$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a72be209-9077-38dd-86b4-19449ccca47d.roa File: a72be209-9077-38dd-86b4-19449ccca47d.roa (raw, json) Hash identifier: u9CmVg7SIgm0fAxPGj3au0/R5d45uNFBr9pdUqtQkVY= Subject key identifier: 52:75:A6:B7:66:C5:DF:63:A4:6C:27:AC:EE:79:FD:70:9E:46:5A:C7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7A4B5E95C6656C2B13525C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a72be209-9077-38dd-86b4-19449ccca47d.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 16625 IP address blocks: 23.213.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:5e:95:c6:65:6c:2b:13:52:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=86b3e4b8-6b3f-4800-a8d7-a5820e9259fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e9:2c:23:9e:c4:fe:b5:d1:fe:2c:95:d0:7f: b1:f3:3f:fe:3f:e8:80:a1:91:c1:26:21:4d:01:7c: 3d:6a:d0:69:5d:0f:71:9e:c2:83:20:bd:9e:0e:6e: b3:d1:59:56:f3:d3:98:9c:1b:8e:0d:ed:68:92:1b: c4:96:db:db:02:d9:c5:ad:21:e4:82:b9:f6:63:23: a4:b5:c9:5f:88:32:3a:20:0f:66:6f:a3:b9:2b:76: b8:55:d5:ec:13:cf:aa:58:75:3f:65:68:02:85:cb: 97:c3:3a:ec:24:d1:00:62:88:d8:53:72:ea:84:8e: b1:b2:fc:f3:dd:65:4c:5f:54:4d:a5:fe:ad:1f:1f: 44:4a:9c:2f:59:45:04:cf:10:47:4f:a0:8a:7a:34: ef:cf:0d:7c:82:04:69:77:18:db:7b:46:fd:9c:78: a1:b7:84:4b:1f:dd:2f:6c:04:d0:5c:2c:d4:4c:6c: 2d:0c:d8:18:14:88:38:97:f4:b6:0a:1d:ea:40:7e: 7f:53:21:be:57:d2:e9:ae:2d:39:af:af:58:85:b2: 0c:96:80:9a:0f:1d:ee:88:ca:e0:87:e8:49:7f:a3: 52:d2:02:a2:23:96:8a:9a:cd:73:b9:4c:c4:53:6e: e7:5a:1b:ed:fb:7e:dd:8d:52:b5:11:db:05:76:7f: c6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:75:A6:B7:66:C5:DF:63:A4:6C:27:AC:EE:79:FD:70:9E:46:5A:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a72be209-9077-38dd-86b4-19449ccca47d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:41:13:ea:f9:4f:a8:eb:7f:85:1d:ee:a5:a6:d5:e4:da:a1: 60:66:80:5d:51:b3:ad:ea:ce:93:1d:a6:95:95:05:57:26:3f: 0d:93:ad:f0:12:0e:70:fc:6a:5c:90:f9:eb:6f:db:5c:02:e0: b1:c9:77:86:54:04:f5:04:89:1c:a2:d5:59:b3:fe:80:9f:7c: 91:26:43:20:f8:27:53:12:39:0a:0e:cf:3e:17:8a:23:0c:8b: d6:85:d4:99:e6:cd:c8:a5:c9:5a:04:72:2d:fa:d0:c4:d7:f9: d6:f7:45:71:79:70:6b:d9:65:5a:ee:56:95:4f:5a:ca:d0:ac: f5:92:8a:e8:dd:7a:c0:e3:98:ac:14:98:ab:fc:46:48:96:5f: 43:b2:be:46:c9:ab:f6:8a:26:8c:5d:d3:e0:de:47:c1:0d:8e: aa:06:93:87:79:40:c2:cb:22:24:0d:a3:f9:4a:07:b8:87:79: ce:f4:38:87:08:49:b3:8f:e0:06:61:79:53:bb:6d:4e:8e:a3: ac:75:68:d2:1c:8b:d4:a4:38:1d:7b:7d:dd:1f:26:f6:04:0e: a3:d6:a8:e1:80:79:5f:ec:ed:1c:1e:03:da:16:71:f8:fd:42: 8d:54:6f:1d:0d:74:96:0e:4c:0a:43:e9:6d:63:6d:13:2a:7f: 91:b7:70:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S16VxmVsKxNSXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk ODZiM2U0YjgtNmIzZi00ODAwLWE4ZDctYTU4MjBlOTI1OWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOksI57E/rXR/iyV0H+x8z/+P+iAoZHBJiFN AXw9atBpXQ9xnsKDIL2eDm6z0VlW89OYnBuODe1okhvEltvbAtnFrSHkgrn2YyOk tclfiDI6IA9mb6O5K3a4VdXsE8+qWHU/ZWgChcuXwzrsJNEAYojYU3LqhI6xsvzz 3WVMX1RNpf6tHx9ESpwvWUUEzxBHT6CKejTvzw18ggRpdxjbe0b9nHiht4RLH90v bATQXCzUTGwtDNgYFIg4l/S2Ch3qQH5/UyG+V9Lpri05r69YhbIMloCaDx3uiMrg h+hJf6NS0gKiI5aKms1zuUzEU27nWhvt+37djVK1EdsFdn/GEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJ1prdmxd9jpGwnrO55/XCeRlrHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTcyYmUyMDktOTA3Ny0z OGRkLTg2YjQtMTk0NDljY2NhNDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9VgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5BE+r5T6jrf4Ud7qWm1eTaoWBmgF1Rs63qzpMdppWVBVcmPw2TrfAS DnD8alyQ+etv21wC4LHJd4ZUBPUEiRyi1Vmz/oCffJEmQyD4J1MSOQoOzz4XiiMM i9aF1JnmzcilyVoEci360MTX+db3RXF5cGvZZVruVpVPWsrQrPWSiujdesDjmKwU mKv8RkiWX0OyvkbJq/aKJoxd0+DeR8ENjqoGk4d5QMLLIiQNo/lKB7iHec70OIcI SbOP4AZheVO7bU6Oo6x1aNIci9SkOB17fd0fJvYEDqPWqOGAeV/s7RweA9oWcfj9 Qo1Ubx0NdJYOTApD6W1jbRMqf5G3cI0= -----END CERTIFICATE-----Generated at Thu Jul 24 11:54:01 2025 by rpki-client