$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ccdac68b-50f1-3c74-a51c-14ca8e0e4820.roa File: ccdac68b-50f1-3c74-a51c-14ca8e0e4820.roa (raw, json) Hash identifier: voMer2oANzbp9wiuel9S92GxjC3zGhOgjl4x7lA4n+o= Subject key identifier: 6F:C5:AF:3D:34:2F:91:A9:1F:FF:CA:0B:A4:5F:B5:63:9F:29:8C:6C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A94D0DF36A76A7271522B8180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ccdac68b-50f1-3c74-a51c-14ca8e0e4820.roa Signing time: Sun 20 Jul 2025 13:01:04 +0000 ROA not before: Sun 20 Jul 2025 13:01:04 +0000 ROA not after: Sat 18 Oct 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.222.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:df:36:a7:6a:72:71:52:2b:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 20 13:01:04 2025 GMT Not After : Oct 18 13:01:04 2025 GMT Subject: CN=9749267c-6487-4781-b46b-ea880399e50a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b8:eb:3e:65:f7:1e:03:7d:48:93:b9:c6:2d: bc:76:39:c4:ad:b4:bd:1c:de:c7:5c:c1:7c:81:cc: e3:96:37:e3:04:4e:94:2e:6e:11:39:69:be:27:90: dc:1c:96:c4:aa:eb:6a:a5:11:b0:87:d4:ec:0b:dd: 88:cc:f0:ca:ce:ae:30:2c:05:06:b9:c2:df:50:4b: 66:76:90:6c:92:44:90:bd:e7:2a:8c:2e:f8:33:bc: d9:ee:ea:08:4e:8e:e5:35:02:34:00:41:b1:7d:9d: af:c9:81:ff:b7:f0:5a:91:c4:83:2a:5f:6b:1b:80: 4a:6f:4e:f7:2b:fa:4d:c8:6e:d5:90:dc:8c:0b:94: 5d:0d:96:47:31:43:28:4d:d4:9f:7c:66:bc:91:75: 0b:0f:2f:63:7a:1f:0c:5b:76:13:7c:8a:11:f4:99: 91:88:ab:67:60:97:0c:2d:78:92:27:44:fc:7f:26: 97:8d:b8:62:43:d1:c0:94:68:00:45:97:aa:9b:8e: 13:84:88:4a:2b:ce:49:53:8a:92:2a:3f:b5:35:15: 9b:24:68:a9:41:09:b5:31:1d:cd:77:7b:91:aa:48: db:38:0b:1e:81:cd:ac:57:31:72:01:31:f6:a5:78: cf:57:6b:fb:d1:c3:b6:43:a1:f7:84:04:fa:28:8a: fb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C5:AF:3D:34:2F:91:A9:1F:FF:CA:0B:A4:5F:B5:63:9F:29:8C:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ccdac68b-50f1-3c74-a51c-14ca8e0e4820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:3f:cd:a1:5e:09:75:54:0d:02:f5:bd:4f:5c:1f:b2:68:99: 6e:a9:d5:f7:ee:b6:0b:2b:a9:e7:e5:3d:2f:c3:f8:82:1e:30: 1f:17:42:78:bc:1d:15:11:7f:53:bd:d9:42:b3:a8:14:51:62: af:9d:a3:77:a6:6d:9f:22:34:8d:33:4c:e6:0e:36:6d:75:a6: 4d:ee:25:2c:58:6e:a1:07:4d:7c:3c:38:85:ae:c0:37:e2:7b: 10:04:e0:38:6a:7d:ad:7a:8a:6b:73:dc:01:c1:7b:89:73:68: 75:24:23:55:98:0f:0a:f5:37:1c:40:9f:eb:7b:10:69:a6:bf: a5:ec:66:9c:d5:5f:80:ff:2e:fe:44:97:c8:cc:59:65:2a:b3: 5f:84:60:ad:53:a7:04:5e:be:b3:c5:bd:8c:6b:7f:27:9e:d9: b5:c2:d1:60:93:0f:a6:e1:6f:a0:ff:5d:27:46:3e:bb:37:91: c4:83:33:a2:e3:48:99:c8:e3:7f:25:15:97:15:ff:b7:52:c1: f8:48:50:cf:0a:db:af:5b:87:3c:6d:2e:c7:0c:41:d5:37:f6: 4c:da:6b:08:dc:ad:a9:b7:85:a1:af:cb:ee:0c:71:cf:ea:e8: af:5b:0a:04:57:03:3f:43:72:35:cb:ea:2b:38:be:d3:d9:f1: 59:1d:59:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0N82p2pycVIrgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk OTc0OTI2N2MtNjQ4Ny00NzgxLWI0NmItZWE4ODAzOTllNTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bjrPmX3HgN9SJO5xi28djnErbS9HN7HXMF8 gczjljfjBE6ULm4ROWm+J5DcHJbEqutqpRGwh9TsC92IzPDKzq4wLAUGucLfUEtm dpBskkSQvecqjC74M7zZ7uoITo7lNQI0AEGxfZ2vyYH/t/BakcSDKl9rG4BKb073 K/pNyG7VkNyMC5RdDZZHMUMoTdSffGa8kXULDy9jeh8MW3YTfIoR9JmRiKtnYJcM LXiSJ0T8fyaXjbhiQ9HAlGgARZeqm44ThIhKK85JU4qSKj+1NRWbJGipQQm1MR3N d3uRqkjbOAsegc2sVzFyATH2pXjPV2v70cO2Q6H3hAT6KIr7aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/Frz00L5GpH//KC6RftWOfKYxsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2NkYWM2OGItNTBmMS0z Yzc0LWE1MWMtMTRjYThlMGU0ODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF94RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHE/zaFeCXVUDQL1vU9cH7JomW6p1ffutgsrqeflPS/D+IIeMB8XQni8 HRURf1O92UKzqBRRYq+do3embZ8iNI0zTOYONm11pk3uJSxYbqEHTXw8OIWuwDfi exAE4Dhqfa16imtz3AHBe4lzaHUkI1WYDwr1NxxAn+t7EGmmv6XsZpzVX4D/Lv5E l8jMWWUqs1+EYK1TpwRevrPFvYxrfyee2bXC0WCTD6bhb6D/XSdGPrs3kcSDM6Lj SJnI438lFZcV/7dSwfhIUM8K269bhzxtLscMQdU39kzaawjcram3haGvy+4Mcc/q 6K9bCgRXAz9DcjXL6is4vtPZ8VkdWSA= -----END CERTIFICATE-----Generated at Tue Jul 22 19:34:19 2025 by rpki-client