uu c8xV8ZDmMAV07Ida3dOFczf1kofA6d+NdPdvywTjYEXxjgPow8kDSm4cTvcSXLKA SMVz1rl1Uwv3/GOyACnXA8r55l10H7ICJ+FmQNXfLaU68DLpnorTB9Ef7j2YOhXm s2FKuei1SM+JwJvDWX9BWQx0LY1B8HknsnlHRgmpMvGf1UtgSc2xx0zcfnZvBOnK t5JiHUTam+U/1SbRzSSERyACyvRCKYQvbgmuA6NWze9IQ2wXRnODCmRKORKGkQvf mf781GvXANAYjVOdaBoGpg7m/KxmdKsHHC51Q6CtfLMHUF5X0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcPLGb+/hFeSFpBTa3u4BqCAzINMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGQ0ODEzYjQtYzQ3OS0z YmZhLWExZDYtY2NlY2IwMjJiZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF97zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDm4N5MfFykpuLrp69rxy2sqskuLFW+brJWGowNijtrcqOA7gF/0XNn z57u3VGaifkM37q2LrRGKEawU541/pZyKyjXx2qTbIdJ6NnOxCavPEQry88L7gC/ reW9OKf8zs2+kUd+HCSeLBXmRmcM7S1cbD42pbNnLf13bd9QxfwieQ6TNjezWWCh E7jIr4h16dLMwFrtPlVpnvcgRRtYKs5MvMIlaybxds6WzaVQcabTuHt5mpdJY9X9 ALXCpLUbYzfZfjVGgc56cbzeqeOB/jvCR9dfepOOfzg8t8EvioiB1xwNLq5MU6kL 2yBvXhj3c95sTTHgJ6ViZgJ/Zoq/Q5c= -----END CERTIFICATE-----Generated at Wed Jul 23 01:29:28 2025 by rpki-client