$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/458a2a99-bd91-394a-952c-64c86701120a.roa File: 458a2a99-bd91-394a-952c-64c86701120a.roa (raw, json) Hash identifier: xw/yfI5nE7+Oc6ZYyBH4UykuRQ3LgsAm7cTGuMdokI4= Subject key identifier: 5D:25:29:BE:DD:72:AF:8D:9A:96:52:64:B3:1D:B0:ED:10:8D:87:81 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7A4B5BCBCC5DA743CBA812C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/458a2a99-bd91-394a-952c-64c86701120a.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.211.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:5b:cb:cc:5d:a7:43:cb:a8:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=539917f5-a59b-4672-80dd-8c163a6b0100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e8:41:31:11:e4:8f:d9:47:9d:a3:f8:b5:f9: 1e:69:cb:f0:d7:16:cf:70:da:f6:16:81:c0:6b:5c: 1d:2b:fe:13:f1:2b:a4:cd:41:ba:9e:81:7e:3b:9b: b0:90:35:74:c2:ad:cd:44:88:1f:3e:8a:8d:4a:b6: af:8f:c8:0d:4d:53:66:24:f9:63:56:25:eb:95:87: d9:82:f3:d8:d3:30:04:8a:99:af:07:80:50:40:5e: f9:66:47:dd:f2:30:34:a0:fb:8a:06:53:0e:9e:3b: df:30:d8:5f:3c:52:3e:bf:64:a0:54:4a:d3:b3:07: 46:32:80:64:db:cf:61:01:50:3a:b2:b3:f6:37:07: b9:73:b2:3a:40:9e:2f:8a:f8:12:a8:39:5c:bf:f5: 39:d5:d1:a3:af:6a:28:49:d1:23:63:af:cb:7d:27: 0c:1e:e3:73:f9:8f:3d:69:45:bf:a4:d9:2a:d0:a4: 6f:17:41:96:97:26:41:a5:44:81:a3:30:21:e1:52: df:6f:01:ff:f0:c4:c9:3e:0b:c2:05:6c:ba:aa:44: 7d:fd:d9:bf:d3:71:99:a6:9e:dd:b1:b0:dd:5b:4e: 08:f4:c4:0b:49:19:8d:b3:b4:79:5e:ea:01:46:7c: e6:20:4d:1b:0c:70:72:88:0d:d0:7f:ba:bf:39:f3: 18:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:25:29:BE:DD:72:AF:8D:9A:96:52:64:B3:1D:B0:ED:10:8D:87:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/458a2a99-bd91-394a-952c-64c86701120a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:5d:ec:f3:0f:da:a1:99:28:a7:5c:96:e3:db:e1:b0:19:1d: 63:63:1b:ba:fe:4d:4c:da:9c:a8:d4:54:85:77:99:0f:ae:62: 76:29:5d:32:b4:52:e4:c7:ff:89:60:b5:74:44:ef:c1:da:b4: 84:0d:4e:86:79:ce:4a:dd:18:c8:a0:7e:9f:93:39:f6:48:85: a3:81:b8:60:c2:e1:e8:8b:71:d1:1a:9a:fb:3a:18:b1:d5:e5: 59:20:74:d5:35:46:e6:fd:f8:78:90:1f:ed:0b:ee:4a:8f:ac: 1c:da:13:0c:a1:f6:45:e2:9d:39:35:04:8f:c5:18:19:79:28: 73:84:cd:e8:b8:e6:42:9e:11:80:6e:d4:8a:a9:4e:11:7b:9e: 9f:80:47:2a:54:a4:c5:fa:38:6b:14:a5:d8:58:f6:26:2d:b0: 9a:50:70:c3:05:55:75:7c:54:55:65:ab:ec:d7:b6:c2:dd:7e: eb:44:4c:a1:c3:bb:c9:e2:44:06:0d:14:2e:64:9e:ea:71:5d: a9:17:79:5c:f5:ae:42:24:41:41:8f:9c:a7:3c:07:ee:00:f6: 1e:33:aa:39:a2:29:e7:be:c5:74:25:40:66:6c:ba:64:c4:fe: 26:5d:c3:89:2c:55:a5:1b:76:d6:dd:9d:b7:11:57:20:4a:db: 4a:12:fb:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S1vLzF2nQ8uoEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk NTM5OTE3ZjUtYTU5Yi00NjcyLTgwZGQtOGMxNjNhNmIwMTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOhBMRHkj9lHnaP4tfkeacvw1xbPcNr2FoHA a1wdK/4T8SukzUG6noF+O5uwkDV0wq3NRIgfPoqNSravj8gNTVNmJPljViXrlYfZ gvPY0zAEipmvB4BQQF75Zkfd8jA0oPuKBlMOnjvfMNhfPFI+v2SgVErTswdGMoBk 289hAVA6srP2Nwe5c7I6QJ4vivgSqDlcv/U51dGjr2ooSdEjY6/LfScMHuNz+Y89 aUW/pNkq0KRvF0GWlyZBpUSBozAh4VLfbwH/8MTJPgvCBWy6qkR9/dm/03GZpp7d sbDdW04I9MQLSRmNs7R5XuoBRnzmIE0bDHByiA3Qf7q/OfMYFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0lKb7dcq+NmpZSZLMdsO0QjYeBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDU4YTJhOTktYmQ5MS0z OTRhLTk1MmMtNjRjODY3MDExMjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9OzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9d7PMP2qGZKKdcluPb4bAZHWNjG7r+TUzanKjUVIV3mQ+uYnYpXTK0 UuTH/4lgtXRE78HatIQNToZ5zkrdGMigfp+TOfZIhaOBuGDC4eiLcdEamvs6GLHV 5VkgdNU1Rub9+HiQH+0L7kqPrBzaEwyh9kXinTk1BI/FGBl5KHOEzei45kKeEYBu 1IqpThF7np+ARypUpMX6OGsUpdhY9iYtsJpQcMMFVXV8VFVlq+zXtsLdfutETKHD u8niRAYNFC5knupxXakXeVz1rkIkQUGPnKc8B+4A9h4zqjmiKee+xXQlQGZsumTE /iZdw4ksVaUbdtbdnbcRVyBK20oS+24= -----END CERTIFICATE-----Generated at Tue Jul 22 19:46:58 2025 by rpki-client