$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec534f86-ff69-339e-9d01-ba00bf019548.roa File: ec534f86-ff69-339e-9d01-ba00bf019548.roa (raw, json) Hash identifier: FRnZ/uYfhvUz7uee6NvET16cPJ84R2ptaQouvJBHjDQ= Subject key identifier: FC:42:E8:7A:8A:7C:17:66:5B:88:DB:FD:CC:88:D8:7D:1D:EF:9D:E4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8B0B6A03332370924EE6EA27 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec534f86-ff69-339e-9d01-ba00bf019548.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 16625 IP address blocks: 23.222.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:6a:03:33:23:70:92:4e:e6:ea:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=96fd7999-4afb-4e91-9d5e-6c90fab58d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4d:f0:58:db:ea:2e:c4:10:6e:6d:b4:e1:c9: 0d:a0:0d:92:46:71:b0:08:a1:c9:1b:e8:6e:08:07: 24:e9:d0:91:5f:e5:42:b3:c3:7f:2b:a3:c4:3a:c0: a4:72:08:28:79:79:d1:69:6f:01:1c:21:a7:c6:95: cc:a3:60:72:f7:75:86:f5:7b:9b:04:8f:ea:2c:f3: a6:6b:e1:20:ff:a4:f8:c7:be:5e:64:98:d8:94:95: 97:72:b2:b3:bd:2b:8c:c1:83:a4:ca:33:19:12:17: 99:2a:44:8a:1e:37:07:b7:95:8c:b8:e5:ed:f4:6e: ec:a8:ec:26:85:df:26:fe:ac:2f:d1:85:93:fc:88: 81:af:a3:5d:3f:4d:7a:d6:80:97:77:d9:68:e8:40: 6c:1b:35:31:2a:fa:ee:e9:a1:6a:15:96:c2:97:be: f1:57:93:c7:b7:a0:67:c2:21:58:c9:23:68:c4:ff: 44:21:72:3e:14:89:ee:30:7e:61:47:4b:38:15:2d: 88:ea:89:34:e4:9d:cb:86:f3:a2:e5:ab:01:aa:54: 74:53:00:c3:be:a8:2a:24:68:f8:0c:85:28:95:4d: 5c:7f:df:68:bd:e5:89:11:d0:52:60:1d:b6:00:1f: c9:32:5b:b2:c4:a0:22:79:67:99:54:6a:69:b3:18: 7e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:42:E8:7A:8A:7C:17:66:5B:88:DB:FD:CC:88:D8:7D:1D:EF:9D:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec534f86-ff69-339e-9d01-ba00bf019548.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:25:c1:06:c3:37:21:88:08:f8:25:ba:c4:0e:23:1e:d6:91: de:16:60:87:39:38:ab:2a:c0:26:3b:7e:cf:56:d0:17:8d:d5: 66:f4:2a:df:c5:e7:ec:20:fc:06:ba:e2:b2:ce:97:d7:65:44: b5:2b:6c:97:34:ee:ca:b3:b4:d8:a3:c4:ec:01:a8:1d:52:93: 8c:e1:42:c0:48:85:22:cd:a2:80:7f:8f:48:31:5a:95:3a:0b: ca:c5:98:d3:aa:c8:c8:1d:d6:ca:bd:18:74:97:6c:37:ff:3a: 98:9d:69:76:31:35:d5:32:71:be:bc:9b:b1:80:a8:c2:e0:c9: c8:b1:86:3d:56:71:83:5f:7b:50:88:60:e5:dd:0f:69:58:0a: 23:2c:68:a6:fe:cb:61:8c:20:fd:72:a1:48:e6:98:a7:e1:38: 55:29:f9:f4:00:1e:80:f7:73:1e:53:b7:e6:14:10:25:87:5e: 4c:b7:05:21:e5:59:b9:cc:c8:4b:db:53:0e:21:46:4a:28:74: ed:11:d8:96:04:65:54:7d:31:53:db:2f:a2:eb:ff:d0:86:3d: 35:b0:7f:6f:c6:44:6f:25:fb:0c:75:dc:b2:25:67:e2:be:64: 70:0f:14:4a:c0:41:e2:94:41:8c:e7:c0:1b:2a:2e:4b:96:4f: 13:b3:33:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC2oDMyNwkk7m6icwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk OTZmZDc5OTktNGFmYi00ZTkxLTlkNWUtNmM5MGZhYjU4ZDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy03wWNvqLsQQbm204ckNoA2SRnGwCKHJG+hu CAck6dCRX+VCs8N/K6PEOsCkcggoeXnRaW8BHCGnxpXMo2By93WG9XubBI/qLPOm a+Eg/6T4x75eZJjYlJWXcrKzvSuMwYOkyjMZEheZKkSKHjcHt5WMuOXt9G7sqOwm hd8m/qwv0YWT/IiBr6NdP0161oCXd9lo6EBsGzUxKvru6aFqFZbCl77xV5PHt6Bn wiFYySNoxP9EIXI+FInuMH5hR0s4FS2I6ok05J3LhvOi5asBqlR0UwDDvqgqJGj4 DIUolU1cf99oveWJEdBSYB22AB/JMluyxKAieWeZVGppsxh+1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxC6HqKfBdmW4jb/cyI2H0d753kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWM1MzRmODYtZmY2OS0z MzllLTlkMDEtYmEwMGJmMDE5NTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF96IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABclwQbDNyGICPglusQOIx7Wkd4WYIc5OKsqwCY7fs9W0BeN1Wb0Kt/F 5+wg/Aa64rLOl9dlRLUrbJc07sqztNijxOwBqB1Sk4zhQsBIhSLNooB/j0gxWpU6 C8rFmNOqyMgd1sq9GHSXbDf/OpidaXYxNdUycb68m7GAqMLgycixhj1WcYNfe1CI YOXdD2lYCiMsaKb+y2GMIP1yoUjmmKfhOFUp+fQAHoD3cx5Tt+YUECWHXky3BSHl WbnMyEvbUw4hRkoodO0R2JYEZVR9MVPbL6Lr/9CGPTWwf2/GRG8l+wx13LIlZ+K+ ZHAPFErAQeKUQYznwBsqLkuWTxOzM/k= -----END CERTIFICATE-----Generated at Wed Jul 23 01:43:35 2025 by rpki-client