$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7111fabe-0507-3ec1-97f5-8f0203607a3d.roa File: 7111fabe-0507-3ec1-97f5-8f0203607a3d.roa (raw, json) Hash identifier: oRYIlCGdcoZTadTag1PGLLMhdq2XssXjy0hxWyICuXk= Subject key identifier: FF:11:A0:F0:45:A5:C7:E9:C4:FA:40:58:3D:CE:F4:D2:BA:17:5D:27 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A15A73178BA0A1B04F3AF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7111fabe-0507-3ec1-97f5-8f0203607a3d.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.220.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:a7:31:78:ba:0a:1b:04:f3:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=553ae6a7-8742-4e81-bafb-4941bb70f084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:af:de:6e:d0:f2:28:47:1e:d2:bb:5e:82:83: ac:84:05:a7:46:7a:90:18:64:de:a7:1e:81:6c:3e: 06:a2:8c:cb:62:5b:0b:6b:d2:33:c0:fe:eb:c5:3f: b9:36:9f:eb:94:aa:1e:fe:f9:f4:fc:8c:58:d4:5c: 70:f3:a8:1a:38:4f:6d:77:5c:50:71:d6:7b:34:1e: e7:31:77:0a:ed:1b:8a:62:e3:b3:5c:ea:ae:57:b3: 85:67:3e:46:8a:27:19:37:d7:86:fb:45:a9:1d:56: 6f:72:2d:9a:fd:e7:12:f1:7d:b7:3d:30:17:33:c2: 17:4a:7a:40:dc:13:6b:bc:fd:b1:41:08:41:63:b8: 68:f3:9e:1a:20:e6:8a:30:78:91:cc:1d:b1:68:88: c0:93:08:1f:9c:f4:b5:2e:9e:e7:ab:02:f7:a5:92: d6:ad:8c:ca:13:b0:2b:ed:dd:20:02:40:fb:14:7d: 82:e7:e3:25:d7:5a:8f:be:f0:59:c7:d6:f5:97:e6: 5e:ca:38:8e:0d:4e:22:50:fd:f1:72:e6:47:23:70: 80:de:15:36:53:1e:3b:59:13:12:3c:bb:59:62:cb: 04:51:23:f7:d4:ff:60:ef:a8:2b:6c:a0:19:ea:88: b1:eb:54:d1:5f:43:2f:15:ad:08:70:bf:3b:63:36: c8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:11:A0:F0:45:A5:C7:E9:C4:FA:40:58:3D:CE:F4:D2:BA:17:5D:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7111fabe-0507-3ec1-97f5-8f0203607a3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:4f:0f:36:36:27:f4:94:3a:b3:79:94:56:99:5e:5e:d4:14: b8:03:69:e4:07:54:c4:6e:a0:66:db:b0:50:76:86:95:41:1c: fb:c1:ff:3b:27:05:7d:2f:e7:dc:b7:8f:ad:18:e7:d8:a1:4b: 42:2d:cc:73:8f:65:07:fa:fb:c8:85:80:4a:68:e2:cb:d9:9f: 5b:0e:b5:44:83:3b:0a:dc:ce:f6:98:3c:b6:54:d2:24:dc:3e: b3:7e:00:72:7e:39:66:e7:e2:8f:d6:f8:d7:98:e8:35:55:f3: 4b:ae:9c:7e:11:39:a8:67:d8:ac:2d:a6:9f:ab:b0:41:ef:18: 7f:c6:74:3b:77:1e:e6:75:63:55:37:8f:14:7a:e2:ea:0a:5a: 36:10:96:63:5d:c9:b7:bc:f4:a6:43:e6:1f:9a:50:f8:55:e1: c9:63:a3:86:8b:8c:b3:62:65:7f:ba:dd:de:af:be:5e:54:5c: bd:e3:2b:8b:69:58:1c:99:50:17:98:ce:a4:c6:0b:2e:5e:ad: 19:de:4c:32:67:9d:72:3a:fb:ad:fe:fe:87:9d:e5:fe:c5:a3: 58:96:a8:42:c4:bc:8c:69:59:2d:06:a6:39:71:75:2b:ae:1b: 27:61:d1:2e:8f:f5:6b:83:8b:3f:69:d0:ce:5d:a1:59:8e:79: eb:87:d6:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FacxeLoKGwTzrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk NTUzYWU2YTctODc0Mi00ZTgxLWJhZmItNDk0MWJiNzBmMDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6/ebtDyKEce0rtegoOshAWnRnqQGGTepx6B bD4GoozLYlsLa9IzwP7rxT+5Np/rlKoe/vn0/IxY1Fxw86gaOE9td1xQcdZ7NB7n MXcK7RuKYuOzXOquV7OFZz5GiicZN9eG+0WpHVZvci2a/ecS8X23PTAXM8IXSnpA 3BNrvP2xQQhBY7ho854aIOaKMHiRzB2xaIjAkwgfnPS1Lp7nqwL3pZLWrYzKE7Ar 7d0gAkD7FH2C5+Ml11qPvvBZx9b1l+ZeyjiODU4iUP3xcuZHI3CA3hU2Ux47WRMS PLtZYssEUSP31P9g76grbKAZ6oix61TRX0MvFa0IcL87YzbIlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8RoPBFpcfpxPpAWD3O9NK6F10nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzExMWZhYmUtMDUwNy0z ZWMxLTk3ZjUtOGYwMjAzNjA3YTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9ywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9PDzY2J/SUOrN5lFaZXl7UFLgDaeQHVMRuoGbbsFB2hpVBHPvB/zsn BX0v59y3j60Y59ihS0ItzHOPZQf6+8iFgEpo4svZn1sOtUSDOwrczvaYPLZU0iTc PrN+AHJ+OWbn4o/W+NeY6DVV80uunH4ROahn2Kwtpp+rsEHvGH/GdDt3HuZ1Y1U3 jxR64uoKWjYQlmNdybe89KZD5h+aUPhV4cljo4aLjLNiZX+63d6vvl5UXL3jK4tp WByZUBeYzqTGCy5erRneTDJnnXI6+63+/oed5f7Fo1iWqELEvIxpWS0GpjlxdSuu Gydh0S6P9WuDiz9p0M5doVmOeeuH1qc= -----END CERTIFICATE-----Generated at Sun Jun 29 13:47:35 2025 by rpki-client