$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ac02742-5556-3eb7-85a2-f33b5f8fcd94.roa File: 9ac02742-5556-3eb7-85a2-f33b5f8fcd94.roa (raw, json) Hash identifier: 5VdDZRgR1u7Atro+/1Rxbw913TPmFbjE3HzSRiadlvs= Subject key identifier: 2B:37:A9:6E:8B:CF:36:A9:2F:27:52:6B:C8:AA:F9:10:6E:A0:26:65 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8B0B707FAB50D80DB70F91E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ac02742-5556-3eb7-85a2-f33b5f8fcd94.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.221.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:70:7f:ab:50:d8:0d:b7:0f:91:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=4e0bbcde-aa76-4708-bffd-e7d65ed87623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c1:3c:71:9c:85:f7:fd:74:a1:65:a1:a5:64: 99:2f:51:2b:c1:8c:8f:11:c7:50:ed:d4:97:78:c7: 80:a3:f9:e5:b2:85:4b:1b:5a:60:e1:cf:1b:02:4e: 73:af:0f:d9:ae:30:e8:a4:0f:ad:d7:2b:15:4c:cf: 66:d7:3a:e8:82:9b:d0:ff:0a:d7:7e:13:be:76:dd: a0:1e:b0:11:c4:fd:3e:15:d1:b3:9a:f2:14:41:dc: 2e:ed:4b:7b:28:c5:7a:70:96:a4:c2:12:b5:ec:17: 40:62:f6:97:03:40:8b:d0:11:bd:11:dc:ee:3c:86: f7:56:f9:04:45:1f:1a:61:ad:4a:95:9e:24:8b:58: aa:42:8b:e7:80:69:df:48:20:43:13:95:4b:51:a8: 4f:6e:c9:8d:dc:08:08:2b:75:2e:e4:67:4e:20:a2: f8:90:af:ef:2b:e3:11:90:06:a6:66:28:e9:02:50: ec:b0:ff:3d:63:79:19:76:56:a8:b0:ae:f4:96:70: 13:3e:3c:96:26:bb:6b:2c:35:7c:08:93:69:71:7b: fd:ea:7a:4a:d1:33:0c:5a:7a:81:a3:76:c5:5e:d7: 90:7a:00:e4:ab:d1:31:c2:1e:78:6a:84:cb:50:e0: 24:3f:1f:3e:2d:94:76:41:6c:c7:71:e8:38:76:d8: 55:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:37:A9:6E:8B:CF:36:A9:2F:27:52:6B:C8:AA:F9:10:6E:A0:26:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ac02742-5556-3eb7-85a2-f33b5f8fcd94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:48:df:55:45:92:af:4a:11:c1:51:26:c6:bb:2a:3e:4f:16: d1:4a:1b:6d:52:32:8b:ad:a1:bd:40:89:c8:22:42:65:fc:37: 66:96:b3:f3:19:b2:63:da:1d:c9:2a:6c:75:1f:12:97:c1:fa: eb:4b:32:58:9d:bf:e8:59:4a:59:38:f6:24:31:4a:90:01:a5: dd:ff:0a:cd:82:9b:21:58:fd:ad:fd:3c:95:b8:77:7e:e2:bb: 86:bc:88:dd:82:2f:a8:52:e9:49:1a:60:f2:91:7c:f6:d8:6d: 83:c6:eb:9b:1d:36:29:a5:18:7a:5c:3e:e5:cb:58:70:d5:c6: 92:3b:f2:d6:c8:87:db:2e:98:9a:ed:ed:f7:38:7a:9f:0f:90: 90:82:bb:5d:06:1d:33:ab:7f:ef:63:8d:dc:4d:2c:c0:a9:d8: 24:5b:be:a8:1a:4d:12:43:70:a1:5f:d3:5d:73:63:7b:74:d3: 75:d0:ea:d8:f8:a4:a7:b9:51:d9:93:d2:51:98:d9:06:6a:bb: 4b:0f:c4:e0:0c:58:34:4a:e9:4b:20:35:69:b1:fb:18:c4:46: ce:d2:8d:58:47:70:63:8f:b7:29:d2:89:40:c2:b7:8b:26:60: b5:64:b3:39:71:a7:ad:62:5c:95:a8:59:d4:56:05:69:62:a0: 7e:9a:3e:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC3B/q1DYDbcPkeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk NGUwYmJjZGUtYWE3Ni00NzA4LWJmZmQtZTdkNjVlZDg3NjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcE8cZyF9/10oWWhpWSZL1ErwYyPEcdQ7dSX eMeAo/nlsoVLG1pg4c8bAk5zrw/ZrjDopA+t1ysVTM9m1zrogpvQ/wrXfhO+dt2g HrARxP0+FdGzmvIUQdwu7Ut7KMV6cJakwhK17BdAYvaXA0CL0BG9EdzuPIb3VvkE RR8aYa1KlZ4ki1iqQovngGnfSCBDE5VLUahPbsmN3AgIK3Uu5GdOIKL4kK/vK+MR kAamZijpAlDssP89Y3kZdlaosK70lnATPjyWJrtrLDV8CJNpcXv96npK0TMMWnqB o3bFXteQegDkq9Exwh54aoTLUOAkPx8+LZR2QWzHceg4dthVNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCs3qW6LzzapLydSa8iq+RBuoCZlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWFjMDI3NDItNTU1Ni0z ZWI3LTg1YTItZjMzYjVmOGZjZDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF90WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlI31VFkq9KEcFRJsa7Kj5PFtFKG21SMoutob1AicgiQmX8N2aWs/MZ smPaHckqbHUfEpfB+utLMlidv+hZSlk49iQxSpABpd3/Cs2CmyFY/a39PJW4d37i u4a8iN2CL6hS6UkaYPKRfPbYbYPG65sdNimlGHpcPuXLWHDVxpI78tbIh9sumJrt 7fc4ep8PkJCCu10GHTOrf+9jjdxNLMCp2CRbvqgaTRJDcKFf011zY3t003XQ6tj4 pKe5UdmT0lGY2QZqu0sPxOAMWDRK6UsgNWmx+xjERs7SjVhHcGOPtynSiUDCt4sm YLVkszlxp61iXJWoWdRWBWlioH6aPlM= -----END CERTIFICATE-----Generated at Wed Jul 23 01:46:02 2025 by rpki-client