$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85dd9219-8c1a-350d-903b-2245dcf201d8.roa File: 85dd9219-8c1a-350d-903b-2245dcf201d8.roa (raw, json) Hash identifier: bOaeRPUM5w5f8j9p6SPieJZJDTkNl21cSTtAhY+a+S8= Subject key identifier: AA:01:01:1E:28:B4:F9:92:7D:F3:F5:A3:E4:76:E9:11:85:EA:40:42 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8B0B6BC6CEBA80B074D5A080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85dd9219-8c1a-350d-903b-2245dcf201d8.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.223.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:6b:c6:ce:ba:80:b0:74:d5:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=9e4bb3c2-cffe-47c8-b942-4269a445d410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2a:4e:74:c7:da:ea:2c:65:0e:b3:cc:9f:a0: b0:2d:f4:ce:d2:b5:58:e4:d7:62:ab:c7:05:b2:07: 8f:5f:dc:22:6d:e6:38:6f:27:b9:d3:cd:ef:c5:84: 07:da:21:86:d6:a8:f9:ea:03:cb:8e:bf:52:a6:ea: 99:60:cc:f5:6f:15:04:39:66:63:7e:80:4f:ac:59: da:2b:3f:6d:fe:d3:3a:0d:0d:eb:b0:8b:db:59:6c: 4f:b3:e3:6f:7d:e7:b4:de:45:fe:b1:fe:39:7b:59: 13:c9:14:17:fd:16:2c:a1:6d:44:5a:37:c7:d8:b1: 48:7c:0f:ef:02:1f:d4:cf:2a:28:6b:1c:71:b8:d1: a7:65:90:7b:bc:44:15:13:0e:b0:4e:39:d9:98:eb: 2e:52:af:de:a4:75:16:7d:27:90:e0:ed:e9:b1:34: b3:7f:7f:29:f8:e7:2e:01:d5:c5:67:f0:ed:0a:fc: ad:47:36:d3:cf:fb:25:8e:35:ab:bc:1f:09:14:04: 9b:8c:fa:9e:7d:20:a8:cf:7e:4b:54:ca:42:af:ec: d3:3b:9b:12:45:a3:a2:58:ae:48:be:d7:84:1f:c2: 5f:d5:90:52:61:94:8a:86:96:e2:ec:e7:7d:95:43: e9:7d:e1:06:5e:12:d6:ba:be:48:d5:2d:50:1a:61: 5c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:01:01:1E:28:B4:F9:92:7D:F3:F5:A3:E4:76:E9:11:85:EA:40:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85dd9219-8c1a-350d-903b-2245dcf201d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:4d:ea:e6:f6:f7:dc:e1:ac:d7:e0:13:70:7b:c8:88:36:e6: c9:4b:a3:1b:93:39:c9:cc:15:50:99:8c:28:9c:1b:43:98:67: 9a:7f:36:cf:8e:1c:d7:d0:42:8f:23:52:be:2e:01:ea:0e:00: fc:57:e6:34:e7:97:8c:c8:8b:64:19:9d:6f:ff:d9:c5:44:10: b6:a3:e4:ce:23:01:e3:d6:dd:45:1d:55:54:e5:11:48:2f:20: 01:d5:c8:d7:12:70:ee:73:93:f9:db:93:f4:af:ca:e0:6a:57: 0c:d6:c9:d9:0c:fb:47:38:a4:46:08:05:76:24:33:af:ca:a6: 55:5c:c3:e9:97:5c:95:ad:7e:47:92:8d:5d:7f:c4:00:db:8d: d5:fa:5e:3d:c5:b4:12:5d:72:eb:23:84:f8:18:84:d4:5a:83: 00:7b:97:17:fe:a8:8a:3b:bd:f4:e3:5a:25:6c:37:bc:63:79: 0e:2b:e4:9a:16:8f:26:8e:1f:a4:75:ae:51:86:9c:40:06:9a: 67:d4:32:08:78:0f:d3:47:42:53:33:fc:8e:7a:39:95:23:35: 20:a0:f2:fd:cc:aa:cc:22:ba:6e:3c:78:90:85:d7:d3:bd:a8: 2b:8a:70:40:e0:13:b3:6f:02:7d:ac:cb:15:3a:6f:19:f4:12: 38:50:02:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC2vGzrqAsHTVoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk OWU0YmIzYzItY2ZmZS00N2M4LWI5NDItNDI2OWE0NDVkNDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CpOdMfa6ixlDrPMn6CwLfTO0rVY5Ndiq8cF sgePX9wibeY4bye5083vxYQH2iGG1qj56gPLjr9SpuqZYMz1bxUEOWZjfoBPrFna Kz9t/tM6DQ3rsIvbWWxPs+Nvfee03kX+sf45e1kTyRQX/RYsoW1EWjfH2LFIfA/v Ah/UzyooaxxxuNGnZZB7vEQVEw6wTjnZmOsuUq/epHUWfSeQ4O3psTSzf38p+Ocu AdXFZ/DtCvytRzbTz/sljjWrvB8JFASbjPqefSCoz35LVMpCr+zTO5sSRaOiWK5I vteEH8Jf1ZBSYZSKhpbi7Od9lUPpfeEGXhLWur5I1S1QGmFcXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoBAR4otPmSffP1o+R26RGF6kBCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODVkZDkyMTktOGMxYS0z NTBkLTkwM2ItMjI0NWRjZjIwMWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9+VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1N6ub299zhrNfgE3B7yIg25slLoxuTOcnMFVCZjCicG0OYZ5p/Ns+O HNfQQo8jUr4uAeoOAPxX5jTnl4zIi2QZnW//2cVEELaj5M4jAePW3UUdVVTlEUgv IAHVyNcScO5zk/nbk/SvyuBqVwzWydkM+0c4pEYIBXYkM6/KplVcw+mXXJWtfkeS jV1/xADbjdX6Xj3FtBJdcusjhPgYhNRagwB7lxf+qIo7vfTjWiVsN7xjeQ4r5JoW jyaOH6R1rlGGnEAGmmfUMgh4D9NHQlMz/I56OZUjNSCg8v3Mqswium48eJCF19O9 qCuKcEDgE7NvAn2syxU6bxn0EjhQAsg= -----END CERTIFICATE-----Generated at Tue Jul 22 20:07:00 2025 by rpki-client