$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bd9573c-44c5-31f9-b916-2f10a675e957.roa File: 4bd9573c-44c5-31f9-b916-2f10a675e957.roa (raw, json) Hash identifier: xIAj8bJjiWBTmHsp7wl6uFQgdpYP1mLtbAwN1XXxWcI= Subject key identifier: 40:10:AA:9E:80:C2:44:85:4C:AE:B6:50:19:46:FF:18:88:23:FA:1A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A68263B3610DA9E5EB611E900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bd9573c-44c5-31f9-b916-2f10a675e957.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 55644 IP address blocks: 23.203.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:3b:36:10:da:9e:5e:b6:11:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=2f25e63d-f565-4fa7-9255-4e480604663c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bf:72:03:07:3c:d2:a9:e1:bd:0f:e2:ea:14: 64:aa:83:ca:cf:c9:14:a9:89:2f:61:b0:88:5e:2c: d3:1a:3e:49:6e:6b:b1:c6:a0:6a:8c:68:f6:d1:5e: 2e:99:9c:38:a6:f2:4a:74:5d:9f:32:64:ab:4d:84: cb:49:64:99:2a:c7:68:31:7a:67:c8:b5:94:b5:48: 4c:91:81:ed:98:f1:ab:aa:2f:ff:dd:05:96:f8:fd: 0e:cf:3d:b1:b0:29:1d:fd:a1:3c:ea:80:82:e4:e0: 05:a5:5c:53:f6:46:6b:bf:eb:4f:46:4a:86:0c:ca: 56:7b:f9:44:d7:17:7a:62:87:64:db:cf:c1:cd:fb: 73:15:d2:bb:96:5f:03:9b:3b:70:60:e9:96:fa:24: 27:41:59:a5:72:cb:0f:02:29:57:c7:6e:24:4a:4b: 24:cc:b2:43:77:59:ec:ea:b8:db:e6:f7:db:0c:2a: 82:d4:34:ec:a0:c4:57:76:86:55:cb:5a:50:cc:4a: c3:66:8b:b6:dc:1b:a2:f7:d0:10:ef:80:ac:13:67: d5:2b:2c:50:7c:fe:0e:41:9e:57:e9:3f:7b:da:49: 7b:32:c0:05:06:95:dc:8c:c0:46:34:4b:04:3e:48: c6:a4:3f:98:4f:9f:03:8a:a3:dd:bd:b7:4d:5b:58: 7d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:10:AA:9E:80:C2:44:85:4C:AE:B6:50:19:46:FF:18:88:23:FA:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bd9573c-44c5-31f9-b916-2f10a675e957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:d8:93:83:de:30:69:3b:7b:54:68:8b:7b:b6:65:72:43:c9: 49:e1:38:f3:75:00:b3:80:f6:98:33:24:de:ec:c3:2f:b3:bd: f5:2b:0d:e8:6e:13:ca:40:04:c3:b4:d1:38:f0:8b:9f:41:e9: b3:4e:41:49:27:09:4b:3e:4a:f5:04:5e:59:7b:2e:e9:cb:a3: 29:dd:ad:bf:8b:24:2e:c7:97:44:1b:4e:9c:86:d4:6b:a6:f2: 14:5a:e1:f9:6c:14:ab:54:bc:14:71:b7:e8:5f:f0:9c:6e:8a: f7:e2:b2:46:c2:c7:0b:43:45:dc:32:ee:1c:52:ac:7e:95:2a: 3c:29:51:a5:34:df:63:28:73:e4:6d:97:78:98:d1:03:17:8b: 73:95:00:35:65:33:0a:38:fb:52:d1:02:02:de:49:1f:91:44: 43:55:f6:52:da:3e:38:da:00:8b:7f:c2:8d:67:22:dc:d0:9c: 0c:65:08:a7:12:a8:10:55:5c:7e:5e:7d:7b:75:e3:6f:c5:14: b0:2a:78:a3:ab:d8:1a:88:d5:f1:b4:2b:cd:5c:7f:34:99:98: d1:b0:b9:49:a3:02:b7:06:85:55:48:d3:6a:8f:78:46:cc:2f: b7:b9:9f:99:0e:d2:33:4f:56:93:91:26:c1:fc:3e:75:c9:4d: 7b:93:df:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJjs2ENqeXrYR6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk MmYyNWU2M2QtZjU2NS00ZmE3LTkyNTUtNGU0ODA2MDQ2NjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy79yAwc80qnhvQ/i6hRkqoPKz8kUqYkvYbCI XizTGj5JbmuxxqBqjGj20V4umZw4pvJKdF2fMmSrTYTLSWSZKsdoMXpnyLWUtUhM kYHtmPGrqi//3QWW+P0Ozz2xsCkd/aE86oCC5OAFpVxT9kZrv+tPRkqGDMpWe/lE 1xd6Yodk28/BzftzFdK7ll8DmztwYOmW+iQnQVmlcssPAilXx24kSkskzLJDd1ns 6rjb5vfbDCqC1DTsoMRXdoZVy1pQzErDZou23Bui99AQ74CsE2fVKyxQfP4OQZ5X 6T972kl7MsAFBpXcjMBGNEsEPkjGpD+YT58DiqPdvbdNW1h9EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAQqp6AwkSFTK62UBlG/xiII/oaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGJkOTU3M2MtNDRjNS0z MWY5LWI5MTYtMmYxMGE2NzVlOTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8sgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzYk4PeMGk7e1Roi3u2ZXJDyUnhOPN1ALOA9pgzJN7swy+zvfUrDehu E8pABMO00Tjwi59B6bNOQUknCUs+SvUEXll7LunLoyndrb+LJC7Hl0QbTpyG1Gum 8hRa4flsFKtUvBRxt+hf8JxuivfiskbCxwtDRdwy7hxSrH6VKjwpUaU032Moc+Rt l3iY0QMXi3OVADVlMwo4+1LRAgLeSR+RRENV9lLaPjjaAIt/wo1nItzQnAxlCKcS qBBVXH5efXt142/FFLAqeKOr2BqI1fG0K81cfzSZmNGwuUmjArcGhVVI02qPeEbM L7e5n5kO0jNPVpORJsH8PnXJTXuT3+E= -----END CERTIFICATE-----Generated at Tue Jul 22 11:48:58 2025 by rpki-client