$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/00513307-654c-3d6b-88b7-9c36564b71ba.roa File: 00513307-654c-3d6b-88b7-9c36564b71ba.roa (raw, json) Hash identifier: 3AvcxZMBF6Rei2MrkmFytzt5zhyEFlIM3OyqNnreJqE= Subject key identifier: 39:CD:A3:C8:00:CA:F3:19:2E:42:C7:CB:49:AB:2D:F0:41:2A:54:19 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8B0B6E9F662993B6A76D9A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/00513307-654c-3d6b-88b7-9c36564b71ba.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.220.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:6e:9f:66:29:93:b6:a7:6d:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=3942ec8e-b9cc-4062-924b-8b8023734a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5a:a6:d9:05:f8:1a:19:02:32:c6:8a:30:0b: f8:a4:3b:2e:6d:d4:6c:8d:80:6a:9e:f0:7c:0e:bf: 79:34:6f:e0:89:f4:4a:46:cf:c8:e2:f3:d6:60:5d: 4e:bb:c0:30:9c:4f:2d:d9:1c:78:b6:1b:71:92:fa: bc:70:e2:aa:e6:27:09:53:2a:15:c8:fe:b8:89:c2: 1e:15:ad:70:2c:4d:3e:5c:3c:e2:1c:fd:48:9a:8a: 47:d7:fd:19:4e:39:6d:95:d8:f8:fa:4a:f2:45:cc: 82:e9:43:84:81:cd:f3:65:0b:1b:d8:90:1e:bb:d5: 60:58:9a:4b:15:ce:f3:bb:1d:9f:d3:cc:d1:e0:cc: 8b:97:e7:6d:6d:b6:6b:f8:e6:60:c9:3e:79:71:15: 25:16:04:3f:4d:a9:9a:b7:69:8a:bf:3b:13:89:a1: 51:99:da:2d:fb:5a:f5:9d:37:d5:c2:ee:84:a1:67: ce:16:e7:a8:db:4f:05:ce:23:99:d6:ec:50:32:e5: dd:ef:8f:a0:82:6e:d2:ea:df:4a:d8:82:b7:99:ea: e7:f4:88:96:ed:cf:95:a8:59:88:19:90:5a:06:e3: ae:b0:ac:e6:96:87:c8:b1:a0:5e:eb:e2:d8:0e:01: 72:fa:09:dd:21:1e:d6:16:13:ed:27:7c:9b:ce:93: ca:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CD:A3:C8:00:CA:F3:19:2E:42:C7:CB:49:AB:2D:F0:41:2A:54:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/00513307-654c-3d6b-88b7-9c36564b71ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:b8:3a:c6:e4:c7:a8:dc:a0:12:58:64:7c:98:aa:f2:ab:10: 54:fa:72:dd:e9:45:4f:87:f4:81:6b:74:ee:56:77:6a:fa:a4: 1e:9e:01:d7:dd:fd:dc:6d:ce:48:5b:7b:1b:ad:a3:8f:c4:4b: cd:b3:9c:31:39:f8:b0:22:34:fe:ae:44:64:ce:e8:cb:74:fc: f5:a9:9b:3c:25:cc:03:82:84:b8:65:da:4d:3b:bc:06:99:2d: da:e5:fd:10:f0:d0:72:17:8d:27:fc:7e:37:86:46:b8:d3:48: 52:1d:5c:42:33:73:46:61:44:4a:7c:86:96:7f:8d:9e:c3:31: 2a:08:d6:25:7d:5b:74:c6:9d:1a:f2:ff:b2:b9:6d:b2:13:8d: 98:ca:46:cc:b3:c2:39:31:30:98:36:39:96:98:0d:99:a3:b1: 93:66:d3:75:d5:2e:2b:2e:ef:6f:0d:7f:28:bc:cc:41:82:b1: 73:33:20:41:61:91:98:c6:ea:28:78:34:ef:10:51:bf:b8:fd: e3:7e:e0:9e:8c:6a:42:c0:50:0d:8c:3c:0d:5f:e0:7e:4d:35: 4d:f1:55:d5:d0:e7:d1:91:6b:45:a1:ca:1f:21:14:6e:68:b8: 55:e5:b4:fc:76:6b:1b:7a:df:ce:89:13:04:49:a0:8c:90:74: a3:3b:69:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC26fZimTtqdtmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk Mzk0MmVjOGUtYjljYy00MDYyLTkyNGItOGI4MDIzNzM0YTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlqm2QX4GhkCMsaKMAv4pDsubdRsjYBqnvB8 Dr95NG/gifRKRs/I4vPWYF1Ou8AwnE8t2Rx4thtxkvq8cOKq5icJUyoVyP64icIe Fa1wLE0+XDziHP1ImopH1/0ZTjltldj4+kryRcyC6UOEgc3zZQsb2JAeu9VgWJpL Fc7zux2f08zR4MyLl+dtbbZr+OZgyT55cRUlFgQ/Tamat2mKvzsTiaFRmdot+1r1 nTfVwu6EoWfOFueo208FziOZ1uxQMuXd74+ggm7S6t9K2IK3mern9IiW7c+VqFmI GZBaBuOusKzmlofIsaBe6+LYDgFy+gndIR7WFhPtJ3ybzpPK/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnNo8gAyvMZLkLHy0mrLfBBKlQZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDA1MTMzMDctNjU0Yy0z ZDZiLTg4YjctOWMzNjU2NGI3MWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9xrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFq4Osbkx6jcoBJYZHyYqvKrEFT6ct3pRU+H9IFrdO5Wd2r6pB6eAdfd /dxtzkhbexuto4/ES82znDE5+LAiNP6uRGTO6Mt0/PWpmzwlzAOChLhl2k07vAaZ Ldrl/RDw0HIXjSf8fjeGRrjTSFIdXEIzc0ZhREp8hpZ/jZ7DMSoI1iV9W3TGnRry /7K5bbITjZjKRsyzwjkxMJg2OZaYDZmjsZNm03XVLisu728Nfyi8zEGCsXMzIEFh kZjG6ih4NO8QUb+4/eN+4J6MakLAUA2MPA1f4H5NNU3xVdXQ59GRa0Whyh8hFG5o uFXltPx2axt6386JEwRJoIyQdKM7afk= -----END CERTIFICATE-----Generated at Wed Jul 23 01:30:22 2025 by rpki-client