$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b4c0845-dbbb-3d3a-888e-4a520740ef2f.roa File: 8b4c0845-dbbb-3d3a-888e-4a520740ef2f.roa (raw, json) Hash identifier: KgJ+DCeD41QL0b8c2eB0UdhSG9LJq7JqZl1D1j1ue5g= Subject key identifier: 77:A8:17:20:8E:E5:25:2C:F3:A3:A4:5F:8B:B2:2F:5B:B6:DC:18:CF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7D1607EFFB9013DD283A9430 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b4c0845-dbbb-3d3a-888e-4a520740ef2f.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.216.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:16:07:ef:fb:90:13:dd:28:3a:94:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=c79f4eee-5ca5-4cb3-b1aa-9e6a50a4b112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d6:a3:ee:aa:1b:d5:46:b9:e6:84:60:73:3e: a3:9e:87:7f:f0:07:4d:4c:66:e9:a2:51:8a:f8:da: cc:95:a3:1d:96:3a:86:eb:ca:ca:f8:83:ce:fe:38: 50:39:a4:69:3a:c2:d4:35:b2:04:fb:7d:28:eb:05: b2:ef:5b:71:12:b8:50:1c:ae:0a:a2:af:3e:d9:7f: 9d:ba:5b:bc:aa:0b:81:68:3e:21:b0:51:40:81:64: a7:4c:12:5d:78:d2:d8:4b:1b:fe:2a:6e:c3:c1:63: f2:60:88:d4:e3:23:bd:92:e2:e1:7b:53:6b:34:1f: 02:e4:44:59:cd:cf:a5:86:c0:c4:fa:b5:db:f1:6f: 92:02:24:90:3e:49:ad:e0:14:fa:83:62:8c:ff:c3: c6:3c:e0:a9:00:26:e0:55:77:b9:df:b2:88:15:34: ae:63:30:7b:ee:4c:93:ca:74:9a:30:73:31:07:f3: da:76:08:e9:d6:74:17:7d:b6:f7:d8:d5:a5:a9:87: ed:fe:04:10:33:81:9a:bd:69:4c:02:c4:20:78:3e: 12:b4:01:a4:03:db:12:92:f9:75:e4:07:99:34:53: bb:66:34:b5:5c:3e:3d:2d:7a:92:e1:c1:60:02:1e: 3e:48:8c:4a:ce:1a:a9:b7:b3:6c:b6:8e:dd:b8:65: fc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A8:17:20:8E:E5:25:2C:F3:A3:A4:5F:8B:B2:2F:5B:B6:DC:18:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b4c0845-dbbb-3d3a-888e-4a520740ef2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.216.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:ce:bc:30:b6:6e:40:10:8b:3a:0d:89:f5:76:b7:e6:97:4a: 8b:df:e4:a4:5e:77:37:a2:11:ff:8c:bc:97:07:7c:6e:ae:24: eb:bf:06:5c:40:8f:b6:c6:33:2a:0b:90:3c:45:56:d5:65:74: 77:bd:85:9f:cc:5e:2d:75:c4:a7:aa:19:04:a0:6e:70:de:c1: 52:da:b6:91:8f:f2:29:9c:06:25:f0:60:42:7a:5c:cd:5a:b4: 80:ad:9d:fe:e2:46:34:7b:04:53:fe:31:99:64:8b:05:11:4f: d4:38:6b:46:b8:22:39:6d:45:bf:ed:69:31:35:bc:5f:93:35: 42:83:c7:f4:ae:c4:7d:ac:a9:a8:54:95:b2:5b:b7:b9:13:19: 62:06:22:eb:0c:4c:d6:ad:dd:b1:b2:45:b4:8c:aa:d7:e1:be: f2:a3:c8:e4:46:71:c0:94:bf:de:38:b6:12:6f:ba:7b:e5:cd: ad:b9:30:7a:2a:43:8b:1f:5c:64:46:3d:17:18:af:d5:a0:e6: ba:89:bf:fc:8f:e8:74:2f:e3:f5:1e:21:e2:a1:86:55:e7:80: 74:d8:9b:ae:5c:ba:81:af:d9:79:a2:d8:02:eb:fb:ed:55:e8: e9:59:ef:a3:9b:5e:db:3d:45:91:69:d9:61:05:62:cf:74:58: 6d:d9:a3:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9Fgfv+5AT3Sg6lDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk Yzc5ZjRlZWUtNWNhNS00Y2IzLWIxYWEtOWU2YTUwYTRiMTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttaj7qob1Ua55oRgcz6jnod/8AdNTGbpolGK +NrMlaMdljqG68rK+IPO/jhQOaRpOsLUNbIE+30o6wWy71txErhQHK4Koq8+2X+d ulu8qguBaD4hsFFAgWSnTBJdeNLYSxv+Km7DwWPyYIjU4yO9kuLhe1NrNB8C5ERZ zc+lhsDE+rXb8W+SAiSQPkmt4BT6g2KM/8PGPOCpACbgVXe537KIFTSuYzB77kyT ynSaMHMxB/Padgjp1nQXfbb32NWlqYft/gQQM4GavWlMAsQgeD4StAGkA9sSkvl1 5AeZNFO7ZjS1XD49LXqS4cFgAh4+SIxKzhqpt7Nsto7duGX8MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHeoFyCO5SUs86OkX4uyL1u23BjPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGI0YzA4NDUtZGJiYi0z ZDNhLTg4OGUtNGE1MjA3NDBlZjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9hIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPOvDC2bkAQizoNifV2t+aXSovf5KRedzeiEf+MvJcHfG6uJOu/BlxA j7bGMyoLkDxFVtVldHe9hZ/MXi11xKeqGQSgbnDewVLatpGP8imcBiXwYEJ6XM1a tICtnf7iRjR7BFP+MZlkiwURT9Q4a0a4IjltRb/taTE1vF+TNUKDx/SuxH2sqahU lbJbt7kTGWIGIusMTNat3bGyRbSMqtfhvvKjyORGccCUv944thJvunvlza25MHoq Q4sfXGRGPRcYr9Wg5rqJv/yP6HQv4/UeIeKhhlXngHTYm65cuoGv2Xmi2ALr++1V 6OlZ76ObXts9RZFp2WEFYs90WG3Zo9E= -----END CERTIFICATE-----Generated at Wed Jul 23 01:34:19 2025 by rpki-client