$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b6d2fbe-5463-3be9-a7ea-4b6251ccbede.roa File: 8b6d2fbe-5463-3be9-a7ea-4b6251ccbede.roa (raw, json) Hash identifier: t2RP++oxtIa15mKZYRKXSwnC1IULtbF8Qs6skxLBANQ= Subject key identifier: 99:59:6B:9E:D7:28:20:A9:25:80:9F:E6:6B:72:D1:78:AD:DD:E0:2A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8840A8990E31D4BCCEF7BB70 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b6d2fbe-5463-3be9-a7ea-4b6251ccbede.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 16625 IP address blocks: 23.219.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:a8:99:0e:31:d4:bc:ce:f7:bb:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=cf40670e-f7b6-4db9-94ab-e30e93282021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e6:f1:73:fc:36:91:d8:da:31:31:43:d3:55: 5e:8e:d9:7b:08:ed:81:88:27:08:1c:d0:d3:44:3c: 35:0f:89:7b:ce:73:6d:5d:46:bf:e7:c4:f5:b5:98: b9:8f:31:e4:a7:d7:7d:bb:09:fe:a5:71:ce:c6:b7: 17:3d:93:d7:3b:97:5c:f4:86:02:1e:30:f8:95:cd: 09:7a:fe:59:05:de:dc:0e:a2:14:98:2b:89:db:61: 46:79:ed:28:dd:b0:b9:90:e4:4f:ff:71:d3:30:43: 12:cf:fe:87:d3:79:cc:97:8b:f2:72:93:26:cf:85: 54:04:e2:70:82:3b:45:d7:b0:5c:89:37:c9:6f:79: 3e:3f:4d:7d:c0:17:47:b5:64:52:fd:2d:75:b7:69: 5e:8b:4a:51:c1:01:34:80:95:ae:17:03:18:d9:c5: a8:22:af:b2:b0:cb:78:b4:07:89:73:3b:90:6b:37: c4:98:6f:63:f3:36:d0:c3:57:da:44:83:4b:72:7f: 4a:1e:a0:7e:64:af:b3:f9:4c:64:dc:a8:ba:2f:48: fe:23:ae:24:56:13:a1:df:42:ac:48:fd:5f:91:98: 61:08:2c:a7:29:08:70:14:18:b2:45:d7:42:d5:8f: 3e:3a:79:76:5a:ad:04:e8:a6:23:e1:d7:0e:28:c1: 2f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:59:6B:9E:D7:28:20:A9:25:80:9F:E6:6B:72:D1:78:AD:DD:E0:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b6d2fbe-5463-3be9-a7ea-4b6251ccbede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:9a:e6:4d:92:6f:88:9b:1e:c6:02:54:54:1e:d4:b0:8d:f2: f9:9a:4e:b0:64:5e:f8:13:26:86:a2:89:b9:a8:d2:c1:e2:0d: f4:dd:a4:dd:8a:45:e1:72:b2:f9:44:10:73:75:e4:df:a6:2b: 77:5d:f7:a8:9d:46:76:af:5a:5c:14:30:ed:ee:87:1c:eb:ab: b4:6f:e9:13:71:f0:0e:49:69:87:e0:0b:a5:53:72:97:02:9d: f2:db:a3:83:9f:aa:3f:c6:e5:3c:be:4b:12:50:60:d5:03:88: 35:fe:56:bd:e6:15:29:4d:27:43:51:03:5c:3f:ea:02:b8:f6: 76:c1:4c:3e:74:57:c6:9c:c5:6b:f1:da:65:87:0f:b8:cf:3b: 1f:ba:22:07:71:ff:bf:98:4f:1e:1e:3c:76:1b:61:58:80:9c: 05:3b:5d:75:9b:ed:74:8a:1d:74:98:e6:d3:f1:24:cb:aa:21: 77:28:14:ea:d3:a5:a8:ce:9a:2f:d8:a9:6b:b7:5c:c7:2c:7b: a3:1b:dc:80:89:ab:ca:96:ca:22:8c:4a:5e:01:b9:4c:78:91: 52:0a:d9:a5:a2:2a:a7:26:1c:30:06:4f:a8:5a:5f:56:ad:aa: 58:4a:7e:a1:2a:c1:cc:06:1b:64:41:32:84:6e:3d:97:ea:d0: 71:2f:a9:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQKiZDjHUvM73u3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk Y2Y0MDY3MGUtZjdiNi00ZGI5LTk0YWItZTMwZTkzMjgyMDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Obxc/w2kdjaMTFD01Vejtl7CO2BiCcIHNDT RDw1D4l7znNtXUa/58T1tZi5jzHkp9d9uwn+pXHOxrcXPZPXO5dc9IYCHjD4lc0J ev5ZBd7cDqIUmCuJ22FGee0o3bC5kORP/3HTMEMSz/6H03nMl4vycpMmz4VUBOJw gjtF17BciTfJb3k+P019wBdHtWRS/S11t2lei0pRwQE0gJWuFwMY2cWoIq+ysMt4 tAeJczuQazfEmG9j8zbQw1faRINLcn9KHqB+ZK+z+Uxk3Ki6L0j+I64kVhOh30Ks SP1fkZhhCCynKQhwFBiyRddC1Y8+Onl2Wq0E6KYj4dcOKMEvsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlZa57XKCCpJYCf5mty0Xit3eAqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGI2ZDJmYmUtNTQ2My0z YmU5LWE3ZWEtNGI2MjUxY2NiZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9swMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2a5k2Sb4ibHsYCVFQe1LCN8vmaTrBkXvgTJoaiibmo0sHiDfTdpN2K ReFysvlEEHN15N+mK3dd96idRnavWlwUMO3uhxzrq7Rv6RNx8A5JaYfgC6VTcpcC nfLbo4Ofqj/G5Ty+SxJQYNUDiDX+Vr3mFSlNJ0NRA1w/6gK49nbBTD50V8acxWvx 2mWHD7jPOx+6Igdx/7+YTx4ePHYbYViAnAU7XXWb7XSKHXSY5tPxJMuqIXcoFOrT pajOmi/YqWu3XMcse6Mb3ICJq8qWyiKMSl4BuUx4kVIK2aWiKqcmHDAGT6haX1at qlhKfqEqwcwGG2RBMoRuPZfq0HEvqbY= -----END CERTIFICATE-----Generated at Wed Jul 23 01:29:32 2025 by rpki-client