$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a597263b-dc11-3506-80e2-e26124db9b91.roa File: a597263b-dc11-3506-80e2-e26124db9b91.roa (raw, json) Hash identifier: XbnYHDT8I2mJV5kA2BXB5wBnv3R0mGTpJcY1c6AOutA= Subject key identifier: CF:F2:48:A7:22:6B:BB:01:B8:93:81:BA:1A:65:6C:8C:FE:58:BB:BA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8B0B67641CA9F734A83A3300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a597263b-dc11-3506-80e2-e26124db9b91.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.220.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:67:64:1c:a9:f7:34:a8:3a:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=e50f9f50-705a-432a-a8b4-945739f35d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:28:5e:89:62:21:8f:28:36:63:26:b7:d9:78: 39:a2:03:72:31:94:70:7c:52:50:8d:72:db:29:9c: 16:87:d4:21:25:c8:f2:01:e3:d5:c0:b4:d6:a9:af: 82:d9:b5:d9:34:f3:29:d6:7f:00:ec:2b:f5:ea:ff: 9e:80:16:9f:ee:8b:56:0a:71:9f:2e:38:a8:74:e5: 65:92:7e:fd:39:ce:93:47:d1:d8:2b:05:85:f6:6d: 58:6b:63:1e:90:31:39:47:bd:2d:60:16:6f:81:d4: 21:8a:e5:01:36:fc:21:fa:3f:61:eb:69:28:e2:a6: c5:78:5f:51:59:d5:40:e2:01:e9:67:09:e1:78:e2: 41:c4:7d:2c:75:04:12:92:74:25:58:c4:d1:bd:d4: c9:b2:75:44:1c:2d:0f:62:85:91:b0:d3:75:19:b6: 5e:50:94:f5:5c:6a:0d:10:8c:5f:79:25:f5:1f:42: 45:03:8b:e8:0d:7d:7d:90:58:21:8a:8c:02:b9:13: ca:a6:fa:fc:a7:44:08:28:6d:87:cd:2b:5c:08:d4: 12:c5:e6:1a:3f:df:ed:74:46:29:46:93:9f:91:a3: 73:db:ca:8a:c1:09:e7:ec:66:a8:41:2d:fd:6a:e9: 5e:c9:c9:14:73:3e:af:5f:90:d0:f5:c5:d9:3e:51: d9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F2:48:A7:22:6B:BB:01:B8:93:81:BA:1A:65:6C:8C:FE:58:BB:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a597263b-dc11-3506-80e2-e26124db9b91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:98:48:5d:03:62:72:f3:ba:13:6f:f7:57:bc:24:61:46:6e: 15:b0:19:90:9b:04:d3:a1:ed:d1:55:af:7d:5b:33:58:0f:89: 27:8c:52:28:6e:92:ba:e6:06:54:06:db:b1:5a:11:6b:f6:c6: 7a:c5:9f:25:07:91:03:d2:b4:91:3a:a6:29:71:59:a9:2c:46: 4e:01:bb:92:93:75:c0:9c:f6:fc:a5:62:e7:2b:97:45:73:fb: b7:ab:7b:d2:d2:41:2a:3d:ba:5f:92:41:88:1e:33:8c:96:65: 89:3c:3c:d0:e6:90:02:f7:97:a6:b0:1b:dc:c2:e1:76:6b:f1: da:42:82:e7:a0:23:5a:27:fa:2b:eb:22:c2:23:d2:e9:da:2e: 97:3c:94:62:ba:f1:cd:50:e2:22:a4:fb:c6:5d:ac:cd:8b:fc: 9e:e2:73:5d:41:8d:d4:84:23:c2:b9:76:35:02:95:73:42:53: 11:62:22:87:82:f7:78:07:e6:6d:e2:bd:9b:3d:cc:8e:2a:d5: 3e:a4:31:09:97:35:ba:db:92:e4:de:66:92:f4:3a:47:e9:60: 85:e6:45:eb:34:23:4f:eb:2f:2e:95:3a:24:b8:45:9c:32:2b: 09:bc:8c:57:4f:ae:f7:eb:a8:7a:ed:ff:31:9e:2d:01:b8:f9: 94:65:ca:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC2dkHKn3NKg6MwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk ZTUwZjlmNTAtNzA1YS00MzJhLWE4YjQtOTQ1NzM5ZjM1ZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyheiWIhjyg2Yya32Xg5ogNyMZRwfFJQjXLb KZwWh9QhJcjyAePVwLTWqa+C2bXZNPMp1n8A7Cv16v+egBaf7otWCnGfLjiodOVl kn79Oc6TR9HYKwWF9m1Ya2MekDE5R70tYBZvgdQhiuUBNvwh+j9h62ko4qbFeF9R WdVA4gHpZwnheOJBxH0sdQQSknQlWMTRvdTJsnVEHC0PYoWRsNN1GbZeUJT1XGoN EIxfeSX1H0JFA4voDX19kFghiowCuRPKpvr8p0QIKG2HzStcCNQSxeYaP9/tdEYp RpOfkaNz28qKwQnn7GaoQS39auleyckUcz6vX5DQ9cXZPlHZAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/ySKcia7sBuJOBuhplbIz+WLu6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTU5NzI2M2ItZGMxMS0z NTA2LTgwZTItZTI2MTI0ZGI5YjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9yiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCYSF0DYnLzuhNv91e8JGFGbhWwGZCbBNOh7dFVr31bM1gPiSeMUihu krrmBlQG27FaEWv2xnrFnyUHkQPStJE6pilxWaksRk4Bu5KTdcCc9vylYucrl0Vz +7ere9LSQSo9ul+SQYgeM4yWZYk8PNDmkAL3l6awG9zC4XZr8dpCguegI1on+ivr IsIj0unaLpc8lGK68c1Q4iKk+8ZdrM2L/J7ic11BjdSEI8K5djUClXNCUxFiIoeC 93gH5m3ivZs9zI4q1T6kMQmXNbrbkuTeZpL0OkfpYIXmRes0I0/rLy6VOiS4RZwy Kwm8jFdPrvfrqHrt/zGeLQG4+ZRlyvI= -----END CERTIFICATE-----Generated at Wed Jul 23 01:53:15 2025 by rpki-client