$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8c6eba2-22d2-38e8-9d5c-36522279ef55.roa File: a8c6eba2-22d2-38e8-9d5c-36522279ef55.roa (raw, json) Hash identifier: lhbFom16dFojUdgaP14zQUDkRntlHnP03bIZqAJkEUc= Subject key identifier: E0:E7:4B:B0:E4:5C:2D:EE:7C:3E:B7:D3:6C:EE:52:9F:3B:70:1A:10 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8B0B6EDB8D187C472CCA2680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8c6eba2-22d2-38e8-9d5c-36522279ef55.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 16625 IP address blocks: 23.220.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:6e:db:8d:18:7c:47:2c:ca:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=6e703d29-a7d4-406b-8f28-294bc40c7961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8e:04:b8:95:21:d2:8a:07:eb:d3:6e:5b:77: f4:19:ae:f2:33:f3:9e:2a:ef:df:5c:da:a7:ea:cc: e5:bc:57:6b:89:0a:72:f8:87:65:e1:14:5b:9c:1b: d0:03:a2:28:c5:8b:51:2c:91:ab:92:67:e1:34:ad: f5:03:01:e0:dd:40:1e:b9:5b:8a:f5:ed:3d:46:df: d5:0b:c6:e5:0f:5f:56:40:b1:40:16:e0:13:47:b8: f3:47:60:ba:59:5b:95:73:c2:85:1b:7c:aa:53:6f: 61:fa:6f:9a:ab:c9:d6:f0:42:5a:f3:11:09:46:b9: 91:e1:29:21:ad:07:a3:70:70:0e:26:07:cb:15:06: 5c:8e:2b:3b:57:79:77:59:f8:06:c8:2c:d3:97:d2: 19:13:85:74:2e:36:92:0c:de:f6:07:50:36:d5:cf: 73:02:2b:d5:8e:a4:a0:89:aa:cf:26:6c:7d:06:d2: 9c:a3:58:1d:fb:2e:59:53:79:2a:ac:f8:49:e9:9b: 12:6c:75:31:8a:0b:29:ba:dc:11:be:d5:b6:5d:f9: ce:d8:98:57:f1:87:34:93:6a:42:02:8e:fd:0c:c0: d3:b8:51:78:4a:99:61:ec:56:fa:18:83:ad:58:b2: 4f:60:b8:6c:72:1b:47:26:7f:b5:eb:57:79:54:ee: ef:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E7:4B:B0:E4:5C:2D:EE:7C:3E:B7:D3:6C:EE:52:9F:3B:70:1A:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8c6eba2-22d2-38e8-9d5c-36522279ef55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:a2:72:1b:49:0f:75:0a:f7:b2:eb:12:f0:a5:f5:c3:c5:12: 00:d9:a1:c4:34:c9:39:9c:25:3c:51:8e:8e:e7:27:a8:fa:f1: 00:81:fb:63:d5:8b:54:c4:73:e4:90:b4:e6:91:26:8f:73:17: 1e:ce:dc:4f:b4:da:a6:7d:94:d1:12:fc:e3:e2:66:7e:7f:c4: cd:6f:03:fb:c2:16:04:84:04:b1:a1:ce:03:05:7c:48:83:93: 27:ac:15:ad:66:d5:90:6d:7c:c7:06:dd:2b:b2:7c:02:ff:da: 43:a3:78:9b:1e:b7:cc:f6:6e:fa:05:c3:52:eb:af:c2:cc:94: 1b:3d:81:c1:a3:77:36:2e:cd:90:37:3e:49:5d:e0:54:2d:27: e3:94:87:f9:59:b0:34:bd:91:0a:93:98:83:65:90:7c:36:e5: 63:46:12:87:ca:71:f8:8b:75:4b:92:fb:83:b0:e2:87:58:19: 25:b2:c4:f5:14:56:04:14:26:0e:4e:5c:13:73:d8:21:5e:09: bc:15:f2:2c:22:4c:a2:5a:62:ce:8c:d2:d1:2c:d2:82:3c:19: 06:80:d6:fa:1a:d9:54:bd:e9:75:22:69:38:ff:48:60:62:0c: 49:c5:95:63:f0:65:f7:cb:ed:49:20:46:8b:6a:07:d4:31:3f: e5:9d:ca:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC27bjRh8RyzKJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk NmU3MDNkMjktYTdkNC00MDZiLThmMjgtMjk0YmM0MGM3OTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY4EuJUh0ooH69NuW3f0Ga7yM/OeKu/fXNqn 6szlvFdriQpy+Idl4RRbnBvQA6IoxYtRLJGrkmfhNK31AwHg3UAeuVuK9e09Rt/V C8blD19WQLFAFuATR7jzR2C6WVuVc8KFG3yqU29h+m+aq8nW8EJa8xEJRrmR4Skh rQejcHAOJgfLFQZcjis7V3l3WfgGyCzTl9IZE4V0LjaSDN72B1A21c9zAivVjqSg iarPJmx9BtKco1gd+y5ZU3kqrPhJ6ZsSbHUxigsputwRvtW2XfnO2JhX8Yc0k2pC Ao79DMDTuFF4Splh7Fb6GIOtWLJPYLhschtHJn+161d5VO7viwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODnS7DkXC3ufD6302zuUp87cBoQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYThjNmViYTItMjJkMi0z OGU4LTlkNWMtMzY1MjIyNzllZjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9x4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+ichtJD3UK97LrEvCl9cPFEgDZocQ0yTmcJTxRjo7nJ6j68QCB+2PV i1TEc+SQtOaRJo9zFx7O3E+02qZ9lNES/OPiZn5/xM1vA/vCFgSEBLGhzgMFfEiD kyesFa1m1ZBtfMcG3SuyfAL/2kOjeJset8z2bvoFw1Lrr8LMlBs9gcGjdzYuzZA3 Pkld4FQtJ+OUh/lZsDS9kQqTmINlkHw25WNGEofKcfiLdUuS+4Ow4odYGSWyxPUU VgQUJg5OXBNz2CFeCbwV8iwiTKJaYs6M0tEs0oI8GQaA1voa2VS96XUiaTj/SGBi DEnFlWPwZffL7UkgRotqB9QxP+WdylI= -----END CERTIFICATE-----Generated at Tue Jul 22 19:38:41 2025 by rpki-client