$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc9bf17d-ed0d-393a-81ec-1f7a3b228719.roa File: cc9bf17d-ed0d-393a-81ec-1f7a3b228719.roa (raw, json) Hash identifier: iLN62plHUCb+A9tavDd7aXH5AFFq5bfhw9bUnAgEBGw= Subject key identifier: CA:66:5D:C2:17:44:14:0B:87:16:A2:3C:DA:DB:24:FD:93:F5:F7:86 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC016362E81689653E4C6E540 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc9bf17d-ed0d-393a-81ec-1f7a3b228719.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 35994 IP address blocks: 23.77.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:36:2e:81:68:96:53:e4:c6:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=92b0f8e2-8cb3-437e-8bea-6a1626394d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:cb:bd:09:b5:51:d6:d1:0d:e3:68:8d:a1:71: 23:d9:ef:01:c6:da:9f:0b:d2:ea:4f:b9:0a:2d:ac: b1:f6:f9:7c:91:13:99:df:2c:34:8e:66:f7:cb:20: bf:d6:ce:a2:0f:ee:a8:d0:d7:cf:2a:74:3c:d8:e6: 4c:c4:aa:dc:25:67:c3:b9:8a:35:d9:22:c4:31:63: b8:b2:40:00:37:74:a1:74:d9:0f:0e:0b:33:f8:3a: 1e:8f:e9:3b:f7:3e:5e:0c:9b:11:c6:45:44:a4:7f: 65:d5:93:df:f8:57:24:8a:51:f5:44:b8:8d:df:cf: 1f:04:5c:26:c1:23:ad:5e:b0:77:38:b4:76:e8:12: 5c:8a:0f:2e:6c:c2:eb:48:0b:d3:e4:f0:b6:e2:48: d1:81:32:7a:8e:b8:9f:4d:89:fd:76:e2:31:b3:15: ee:54:9b:f9:1c:20:11:b9:bc:86:de:ea:e1:2c:87: 0f:25:19:c9:86:0f:1f:17:43:d1:b2:9d:2f:13:80: 77:a5:c9:65:cd:24:12:cd:bf:5b:a0:06:5a:41:4d: 44:58:89:54:01:48:bd:4d:e6:2e:40:31:cb:06:f2: 45:cf:a3:10:7f:97:35:d1:87:80:b2:df:0f:92:8b: 36:89:73:d2:6c:86:1c:c6:c6:ae:7b:ab:9e:35:ea: c8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:66:5D:C2:17:44:14:0B:87:16:A2:3C:DA:DB:24:FD:93:F5:F7:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc9bf17d-ed0d-393a-81ec-1f7a3b228719.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.77.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:55:a5:35:86:36:ee:b8:43:3e:e3:0b:02:2f:12:5c:76:30: b9:d7:97:c2:0e:66:a5:8e:4f:f4:17:a6:a4:93:f4:5c:01:61: 16:90:20:da:ca:51:64:c2:0e:ce:f0:88:e5:5f:32:8c:94:1d: b2:ba:1a:60:74:61:99:7f:73:f6:1a:d1:a7:bd:9c:b7:c3:f7: 42:d1:7d:e9:86:03:f8:98:7d:3e:ff:9d:ce:38:3e:a5:a2:bc: c0:f7:da:96:a9:9c:59:5d:54:f9:f5:9a:28:3f:37:01:5b:16: e8:40:a9:41:14:cc:0f:4c:b5:59:6a:3e:0c:f2:40:85:a8:05: 00:3a:26:ef:7a:04:4b:cd:c4:6f:6f:08:99:37:f2:6d:a1:9c: 94:9f:3e:ae:a2:60:b1:cd:d6:97:a1:6d:ec:6d:10:f2:cd:51: a6:bf:14:51:7f:62:8b:90:33:ab:c5:1f:39:3a:9a:dd:d7:a1: 58:47:cf:e3:42:b1:d5:9f:da:0d:13:b9:31:7b:46:d5:88:ee: 3e:0c:46:12:25:a5:d6:88:ce:bb:3d:f5:e6:1a:7f:b3:fe:78: bb:50:a6:07:b6:14:50:a4:e1:f8:85:df:65:68:1b:dc:6a:bb: 84:80:29:9b:34:1e:03:1e:ab:5c:bf:33:92:57:89:80:a3:2d: ad:43:bd:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFjYugWiWU+TG5UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk OTJiMGY4ZTItOGNiMy00MzdlLThiZWEtNmExNjI2Mzk0ZDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcu9CbVR1tEN42iNoXEj2e8BxtqfC9LqT7kK Layx9vl8kROZ3yw0jmb3yyC/1s6iD+6o0NfPKnQ82OZMxKrcJWfDuYo12SLEMWO4 skAAN3ShdNkPDgsz+Doej+k79z5eDJsRxkVEpH9l1ZPf+FckilH1RLiN388fBFwm wSOtXrB3OLR26BJcig8ubMLrSAvT5PC24kjRgTJ6jrifTYn9duIxsxXuVJv5HCAR ubyG3urhLIcPJRnJhg8fF0PRsp0vE4B3pcllzSQSzb9boAZaQU1EWIlUAUi9TeYu QDHLBvJFz6MQf5c10YeAst8Pkos2iXPSbIYcxsaue6ueNerIQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpmXcIXRBQLhxaiPNrbJP2T9feGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2M5YmYxN2QtZWQwZC0z OTNhLTgxZWMtMWY3YTNiMjI4NzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF02rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRVpTWGNu64Qz7jCwIvElx2MLnXl8IOZqWOT/QXpqST9FwBYRaQINrK UWTCDs7wiOVfMoyUHbK6GmB0YZl/c/Ya0ae9nLfD90LRfemGA/iYfT7/nc44PqWi vMD32papnFldVPn1mig/NwFbFuhAqUEUzA9MtVlqPgzyQIWoBQA6Ju96BEvNxG9v CJk38m2hnJSfPq6iYLHN1pehbextEPLNUaa/FFF/YouQM6vFHzk6mt3XoVhHz+NC sdWf2g0TuTF7RtWI7j4MRhIlpdaIzrs99eYaf7P+eLtQpge2FFCk4fiF32VoG9xq u4SAKZs0HgMeq1y/M5JXiYCjLa1DvcI= -----END CERTIFICATE-----Generated at Sat Aug 23 16:57:20 2025 by rpki-client