$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/83fd0cfc-dbad-3c40-9f77-239e90b350b0.roa File: 83fd0cfc-dbad-3c40-9f77-239e90b350b0.roa (raw, json) Hash identifier: z9dICGDO2iG8GKYjBUctgy9h6LCpqsgQOGF/MIMznB8= Subject key identifier: 9E:63:12:04:DE:60:9F:07:36:DD:E7:72:20:7B:2B:F1:63:4F:43:1B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7A4B56D2F657D6B7CDDE7780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/83fd0cfc-dbad-3c40-9f77-239e90b350b0.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.213.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:56:d2:f6:57:d6:b7:cd:de:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=ca4f55e0-7a23-44e3-a013-6bb6814669c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a2:41:17:3c:b2:3b:ce:31:90:68:17:3c:c6: cc:04:f2:65:ed:90:5f:c7:46:74:cd:f3:a5:34:45: 07:92:92:16:83:01:5d:69:aa:ff:bd:0c:27:e2:38: ae:6e:63:37:9f:01:32:ae:99:eb:5a:7d:5e:13:bd: ae:b4:fc:7d:09:c6:74:49:28:4a:56:f7:4c:37:d0: f8:13:87:7d:31:8f:ed:7e:12:13:3f:31:b0:3c:c2: b3:18:64:e3:ed:70:5f:86:26:6b:86:b5:25:9e:92: 7c:5e:36:cb:c5:4c:0e:23:ed:88:5c:6b:21:17:44: e0:50:39:e6:ee:a1:ce:ef:fd:1b:0d:4f:8a:ee:47: 9a:ee:8f:ce:c8:03:0c:75:da:8a:ec:c1:b6:51:99: a2:99:32:1b:52:72:58:c8:58:26:57:06:b2:5e:50: cf:06:e4:b5:bf:a3:c4:b4:39:6a:c7:17:5c:65:a3: c5:fa:12:0e:b4:76:a6:8e:37:33:df:ec:65:2f:3b: d5:e5:48:9d:16:77:0e:0a:2a:f5:fa:4e:57:29:0e: 1a:26:e3:62:42:10:2a:6b:89:87:12:80:52:35:10: 7a:28:1f:b8:36:1c:67:db:ec:96:f8:68:5e:55:9e: 77:f6:f3:56:49:6e:01:d3:06:39:4d:3e:d2:50:37: 4a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:63:12:04:DE:60:9F:07:36:DD:E7:72:20:7B:2B:F1:63:4F:43:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/83fd0cfc-dbad-3c40-9f77-239e90b350b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:69:fd:b8:65:17:3c:b9:b8:09:94:fb:43:54:6c:6c:bf:77: bf:6e:90:dc:09:4a:aa:3b:50:c6:2d:cf:34:f4:12:7e:ef:05: a7:e9:f2:2d:37:31:32:1b:ef:fb:52:80:de:a2:e8:c1:a7:af: d7:a7:17:8f:1c:76:13:6c:c6:b1:8d:b0:f6:c3:65:18:03:79: 0a:dc:ee:a0:fe:6d:e1:e7:4a:71:95:5a:7c:c5:f0:33:3b:16: dd:9a:54:8a:54:6a:70:43:c7:b5:ed:2f:5f:1e:7e:e9:52:58: 5a:d2:09:9c:bc:6c:e2:85:9a:b6:c0:f3:28:1b:87:4b:4e:1f: c1:56:17:b4:4f:d1:a9:73:2e:52:12:44:48:12:20:f9:f2:df: f7:e8:06:77:f5:ca:11:99:df:f9:31:45:2d:f6:24:e3:67:3d: 0f:a3:7a:2c:62:08:83:9d:00:ef:d3:40:f0:0a:36:c2:05:72: f3:33:03:29:ca:0c:8e:40:3e:21:8e:32:35:aa:ab:78:5e:89: 63:aa:ce:25:73:18:75:9f:f5:aa:bc:c4:9d:02:7c:43:27:2a: 25:c0:2e:59:f9:52:a1:67:00:a7:8a:21:ce:6f:cb:ef:6e:3a: cf:13:3a:d7:cb:59:8d:84:cb:97:2b:40:f4:88:06:95:c3:2a: 8d:b6:f5:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S1bS9lfWt83ed4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk Y2E0ZjU1ZTAtN2EyMy00NGUzLWEwMTMtNmJiNjgxNDY2OWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06JBFzyyO84xkGgXPMbMBPJl7ZBfx0Z0zfOl NEUHkpIWgwFdaar/vQwn4jiubmM3nwEyrpnrWn1eE72utPx9CcZ0SShKVvdMN9D4 E4d9MY/tfhITPzGwPMKzGGTj7XBfhiZrhrUlnpJ8XjbLxUwOI+2IXGshF0TgUDnm 7qHO7/0bDU+K7kea7o/OyAMMddqK7MG2UZmimTIbUnJYyFgmVwayXlDPBuS1v6PE tDlqxxdcZaPF+hIOtHamjjcz3+xlLzvV5UidFncOCir1+k5XKQ4aJuNiQhAqa4mH EoBSNRB6KB+4Nhxn2+yW+GheVZ539vNWSW4B0wY5TT7SUDdKaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5jEgTeYJ8HNt3nciB7K/FjT0MbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODNmZDBjZmMtZGJhZC0z YzQwLTlmNzctMjM5ZTkwYjM1MGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9XMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtp/bhlFzy5uAmU+0NUbGy/d79ukNwJSqo7UMYtzzT0En7vBafp8i03 MTIb7/tSgN6i6MGnr9enF48cdhNsxrGNsPbDZRgDeQrc7qD+beHnSnGVWnzF8DM7 Ft2aVIpUanBDx7XtL18efulSWFrSCZy8bOKFmrbA8ygbh0tOH8FWF7RP0alzLlIS REgSIPny3/foBnf1yhGZ3/kxRS32JONnPQ+jeixiCIOdAO/TQPAKNsIFcvMzAynK DI5APiGOMjWqq3heiWOqziVzGHWf9aq8xJ0CfEMnKiXALln5UqFnAKeKIc5vy+9u Os8TOtfLWY2Ey5crQPSIBpXDKo229Qk= -----END CERTIFICATE-----Generated at Tue Jul 22 19:31:17 2025 by rpki-client