$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/27ad4b54-b5ec-39ad-8bad-5da21f2aa89e.roa File: 27ad4b54-b5ec-39ad-8bad-5da21f2aa89e.roa (raw, json) Hash identifier: yYFugIll39JqT37bmX+pnG8B9ibOaRHYDumk1esEBPw= Subject key identifier: 58:6E:22:F1:FD:CD:ED:B3:B8:F6:86:04:A5:4D:2B:1C:FB:F6:EC:EB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A78E601C20DB8A5F79C946D60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/27ad4b54-b5ec-39ad-8bad-5da21f2aa89e.roa Signing time: Thu 10 Jul 2025 13:01:02 +0000 ROA not before: Thu 10 Jul 2025 13:01:02 +0000 ROA not after: Wed 08 Oct 2025 13:01:02 +0000 asID: 20940 IP address blocks: 23.208.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:e6:01:c2:0d:b8:a5:f7:9c:94:6d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 10 13:01:02 2025 GMT Not After : Oct 8 13:01:02 2025 GMT Subject: CN=8c6e7f28-3ff7-47b8-b64b-e206e12efc43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d1:7e:10:cb:67:41:d6:d8:a8:77:4b:db:8f: 26:87:4e:5c:a0:fc:33:3e:b3:e1:45:51:1d:2d:dc: 36:4c:3a:a6:94:ca:5e:14:19:89:d5:1b:a6:4d:44: 95:b1:2d:ab:b7:d8:bf:c7:8b:f2:70:34:6f:c0:6d: 34:12:34:92:2e:45:44:d6:e9:56:40:cc:1d:44:21: d0:ed:71:02:e1:87:3a:81:13:f6:26:a1:aa:fb:ab: 65:a9:55:e9:e9:80:67:60:8f:de:b0:95:52:1f:ab: b4:fb:1e:a3:3e:b5:b9:55:07:e9:a9:4a:f5:0d:8e: 46:cc:a9:b3:e5:e4:25:40:1d:50:cb:2a:fd:bd:9b: 4d:fd:18:ea:3f:d5:21:fb:29:26:f1:71:24:86:b4: 47:bf:1f:d1:2b:ad:5a:6b:7c:a1:f8:31:70:d2:8a: 97:40:77:c1:5d:62:5b:3f:8b:81:89:f5:ec:f0:a2: bc:4b:11:8d:04:86:ce:e9:5c:f7:27:14:8e:0c:56: d9:37:54:bc:3b:f5:b2:a7:d7:b3:ae:e4:9e:aa:22: d8:e4:c6:e2:ba:8c:83:b8:db:84:99:e8:e4:5b:ac: 0b:ea:45:d9:b5:b2:8c:5a:a9:5b:e0:3a:e7:81:72: c8:53:87:4c:2a:a7:59:4a:8f:62:b9:96:55:90:ee: ae:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6E:22:F1:FD:CD:ED:B3:B8:F6:86:04:A5:4D:2B:1C:FB:F6:EC:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/27ad4b54-b5ec-39ad-8bad-5da21f2aa89e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ab:ec:08:61:7e:ba:fc:c6:1b:20:28:f0:7f:2b:98:48:4c: 22:87:8d:b0:34:6d:6c:fa:7d:6d:89:10:dc:38:3f:99:c5:02: 2a:38:ba:a2:bd:35:81:ad:2d:3f:92:b1:56:4e:13:0d:9c:fc: a1:4e:26:a0:6e:67:36:4d:9c:b6:ef:86:6a:e0:13:b3:bb:ea: af:d0:c8:7c:dc:87:04:c5:a6:b8:d8:fe:5c:37:4e:30:5a:6d: 83:03:ce:e8:5b:8c:d9:06:0c:0b:3f:ea:06:bd:b8:42:a7:e2: 47:2a:37:6f:dd:4a:48:f1:d4:05:35:67:a8:97:0e:22:98:01: 4c:a2:72:d2:ea:e2:91:e3:db:92:26:10:39:a6:ba:60:d3:73: 4a:0a:b8:bf:7a:75:e1:69:14:7f:08:a9:5c:10:91:ce:e5:24: 93:71:aa:80:5a:69:67:b3:0e:68:1a:a8:2b:21:ea:bb:cc:3e: 14:4f:9d:48:1e:98:ad:93:d3:8b:a2:05:c7:c2:f4:ac:c9:b0: 8e:6a:50:6d:a0:9c:cf:24:14:57:1e:be:4e:f0:d9:c3:3c:b4: f3:45:6c:d3:58:1f:91:55:bf:39:5c:a3:99:5b:d9:a4:23:f7: c6:11:82:c3:df:e7:a9:09:29:a2:54:91:e6:ef:a1:b6:bc:27: b6:e0:df:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp45gHCDbil95yUbWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMDEzMDEwMloXDTI1MTAwODEzMDEwMlowLzEtMCsGA1UEAxMk OGM2ZTdmMjgtM2ZmNy00N2I4LWI2NGItZTIwNmUxMmVmYzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNF+EMtnQdbYqHdL248mh05coPwzPrPhRVEd Ldw2TDqmlMpeFBmJ1RumTUSVsS2rt9i/x4vycDRvwG00EjSSLkVE1ulWQMwdRCHQ 7XEC4Yc6gRP2JqGq+6tlqVXp6YBnYI/esJVSH6u0+x6jPrW5VQfpqUr1DY5GzKmz 5eQlQB1Qyyr9vZtN/RjqP9Uh+ykm8XEkhrRHvx/RK61aa3yh+DFw0oqXQHfBXWJb P4uBifXs8KK8SxGNBIbO6Vz3JxSODFbZN1S8O/Wyp9ezruSeqiLY5MbiuoyDuNuE mejkW6wL6kXZtbKMWqlb4DrngXLIU4dMKqdZSo9iuZZVkO6u3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhuIvH9ze2zuPaGBKVNKxz79uzrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjdhZDRiNTQtYjVlYy0z OWFkLThiYWQtNWRhMjFmMmFhODllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9CaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACur7Ahhfrr8xhsgKPB/K5hITCKHjbA0bWz6fW2JENw4P5nFAio4uqK9 NYGtLT+SsVZOEw2c/KFOJqBuZzZNnLbvhmrgE7O76q/QyHzchwTFprjY/lw3TjBa bYMDzuhbjNkGDAs/6ga9uEKn4kcqN2/dSkjx1AU1Z6iXDiKYAUyictLq4pHj25Im EDmmumDTc0oKuL96deFpFH8IqVwQkc7lJJNxqoBaaWezDmgaqCsh6rvMPhRPnUge mK2T04uiBcfC9KzJsI5qUG2gnM8kFFcevk7w2cM8tPNFbNNYH5FVvzlco5lb2aQj 98YRgsPf56kJKaJUkebvoba8J7bg39k= -----END CERTIFICATE-----Generated at Wed Jul 23 01:48:05 2025 by rpki-client