$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/194d795a-365e-3930-a19f-66f26974cc3b.roa File: 194d795a-365e-3930-a19f-66f26974cc3b.roa (raw, json) Hash identifier: m9p3ma4TeLmb/H6I0JfCd9SKPTMXN1ADx7lu7Rykabo= Subject key identifier: 02:0D:3D:B8:65:43:16:7E:E4:3E:F1:EA:D1:27:30:38:07:8B:7E:9F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8B0B68E24D9F68A2CCD7EE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/194d795a-365e-3930-a19f-66f26974cc3b.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.221.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:68:e2:4d:9f:68:a2:cc:d7:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=ffd9d69e-6224-43f7-a51f-ec9126435251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c9:05:7f:e5:0e:a9:e1:01:9e:f9:72:55:85: 66:05:57:84:b0:cd:f5:d9:53:94:45:48:b5:80:28: 4a:76:56:4b:49:9a:0a:a1:dc:82:10:d6:e6:7a:b6: 15:e0:7e:b4:95:0e:00:46:92:b8:f8:69:24:f7:35: 5d:31:2c:b6:f0:56:f1:03:a6:df:af:89:55:02:77: 15:6a:9d:39:2e:0a:cb:71:89:02:92:9f:e1:bb:54: 55:3f:db:b2:7e:ae:36:61:20:4c:00:88:1c:02:e7: 21:26:39:24:b6:85:64:e0:6c:2d:27:69:8a:1a:3e: 2d:00:83:d0:85:58:53:d9:43:fb:b4:8f:ef:25:07: dc:f2:60:7a:92:03:0d:92:e9:5f:07:6d:48:0c:76: 8c:16:1c:60:63:0b:65:05:41:01:6c:15:a2:34:b0: 34:80:00:b1:16:9b:c5:f2:b7:15:d6:8e:44:db:f5: 92:a6:9a:89:22:05:08:6e:c1:9e:ff:78:43:11:a5: c2:cd:a6:b2:aa:79:b3:f5:c6:12:01:bf:78:f1:33: 9d:3f:f5:15:75:19:67:2e:13:02:33:ec:24:d0:50: 22:cf:f9:26:a1:dc:69:39:16:35:35:70:26:70:4d: 74:12:94:c3:e9:e1:c8:cb:95:fa:46:3f:45:f6:e4: 6e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0D:3D:B8:65:43:16:7E:E4:3E:F1:EA:D1:27:30:38:07:8B:7E:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/194d795a-365e-3930-a19f-66f26974cc3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:2c:f9:c6:d5:82:58:0d:7c:c4:52:d4:75:fe:7e:e3:b4:6e: ac:f9:9f:a1:51:32:0a:97:ac:56:a0:0e:33:01:2e:42:a5:e4: 7c:1c:09:22:fd:e2:95:06:17:58:84:20:f1:4a:96:68:9c:b0: 15:c8:3d:1d:85:02:40:64:6f:58:bd:58:43:e1:15:b2:33:d1: 2c:28:c5:7b:c9:29:f2:f0:16:34:ab:04:ed:07:93:93:a5:a8: 4e:b6:1f:df:25:f8:20:d3:d0:07:07:74:8d:20:64:21:ef:e1: ce:db:d5:d0:1a:59:db:f7:54:e6:52:27:b8:ed:8f:09:52:88: 04:f9:ae:dd:a1:f0:b3:47:a3:38:68:e0:89:2a:06:55:ba:b9: b0:49:6b:61:d2:ef:30:04:18:e8:a9:58:c1:9e:6f:3d:ce:71: ab:6f:11:6b:54:b1:a8:5e:0b:fa:03:53:91:40:84:27:dc:36: a4:4a:c8:7b:c3:cf:c1:d9:76:75:11:31:cf:ed:ae:c7:1b:f5: df:a3:d3:5c:c3:c3:a3:21:9a:79:1a:32:0e:9f:21:d3:50:2b: d1:93:71:5e:fc:22:e6:96:ee:e6:22:38:56:10:28:b4:89:bd: c9:ba:f8:ec:e5:a7:d0:bc:ec:9b:72:89:4d:9c:43:a1:90:b3: a0:d8:39:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC2jiTZ9ooszX7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk ZmZkOWQ2OWUtNjIyNC00M2Y3LWE1MWYtZWM5MTI2NDM1MjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8kFf+UOqeEBnvlyVYVmBVeEsM312VOURUi1 gChKdlZLSZoKodyCENbmerYV4H60lQ4ARpK4+Gkk9zVdMSy28FbxA6bfr4lVAncV ap05LgrLcYkCkp/hu1RVP9uyfq42YSBMAIgcAuchJjkktoVk4GwtJ2mKGj4tAIPQ hVhT2UP7tI/vJQfc8mB6kgMNkulfB21IDHaMFhxgYwtlBUEBbBWiNLA0gACxFpvF 8rcV1o5E2/WSppqJIgUIbsGe/3hDEaXCzaayqnmz9cYSAb948TOdP/UVdRlnLhMC M+wk0FAiz/kmodxpORY1NXAmcE10EpTD6eHIy5X6Rj9F9uRuhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAINPbhlQxZ+5D7x6tEnMDgHi36fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTk0ZDc5NWEtMzY1ZS0z OTMwLWExOWYtNjZmMjY5NzRjYzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF93VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQs+cbVglgNfMRS1HX+fuO0bqz5n6FRMgqXrFagDjMBLkKl5HwcCSL9 4pUGF1iEIPFKlmicsBXIPR2FAkBkb1i9WEPhFbIz0SwoxXvJKfLwFjSrBO0Hk5Ol qE62H98l+CDT0AcHdI0gZCHv4c7b1dAaWdv3VOZSJ7jtjwlSiAT5rt2h8LNHozho 4IkqBlW6ubBJa2HS7zAEGOipWMGebz3OcatvEWtUsaheC/oDU5FAhCfcNqRKyHvD z8HZdnURMc/trscb9d+j01zDw6MhmnkaMg6fIdNQK9GTcV78IuaW7uYiOFYQKLSJ vcm6+Ozlp9C87JtyiU2cQ6GQs6DYOY4= -----END CERTIFICATE-----Generated at Wed Jul 23 01:33:32 2025 by rpki-client