$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e602e8d-67dd-36a0-89c4-83b8a072d323.roa File: 8e602e8d-67dd-36a0-89c4-83b8a072d323.roa (raw, json) Hash identifier: VsRCGwYtqvN8TcWPq4CKF44FR5mtxUlPQkNUtzTZugo= Subject key identifier: DE:1B:AA:5E:5A:37:AE:96:D3:41:80:BD:AF:A0:61:E8:13:2B:CD:93 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A78E5FF35F509EE3FC460B580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e602e8d-67dd-36a0-89c4-83b8a072d323.roa Signing time: Thu 10 Jul 2025 13:01:02 +0000 ROA not before: Thu 10 Jul 2025 13:01:02 +0000 ROA not after: Wed 08 Oct 2025 13:01:02 +0000 asID: 22773 IP address blocks: 23.208.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:e5:ff:35:f5:09:ee:3f:c4:60:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 10 13:01:02 2025 GMT Not After : Oct 8 13:01:02 2025 GMT Subject: CN=4449b3d5-4067-4821-ae19-c64988f74ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5c:76:05:1b:99:67:ad:4e:44:13:a5:8f:76: f9:9d:15:7b:de:1a:61:76:1d:6b:cd:59:16:36:2c: 7a:4f:e5:4f:e8:8f:aa:9b:05:30:1f:cc:f0:79:9d: 95:ed:16:90:81:dc:ed:55:7b:4f:a7:e8:ac:2e:87: 84:82:8f:4a:d7:0a:d2:d9:1a:d9:27:9d:44:e2:f2: b0:f7:f5:d6:18:6c:af:f0:b8:60:e7:e7:22:2b:33: b9:78:d9:a0:75:67:f6:a5:60:1f:7a:29:cf:f1:15: 51:7b:02:34:19:b9:fe:f8:bc:c4:a7:2f:57:04:d8: 6c:ed:4f:a7:42:60:04:c1:8e:4c:0c:c3:65:af:aa: ad:97:34:b2:32:14:3b:c4:52:60:49:78:28:f2:48: 4c:cc:bc:29:f1:92:75:a7:92:72:be:aa:e2:94:6b: 47:09:f8:23:42:72:85:64:e6:41:92:91:b9:90:af: 0c:3d:5f:67:58:7d:fe:96:89:0e:94:1b:13:06:79: a5:15:9e:d8:a6:8d:f9:f4:d0:41:09:d6:8b:97:c2: 8e:36:ff:22:07:18:d3:5d:a7:3f:b5:a6:a5:08:e6: 4b:3d:7f:c2:cf:94:f7:7c:1e:11:59:b3:74:86:b8: 95:b5:28:fc:b0:3c:15:c7:98:67:12:95:ea:7b:7b: d8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1B:AA:5E:5A:37:AE:96:D3:41:80:BD:AF:A0:61:E8:13:2B:CD:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e602e8d-67dd-36a0-89c4-83b8a072d323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:5a:97:54:bd:15:85:9c:1a:ec:2c:bb:59:9a:f1:15:c6:ff: 47:4f:cb:d5:cd:d7:c5:4c:25:81:df:de:15:b8:66:02:bd:c6: 6b:f1:e8:f4:5c:e2:57:17:24:52:ac:8e:fb:13:5b:d3:7a:ca: 40:bd:98:e8:9d:4f:df:aa:6d:0e:01:e1:10:7a:07:52:46:1d: 57:8a:3c:1c:ee:ca:a7:36:ee:c4:33:fd:96:80:fd:0e:4d:62: 8c:69:35:b4:85:eb:dc:7d:98:e8:7f:de:fa:a6:96:16:60:70: c8:0f:09:c8:7d:f8:4d:ca:9d:b5:48:a5:1d:e9:70:69:82:0f: 54:77:53:8e:38:c1:c6:ad:75:43:4d:ca:14:54:6a:40:3e:96: 9b:bc:2f:80:f2:05:51:1d:22:44:e3:26:40:47:d1:14:36:04: de:e0:7f:27:41:f9:b2:ae:f2:e9:69:e0:3b:a5:32:af:df:86: 5c:6e:ec:b7:e0:ce:dc:e9:b2:0b:ad:b4:ae:d1:83:16:d7:0e: f5:87:d6:de:6b:e8:7d:3d:5a:ed:d7:e5:cf:0e:b8:71:4b:b4: 4c:41:ec:26:f6:a6:6f:19:7f:04:c5:2c:05:92:0d:b1:07:5e: ec:54:89:6c:56:15:dd:be:58:4c:ee:3d:d1:6b:3b:fa:15:14: 2e:02:1f:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp45f819QnuP8RgtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMDEzMDEwMloXDTI1MTAwODEzMDEwMlowLzEtMCsGA1UEAxMk NDQ0OWIzZDUtNDA2Ny00ODIxLWFlMTktYzY0OTg4Zjc0ZWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFx2BRuZZ61ORBOlj3b5nRV73hphdh1rzVkW Nix6T+VP6I+qmwUwH8zweZ2V7RaQgdztVXtPp+isLoeEgo9K1wrS2RrZJ51E4vKw 9/XWGGyv8Lhg5+ciKzO5eNmgdWf2pWAfeinP8RVRewI0Gbn++LzEpy9XBNhs7U+n QmAEwY5MDMNlr6qtlzSyMhQ7xFJgSXgo8khMzLwp8ZJ1p5JyvqrilGtHCfgjQnKF ZOZBkpG5kK8MPV9nWH3+lokOlBsTBnmlFZ7Ypo359NBBCdaLl8KONv8iBxjTXac/ taalCOZLPX/Cz5T3fB4RWbN0hriVtSj8sDwVx5hnEpXqe3vYYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4bql5aN66W00GAva+gYegTK82TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGU2MDJlOGQtNjdkZC0z NmEwLTg5YzQtODNiOGEwNzJkMzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9CEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtal1S9FYWcGuwsu1ma8RXG/0dPy9XN18VMJYHf3hW4ZgK9xmvx6PRc 4lcXJFKsjvsTW9N6ykC9mOidT9+qbQ4B4RB6B1JGHVeKPBzuyqc27sQz/ZaA/Q5N YoxpNbSF69x9mOh/3vqmlhZgcMgPCch9+E3KnbVIpR3pcGmCD1R3U444wcatdUNN yhRUakA+lpu8L4DyBVEdIkTjJkBH0RQ2BN7gfydB+bKu8ulp4DulMq/fhlxu7Lfg ztzpsguttK7RgxbXDvWH1t5r6H09Wu3X5c8OuHFLtExB7Cb2pm8ZfwTFLAWSDbEH XuxUiWxWFd2+WEzuPdFrO/oVFC4CH3Q= -----END CERTIFICATE-----Generated at Thu Jul 24 00:04:18 2025 by rpki-client