$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2fb8810-f23c-3095-9d80-83b3bc7c2d56.roa File: d2fb8810-f23c-3095-9d80-83b3bc7c2d56.roa (raw, json) Hash identifier: GaK7QqwUdsu5gr7iEqtsZeUKuhU9GP6VT0Ji81ahl7A= Subject key identifier: 9E:4A:B1:96:D2:E1:7C:F6:A5:F4:92:75:5F:05:D9:47:B8:6A:40:55 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8B0B6A6AC29B2B179008BF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2fb8810-f23c-3095-9d80-83b3bc7c2d56.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.222.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:6a:6a:c2:9b:2b:17:90:08:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=2ebc010c-9b3e-470f-b8b2-7197858af292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3b:79:25:d2:c1:f9:b8:f7:3c:9a:1d:13:99: 1d:e7:86:99:6b:89:01:fd:38:ae:e5:2b:ed:67:bf: 20:dc:6d:d3:ef:c3:89:2f:57:84:39:c7:b5:41:7b: b2:1b:7a:18:0e:e4:bb:f3:e7:3a:c1:f5:79:92:33: 9c:25:55:34:7d:90:a3:94:f8:36:e7:6b:28:54:9e: 46:96:00:16:62:11:49:b8:3b:86:32:02:d9:23:ed: 78:12:d7:82:c5:7d:7e:26:f0:6e:29:1a:6f:d4:3f: 2c:3f:50:50:69:8b:9a:b3:62:65:3f:04:a3:96:e2: 4b:8f:d2:da:7e:11:5d:8c:58:31:d2:07:a7:71:c8: 7a:dd:2e:fb:45:88:ef:75:a0:4f:74:bb:c0:04:a9: fb:5d:dc:f2:22:24:69:f1:ec:fa:5b:36:b2:57:f1: b4:db:11:25:9a:38:f4:b4:75:5f:f4:23:9d:9e:7b: 79:e5:3a:46:9b:20:55:7e:2f:f5:cd:f6:53:02:20: 54:dd:36:ad:08:ab:84:f3:db:d1:a2:83:a7:b8:ff: 50:69:f5:61:09:58:5a:0c:9b:0f:07:70:6f:9f:e9: 06:a3:6e:14:2c:9c:0b:82:b9:b5:77:8d:18:16:73: 21:ae:2d:40:3c:40:ab:c6:09:60:7d:e2:c6:f8:22: 22:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4A:B1:96:D2:E1:7C:F6:A5:F4:92:75:5F:05:D9:47:B8:6A:40:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2fb8810-f23c-3095-9d80-83b3bc7c2d56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:4b:19:de:86:79:70:61:23:28:54:d8:ab:6d:2d:66:b8:3b: d0:ae:f4:61:5c:68:9b:13:e6:2c:e3:71:9a:5e:99:d9:ad:31: 0d:70:bc:3c:5c:7c:27:7c:92:2e:37:06:09:fd:8a:35:ed:13: 0e:42:b0:43:6a:b1:af:21:74:8a:9b:17:56:00:2a:78:9f:af: 8a:93:da:b6:fa:e6:97:08:18:cf:78:77:c2:91:88:bf:f7:5a: f5:12:65:65:18:7a:a2:83:63:10:60:1f:00:5f:ed:06:e3:5f: 5c:26:9d:1b:8b:32:89:61:e7:f4:09:2b:d5:c5:77:ba:08:bb: 5a:a4:18:8c:db:5b:c5:95:a4:1c:98:c5:93:e3:bf:b0:3f:c4: e6:6d:fb:b5:3a:c9:cb:47:36:10:f5:49:cc:17:fe:31:78:2b: 83:a7:cd:7f:f8:b1:58:39:af:a0:2e:83:f1:a4:7a:80:45:f8: 72:60:ed:84:ea:80:f3:49:8f:76:3d:7f:1e:e9:73:63:94:c4: 27:05:fd:eb:bc:4d:ee:85:f9:11:c1:53:a7:38:fb:de:9d:4f: b8:d3:6b:95:f4:da:b7:1a:e6:89:1b:ef:a6:1c:41:88:c7:2a: 38:d4:90:c0:71:91:e9:b9:b7:e3:b3:09:33:88:a1:95:59:d5: 77:99:c9:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC2pqwpsrF5AIv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk MmViYzAxMGMtOWIzZS00NzBmLWI4YjItNzE5Nzg1OGFmMjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszt5JdLB+bj3PJodE5kd54aZa4kB/Tiu5Svt Z78g3G3T78OJL1eEOce1QXuyG3oYDuS78+c6wfV5kjOcJVU0fZCjlPg252soVJ5G lgAWYhFJuDuGMgLZI+14EteCxX1+JvBuKRpv1D8sP1BQaYuas2JlPwSjluJLj9La fhFdjFgx0gencch63S77RYjvdaBPdLvABKn7XdzyIiRp8ez6WzayV/G02xElmjj0 tHVf9COdnnt55TpGmyBVfi/1zfZTAiBU3TatCKuE89vRooOnuP9QafVhCVhaDJsP B3Bvn+kGo24ULJwLgrm1d40YFnMhri1APECrxglgfeLG+CIi1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5KsZbS4Xz2pfSSdV8F2Ue4akBVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDJmYjg4MTAtZjIzYy0z MDk1LTlkODAtODNiM2JjN2MyZDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF97sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVLGd6GeXBhIyhU2KttLWa4O9Cu9GFcaJsT5izjcZpemdmtMQ1wvDxc fCd8ki43Bgn9ijXtEw5CsENqsa8hdIqbF1YAKnifr4qT2rb65pcIGM94d8KRiL/3 WvUSZWUYeqKDYxBgHwBf7QbjX1wmnRuLMolh5/QJK9XFd7oIu1qkGIzbW8WVpByY xZPjv7A/xOZt+7U6yctHNhD1ScwX/jF4K4OnzX/4sVg5r6Aug/GkeoBF+HJg7YTq gPNJj3Y9fx7pc2OUxCcF/eu8Te6F+RHBU6c4+96dT7jTa5X02rca5okb76YcQYjH KjjUkMBxkem5t+OzCTOIoZVZ1XeZyQc= -----END CERTIFICATE-----Generated at Wed Jul 23 01:31:06 2025 by rpki-client