$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c89999ba-0996-384f-bcec-b5fd7e66af22.roa File: c89999ba-0996-384f-bcec-b5fd7e66af22.roa (raw, json) Hash identifier: I0TglAuro7VrUl5+rViixH7m526G2wCiqU1TPCno5Vc= Subject key identifier: 54:20:3C:09:F5:41:85:93:BB:8B:61:33:F3:57:9A:54:46:C0:87:E0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8B0B71CBFF8174867610F480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c89999ba-0996-384f-bcec-b5fd7e66af22.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 16625 IP address blocks: 23.221.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:71:cb:ff:81:74:86:76:10:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=0531ed98-0d27-4f97-92cb-db2b24a47cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:77:0f:92:a9:15:2a:0e:55:89:ab:f5:54:96: e2:9c:da:56:e4:8d:0f:6e:ef:03:7a:b0:53:92:e6: 2d:af:de:1d:6e:90:42:eb:be:67:7a:42:e7:d9:07: af:bc:f8:18:f0:9d:79:da:3f:4e:91:49:3f:29:7c: 6d:ee:9e:d6:d5:0d:1f:e3:3b:79:43:6c:47:25:cf: 18:80:56:56:50:f0:fb:21:e5:e4:85:94:8a:2c:ca: 0e:a0:5b:06:25:9b:8f:bb:43:45:eb:d6:4f:e2:c1: c4:9f:69:55:b4:a3:a5:23:a3:44:90:04:48:ad:3e: 09:7f:2d:b5:4d:99:19:af:e7:cd:06:a8:ca:ca:43: 76:de:b9:a9:84:c8:d0:6e:5c:c9:76:56:de:25:7e: 9c:f1:cc:c4:37:6f:e8:f4:a9:5a:9a:ce:78:fb:dc: 35:7e:df:a4:b0:bb:97:a3:26:fb:b4:1b:3d:d2:bf: a0:4d:4f:97:63:b7:29:4d:af:91:2d:a2:b2:df:3c: bf:24:fc:94:e0:f1:f0:59:7a:42:42:2a:2e:96:5d: 87:f9:f7:51:7f:7d:b5:bb:f8:46:48:e6:04:13:7d: 71:54:80:84:fb:88:51:6a:a3:2a:01:36:5f:ed:6d: 51:05:57:ec:12:fc:85:40:2a:da:aa:4c:60:f7:f2: f1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:20:3C:09:F5:41:85:93:BB:8B:61:33:F3:57:9A:54:46:C0:87:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c89999ba-0996-384f-bcec-b5fd7e66af22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:fc:dd:1e:86:d4:4f:67:18:aa:d9:21:f4:b1:e7:0e:3e:e2: cc:1a:43:47:64:7f:31:1a:62:55:f1:c8:4b:64:12:0b:51:a0: 8c:14:f7:ea:11:3a:68:69:12:24:31:d5:46:f3:ad:95:a0:59: 25:03:71:80:5d:6c:b1:f7:15:f5:51:2e:30:30:08:51:23:94: 89:59:a5:95:0c:cb:17:94:a5:57:cc:35:60:b3:e9:bf:6b:ef: 90:46:0a:61:1d:72:c0:b9:93:2a:a6:3c:f2:07:3d:97:74:99: a5:ca:5f:42:cc:e2:98:31:3b:1c:52:6a:ca:54:63:70:df:0e: 0b:a5:74:ec:39:46:8a:ee:25:38:70:36:a2:c7:08:0b:53:5d: 62:13:e2:ad:1e:fc:0c:c1:d4:f2:97:f8:53:e6:2c:bf:01:bb: 6c:d3:22:11:9f:fe:76:73:9e:fe:44:59:62:44:3b:29:59:b9: 2a:09:9d:b6:da:8e:79:71:ea:4e:2d:d0:43:cd:c6:60:cd:2c: 4b:9f:be:34:33:75:6c:26:2f:03:e3:69:68:3d:5a:e2:76:25: 31:43:e3:4e:ae:18:f5:4a:a6:ce:23:32:34:78:cc:4c:7a:fa: db:b5:8b:fc:8c:5c:53:10:20:95:f3:c9:90:2f:2d:19:54:9a: 33:08:0c:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC3HL/4F0hnYQ9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk MDUzMWVkOTgtMGQyNy00Zjk3LTkyY2ItZGIyYjI0YTQ3Y2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3cPkqkVKg5Viav1VJbinNpW5I0Pbu8DerBT kuYtr94dbpBC675nekLn2QevvPgY8J152j9OkUk/KXxt7p7W1Q0f4zt5Q2xHJc8Y gFZWUPD7IeXkhZSKLMoOoFsGJZuPu0NF69ZP4sHEn2lVtKOlI6NEkARIrT4Jfy21 TZkZr+fNBqjKykN23rmphMjQblzJdlbeJX6c8czEN2/o9Klams54+9w1ft+ksLuX oyb7tBs90r+gTU+XY7cpTa+RLaKy3zy/JPyU4PHwWXpCQioull2H+fdRf321u/hG SOYEE31xVICE+4hRaqMqATZf7W1RBVfsEvyFQCraqkxg9/LxRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQgPAn1QYWTu4thM/NXmlRGwIfgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzg5OTk5YmEtMDk5Ni0z ODRmLWJjZWMtYjVmZDdlNjZhZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF930MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH383R6G1E9nGKrZIfSx5w4+4swaQ0dkfzEaYlXxyEtkEgtRoIwU9+oR OmhpEiQx1UbzrZWgWSUDcYBdbLH3FfVRLjAwCFEjlIlZpZUMyxeUpVfMNWCz6b9r 75BGCmEdcsC5kyqmPPIHPZd0maXKX0LM4pgxOxxSaspUY3DfDguldOw5RoruJThw NqLHCAtTXWIT4q0e/AzB1PKX+FPmLL8Bu2zTIhGf/nZznv5EWWJEOylZuSoJnbba jnlx6k4t0EPNxmDNLEufvjQzdWwmLwPjaWg9WuJ2JTFD406uGPVKps4jMjR4zEx6 +tu1i/yMXFMQIJXzyZAvLRlUmjMIDHc= -----END CERTIFICATE-----Generated at Tue Jul 22 19:35:42 2025 by rpki-client