$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c68039ac-b995-3aeb-b119-94e492830f29.roa File: c68039ac-b995-3aeb-b119-94e492830f29.roa (raw, json) Hash identifier: DKFwepgOJELatgrkAy113e3Z0hdoLrrFqLfTQeSELKs= Subject key identifier: F2:88:B3:7D:18:1E:72:EF:75:0F:0B:70:E4:8E:A6:E6:5D:56:3F:7A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8B0B7002799132E9DFB4CD80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c68039ac-b995-3aeb-b119-94e492830f29.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.220.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:70:02:79:91:32:e9:df:b4:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=625c3b1b-0ec0-41c7-9101-78152ff493ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:70:99:7b:fe:b5:ab:f8:6d:2b:c7:67:c7:3f: c9:4a:40:33:5a:38:5e:60:3c:7a:7d:7b:6d:7b:85: 5a:da:63:66:90:78:af:2b:e2:f5:3b:63:69:d3:31: 85:89:eb:e7:d9:58:ea:ae:17:5d:67:73:c1:b1:b9: 90:1b:fa:2a:66:77:91:21:32:56:e7:b4:2d:53:a2: 14:f6:01:a0:25:8d:35:e7:cb:77:eb:a5:f4:88:49: 5d:e6:d6:03:1f:e2:19:c3:98:3e:dc:d9:fb:a3:3f: 16:af:ac:c4:e2:51:65:cf:e4:47:2f:24:c7:d9:1e: b9:d7:5e:5d:72:8d:56:ac:50:64:98:b2:59:a5:e9: ee:9b:60:c7:84:f7:18:fa:20:9c:9f:b0:49:5e:6b: 8c:5f:a7:a8:a7:f0:7f:d4:aa:86:50:9c:b4:9e:23: ea:0c:e6:67:7d:e0:e2:f0:25:1a:e4:ba:50:f0:81: de:c1:ef:c2:88:94:25:b9:dd:6d:a5:c3:b3:66:5b: 57:94:fe:65:35:c3:8d:ce:f1:77:9d:32:29:c0:1f: 71:37:34:65:1c:13:bc:a4:d3:97:6d:f2:42:68:ef: b0:e5:72:e8:1d:70:35:61:98:77:4d:4e:d1:dd:db: 8d:e0:18:88:5a:13:2e:03:19:7d:7d:6e:9b:fc:4e: 32:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:88:B3:7D:18:1E:72:EF:75:0F:0B:70:E4:8E:A6:E6:5D:56:3F:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c68039ac-b995-3aeb-b119-94e492830f29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:a4:7d:82:ef:61:09:e5:f9:c4:31:19:f6:9f:c3:cd:00:30: dd:82:03:dd:85:3d:9a:20:bb:9a:63:52:b3:8f:65:87:e6:a6: cf:02:e5:8b:ee:55:78:dc:34:38:9b:99:2c:69:23:ba:3f:3e: 5d:06:38:f2:0f:37:df:1b:b2:0c:5b:6b:ad:a1:98:dd:ae:f3: df:d0:ee:7f:cb:93:80:97:84:53:e7:4c:a1:a7:49:f6:02:11: b5:12:e3:77:28:d2:59:3a:46:6f:08:98:79:43:d5:31:de:63: 30:42:94:c6:4b:c5:91:97:60:bb:85:cd:6f:75:67:ba:df:4b: 36:9f:24:ca:e1:b4:64:4b:3e:66:33:83:f1:f3:09:c6:40:e4: 97:20:63:51:ff:92:aa:6f:df:d7:3a:e0:4e:50:cc:a3:97:d2: ec:42:af:d6:28:03:63:4c:c4:e1:d9:ca:5c:9b:96:34:09:3f: 74:6d:0f:db:48:3e:94:b5:2f:3c:70:c2:f8:24:61:bb:95:73: 27:53:b3:7a:3b:44:31:5b:b5:28:cf:2c:35:00:78:1c:25:6c: d1:b4:8f:7b:39:80:ce:4e:ba:b8:77:af:27:48:58:0b:85:57: 72:51:bd:84:1e:42:34:32:4c:25:81:ac:9e:96:98:ca:de:47: 8f:e0:fd:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC3ACeZEy6d+0zYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk NjI1YzNiMWItMGVjMC00MWM3LTkxMDEtNzgxNTJmZjQ5M2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3CZe/61q/htK8dnxz/JSkAzWjheYDx6fXtt e4Va2mNmkHivK+L1O2Np0zGFievn2VjqrhddZ3PBsbmQG/oqZneRITJW57QtU6IU 9gGgJY0158t366X0iEld5tYDH+IZw5g+3Nn7oz8Wr6zE4lFlz+RHLyTH2R65115d co1WrFBkmLJZpenum2DHhPcY+iCcn7BJXmuMX6eop/B/1KqGUJy0niPqDOZnfeDi 8CUa5LpQ8IHewe/CiJQlud1tpcOzZltXlP5lNcONzvF3nTIpwB9xNzRlHBO8pNOX bfJCaO+w5XLoHXA1YZh3TU7R3duN4BiIWhMuAxl9fW6b/E4yRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKIs30YHnLvdQ8LcOSOpuZdVj96MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzY4MDM5YWMtYjk5NS0z YWViLWIxMTktOTRlNDkyODMwZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9z2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIikfYLvYQnl+cQxGfafw80AMN2CA92FPZogu5pjUrOPZYfmps8C5Yvu VXjcNDibmSxpI7o/Pl0GOPIPN98bsgxba62hmN2u89/Q7n/Lk4CXhFPnTKGnSfYC EbUS43co0lk6Rm8ImHlD1THeYzBClMZLxZGXYLuFzW91Z7rfSzafJMrhtGRLPmYz g/HzCcZA5JcgY1H/kqpv39c64E5QzKOX0uxCr9YoA2NMxOHZylybljQJP3RtD9tI PpS1LzxwwvgkYbuVcydTs3o7RDFbtSjPLDUAeBwlbNG0j3s5gM5Ourh3rydIWAuF V3JRvYQeQjQyTCWBrJ6WmMreR4/g/Xw= -----END CERTIFICATE-----Generated at Wed Jul 23 01:30:59 2025 by rpki-client