$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac2d5ba9-0fe6-3e4d-993c-039f1e186a94.roa File: ac2d5ba9-0fe6-3e4d-993c-039f1e186a94.roa (raw, json) Hash identifier: Nmh9HB+8rFNtTFb9FEu2CfGgJakxJmsvTFLAOlI23c8= Subject key identifier: D8:B2:25:3F:B5:B1:42:2D:A6:07:4B:55:DF:D9:C2:69:AB:A1:47:61 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8B0B70CC1D915299F45CB780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac2d5ba9-0fe6-3e4d-993c-039f1e186a94.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.221.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:70:cc:1d:91:52:99:f4:5c:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=9f00ed30-5980-45cf-b467-ce63f019216b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bd:2c:33:e8:87:44:cb:bd:0a:91:7d:85:0f: 35:35:a6:d5:45:c0:b7:ea:9e:21:85:ff:8a:aa:4b: 17:dc:a2:d1:99:50:0b:8f:01:c6:95:c8:12:ad:3e: c9:b2:ed:d7:4c:7d:37:c4:a1:cb:c6:9e:ab:a9:6d: c1:7a:91:46:46:69:e5:3d:b9:84:1d:4e:8c:e5:99: 52:83:e3:f6:1b:db:a0:e0:54:de:d6:49:06:bc:3f: c8:6e:15:77:fb:d6:88:d4:d0:51:47:05:ad:de:88: 87:8b:f3:09:65:2d:75:bc:ce:d9:f4:71:99:ef:c9: b4:dc:ab:8b:82:23:e1:fe:b7:a8:a4:0c:fd:e9:48: 71:33:a7:b9:7a:d5:e3:1c:e6:c8:4c:5a:af:ba:4d: 6b:8d:82:b5:66:c6:c1:43:e5:e9:3f:86:d6:f8:e3: c6:f6:87:8c:fc:7c:f9:81:53:e1:51:f7:bc:70:c8: 35:15:94:6e:64:32:5b:db:bb:93:30:29:aa:a0:94: 26:3a:ae:94:30:3a:23:59:b2:69:a4:1e:70:ba:ca: b7:9a:e6:7d:b2:bb:f4:ee:ab:14:2e:ed:f7:76:d7: 65:3f:a4:69:11:dd:a5:4b:16:f7:5f:9a:35:c5:b1: b0:65:0b:2e:e4:3e:55:3f:5e:ca:4c:64:9c:e7:44: 2d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B2:25:3F:B5:B1:42:2D:A6:07:4B:55:DF:D9:C2:69:AB:A1:47:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac2d5ba9-0fe6-3e4d-993c-039f1e186a94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:58:79:52:cf:04:5b:ea:0a:fa:95:d2:9f:19:0a:96:6a:3e: 88:25:6d:3c:3f:e3:38:7b:c2:ea:01:3d:08:65:cb:d5:4e:cc: 1b:de:e1:b3:18:53:eb:8a:82:29:02:76:11:19:25:5c:68:53: 31:86:6b:3a:55:6e:d3:c6:22:ef:a7:67:31:cc:38:a4:8e:96: e4:85:db:57:17:f3:9f:e1:33:b1:ff:e2:c6:e9:eb:98:5d:57: bc:8d:54:35:15:d8:9d:f1:28:dc:e3:a6:5f:9a:f4:bc:33:f0: 9e:3d:25:1c:fe:22:6c:ed:d2:09:eb:f4:50:05:a9:21:52:f4: af:5d:fa:2e:73:3e:c6:08:a5:42:b9:de:cd:38:1e:d7:5c:25: 21:0f:c1:77:7d:ae:15:91:0e:cc:94:79:9a:28:d6:81:79:ef: 96:35:fd:4d:3c:66:ad:02:df:0c:4f:56:a9:97:0f:7d:39:13: 3d:5a:e7:fa:17:32:ca:96:5c:99:13:3f:9e:c0:5f:ef:d5:16: 43:2e:e1:3b:f5:8d:36:fa:00:04:00:d3:1e:97:c1:00:97:b2: b6:53:3c:b6:9e:ac:80:5a:ab:33:67:9f:55:a7:62:ac:96:3e: 39:88:46:0b:24:da:b3:68:0b:a2:7e:d3:ad:79:5c:83:44:91: 68:90:81:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC3DMHZFSmfRct4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk OWYwMGVkMzAtNTk4MC00NWNmLWI0NjctY2U2M2YwMTkyMTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb0sM+iHRMu9CpF9hQ81NabVRcC36p4hhf+K qksX3KLRmVALjwHGlcgSrT7Jsu3XTH03xKHLxp6rqW3BepFGRmnlPbmEHU6M5ZlS g+P2G9ug4FTe1kkGvD/IbhV3+9aI1NBRRwWt3oiHi/MJZS11vM7Z9HGZ78m03KuL giPh/reopAz96UhxM6e5etXjHObITFqvuk1rjYK1ZsbBQ+XpP4bW+OPG9oeM/Hz5 gVPhUfe8cMg1FZRuZDJb27uTMCmqoJQmOq6UMDojWbJppB5wusq3muZ9srv07qsU Lu33dtdlP6RpEd2lSxb3X5o1xbGwZQsu5D5VP17KTGSc50QtJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiyJT+1sUItpgdLVd/ZwmmroUdhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWMyZDViYTktMGZlNi0z ZTRkLTk5M2MtMDM5ZjFlMTg2YTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF90qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhYeVLPBFvqCvqV0p8ZCpZqPoglbTw/4zh7wuoBPQhly9VOzBve4bMY U+uKgikCdhEZJVxoUzGGazpVbtPGIu+nZzHMOKSOluSF21cX85/hM7H/4sbp65hd V7yNVDUV2J3xKNzjpl+a9Lwz8J49JRz+Imzt0gnr9FAFqSFS9K9d+i5zPsYIpUK5 3s04HtdcJSEPwXd9rhWRDsyUeZoo1oF575Y1/U08Zq0C3wxPVqmXD305Ez1a5/oX MsqWXJkTP57AX+/VFkMu4Tv1jTb6AAQA0x6XwQCXsrZTPLaerIBaqzNnn1WnYqyW PjmIRgsk2rNoC6J+0615XINEkWiQgaA= -----END CERTIFICATE-----Generated at Tue Jul 22 19:31:39 2025 by rpki-client