$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/552c4581-dc0d-31c9-ac66-a0be2a5b8cf9.roa File: 552c4581-dc0d-31c9-ac66-a0be2a5b8cf9.roa (raw, json) Hash identifier: mVWcAFtfGXMfUCUE+NC/xdkucAMMEh0lL0V0aIR3970= Subject key identifier: AF:7A:8B:A1:8E:DB:0E:1D:11:26:DF:06:35:69:B0:75:2F:CE:FB:D0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7D160686F01A01E3A750C9DA Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/552c4581-dc0d-31c9-ac66-a0be2a5b8cf9.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.215.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:16:06:86:f0:1a:01:e3:a7:50:c9:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=73abee77-e279-46af-97a0-15c4e84e9bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:81:c8:c1:f9:ed:93:46:96:42:24:7a:8b:5b: cf:07:df:d7:cb:b7:1f:73:e4:f3:f7:1e:96:a1:1b: a5:b7:cd:a6:7b:e8:f1:3c:a5:0b:e1:e3:18:11:ab: 1c:15:30:9d:c3:62:99:47:38:95:be:d6:da:18:1b: 5a:c0:6d:ae:5f:d3:6c:62:2c:66:3a:6d:51:ae:39: af:3a:7a:e2:8f:c3:77:71:32:70:3c:d1:10:59:7c: 70:10:d7:fa:b1:7a:3f:4f:d4:08:1e:7b:53:49:9b: f4:f9:2e:93:e8:c5:37:53:e3:aa:93:ae:83:76:e9: 02:ac:0c:c8:2b:23:92:f6:dd:c8:ab:b1:42:e4:3f: ba:c4:07:7f:5a:bd:ed:a5:c1:2e:6b:64:15:b9:93: 3e:f9:2e:c7:ec:09:af:7f:77:44:8d:f8:97:55:71: 46:aa:89:68:42:c9:86:37:f2:98:f4:8c:34:34:cf: 53:00:79:e5:03:1d:ff:b8:4a:93:ae:45:04:6b:9d: eb:bc:9f:c0:ff:f2:83:bc:97:e7:6e:a5:14:27:f5: 1f:df:ac:4d:aa:24:44:5f:4f:37:21:4d:3c:b0:d7: 76:0d:30:d7:5b:98:01:01:20:f0:66:36:4d:58:fe: 73:63:16:4c:c5:ef:03:cb:ea:fc:1b:2e:12:ed:8f: 36:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:7A:8B:A1:8E:DB:0E:1D:11:26:DF:06:35:69:B0:75:2F:CE:FB:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/552c4581-dc0d-31c9-ac66-a0be2a5b8cf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:81:49:25:3f:d1:fb:32:98:c4:c8:ef:a7:0f:95:2d:f2:5e: db:48:90:9c:4b:fe:1d:ee:56:b8:5a:cd:c5:39:b1:47:ad:fb: 26:36:3c:4f:9d:b4:44:6f:15:14:88:c1:bd:03:05:d5:f6:8a: fe:71:6d:76:ab:69:15:2d:27:32:ce:1f:e3:19:95:2c:bb:1a: f1:3d:4c:54:fb:88:cd:5a:9b:fe:31:4e:dc:33:ab:14:2c:40: 6a:99:05:12:d4:02:7c:e4:2c:f0:65:c1:0f:45:37:7a:48:f5: 43:f1:47:94:05:b5:d1:6a:aa:b0:f9:ea:a5:c3:b1:17:f3:af: 9b:7f:1d:1f:80:27:ac:e0:9c:14:12:45:ae:c5:39:18:e9:ad: 24:59:2b:d1:16:62:55:e8:df:d8:63:0b:d0:88:ee:32:64:66: 9d:2e:69:59:f4:be:42:31:5a:2f:1e:bc:0f:0c:e5:24:16:80: 14:1a:2e:d3:12:0f:1f:1a:29:6c:3b:cf:a8:ac:76:5c:bf:17: d0:13:75:b8:39:0d:e9:55:7b:5d:d1:b2:70:79:4c:c8:f7:42: 1c:ef:7b:f0:23:26:f2:4d:66:82:45:ad:ce:47:02:20:90:28: ef:66:17:b0:2d:0d:31:3f:96:3f:00:0f:43:19:19:7d:b6:6b: e1:1e:af:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FgaG8BoB46dQydowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk NzNhYmVlNzctZTI3OS00NmFmLTk3YTAtMTVjNGU4NGU5YmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYHIwfntk0aWQiR6i1vPB9/Xy7cfc+Tz9x6W oRult82me+jxPKUL4eMYEascFTCdw2KZRziVvtbaGBtawG2uX9NsYixmOm1Rrjmv Onrij8N3cTJwPNEQWXxwENf6sXo/T9QIHntTSZv0+S6T6MU3U+Oqk66DdukCrAzI KyOS9t3Iq7FC5D+6xAd/Wr3tpcEua2QVuZM++S7H7Amvf3dEjfiXVXFGqoloQsmG N/KY9Iw0NM9TAHnlAx3/uEqTrkUEa53rvJ/A//KDvJfnbqUUJ/Uf36xNqiREX083 IU08sNd2DTDXW5gBASDwZjZNWP5zYxZMxe8Dy+r8Gy4S7Y823QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK96i6GO2w4dESbfBjVpsHUvzvvQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTUyYzQ1ODEtZGMwZC0z MWM5LWFjNjYtYTBiZTJhNWI4Y2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9d8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaBSSU/0fsymMTI76cPlS3yXttIkJxL/h3uVrhazcU5sUet+yY2PE+d tERvFRSIwb0DBdX2iv5xbXaraRUtJzLOH+MZlSy7GvE9TFT7iM1am/4xTtwzqxQs QGqZBRLUAnzkLPBlwQ9FN3pI9UPxR5QFtdFqqrD56qXDsRfzr5t/HR+AJ6zgnBQS Ra7FORjprSRZK9EWYlXo39hjC9CI7jJkZp0uaVn0vkIxWi8evA8M5SQWgBQaLtMS Dx8aKWw7z6isdly/F9ATdbg5DelVe13RsnB5TMj3Qhzve/AjJvJNZoJFrc5HAiCQ KO9mF7AtDTE/lj8AD0MZGX22a+Eerws= -----END CERTIFICATE-----Generated at Sat Aug 23 13:08:09 2025 by rpki-client