$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a962ab40-2935-3cfd-a9c5-66ea5da40cff.roa File: a962ab40-2935-3cfd-a9c5-66ea5da40cff.roa (raw, json) Hash identifier: yInVFxPZkPagXYFd7bvsbS0TKih/16W8/r42pYRP2r0= Subject key identifier: A7:9D:36:DE:F8:E0:FF:07:64:AE:3B:D2:38:78:A0:1F:D8:2E:54:FC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8B0B6CCE465E5345B19A1E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a962ab40-2935-3cfd-a9c5-66ea5da40cff.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.223.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:6c:ce:46:5e:53:45:b1:9a:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=3d60bddc-79b6-4441-a7c1-a51cc94670be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:be:92:62:d4:12:cd:28:db:34:a8:86:50:24: bc:81:e0:52:4e:9b:33:1e:60:19:7c:0b:cf:a0:16: af:b2:27:6e:60:a3:cc:92:44:48:8b:3c:d9:77:c7: cc:d9:60:8b:92:25:17:ab:8c:72:c6:4f:02:23:10: 29:df:49:dd:09:34:74:02:48:92:12:5e:74:6b:10: 9d:a0:3e:6d:38:fc:e0:a5:22:3c:95:6a:fc:42:c1: 92:82:85:45:08:1d:d8:69:30:a1:79:ff:95:70:06: 96:62:32:0d:eb:c6:36:04:3a:df:c9:1f:cd:3d:12: 28:77:6c:dc:3e:0a:dd:83:8d:4e:6e:39:38:29:81: 9e:69:33:f9:f3:6e:b6:af:b4:f0:cb:59:c7:d0:50: 49:65:79:d6:e5:60:68:6a:1e:5d:fe:44:be:66:90: 40:42:bd:2f:97:16:35:aa:e2:99:4e:41:66:b1:d5: ac:b4:c6:f0:c5:be:a0:cd:68:8f:dd:9e:c7:67:7d: 6b:c9:1d:70:ac:8e:40:3c:db:38:42:5f:4c:39:f5: 52:96:d4:0d:65:a8:48:72:74:89:ef:ad:d3:7f:e2: e6:70:9f:f3:98:41:51:c3:66:ae:cc:fd:56:c1:3a: e7:d3:b2:49:29:4e:cb:e9:db:48:97:8d:9c:25:28: d8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9D:36:DE:F8:E0:FF:07:64:AE:3B:D2:38:78:A0:1F:D8:2E:54:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a962ab40-2935-3cfd-a9c5-66ea5da40cff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:fb:52:a6:61:6e:96:b2:95:70:5d:bd:0d:93:18:cd:08:e8: b1:5b:d6:35:8c:c0:a4:b3:6f:37:f6:61:0d:88:ac:74:b3:53: 71:85:a1:43:61:6b:8a:eb:fb:fb:c6:26:fc:c8:96:75:14:ee: 2b:6b:0b:4a:3c:59:34:6f:42:3d:6e:59:92:86:5c:27:1b:61: 64:f2:ad:12:56:f7:05:2c:e5:0a:86:8d:e1:65:5e:0f:af:91: d6:04:6c:80:28:06:6c:e3:82:6f:fc:6c:d4:17:f7:fb:2c:bc: 12:30:00:ce:94:45:74:d7:57:69:5f:c7:5b:69:57:b5:7d:89: 86:a7:ed:7d:05:66:23:dc:54:32:91:73:c4:2c:ad:9e:d8:c1: 98:ac:fa:4e:8f:de:a7:ae:a7:a3:6d:d0:64:29:6c:33:28:58: 2e:92:f8:e0:8a:ef:5e:a3:dd:70:bc:1b:29:66:d7:2e:5a:ae: c2:cb:8c:c4:e6:11:7f:8b:58:cc:50:d6:1d:47:2b:6a:d2:04: e0:91:ca:28:db:ca:ec:e0:79:7b:ef:71:93:de:22:75:6a:17: c0:b9:e3:aa:ef:c0:51:59:db:26:9b:39:74:27:d5:71:79:db: 4d:31:95:82:16:a8:da:d9:f6:da:e1:28:9a:9c:0c:f9:34:d6: d2:5d:4a:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC2zORl5TRbGaHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk M2Q2MGJkZGMtNzliNi00NDQxLWE3YzEtYTUxY2M5NDY3MGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0r6SYtQSzSjbNKiGUCS8geBSTpszHmAZfAvP oBavsiduYKPMkkRIizzZd8fM2WCLkiUXq4xyxk8CIxAp30ndCTR0AkiSEl50axCd oD5tOPzgpSI8lWr8QsGSgoVFCB3YaTChef+VcAaWYjIN68Y2BDrfyR/NPRIod2zc Pgrdg41Objk4KYGeaTP58262r7Twy1nH0FBJZXnW5WBoah5d/kS+ZpBAQr0vlxY1 quKZTkFmsdWstMbwxb6gzWiP3Z7HZ31ryR1wrI5APNs4Ql9MOfVSltQNZahIcnSJ 763Tf+LmcJ/zmEFRw2auzP1WwTrn07JJKU7L6dtIl42cJSjYQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKedNt744P8HZK470jh4oB/YLlT8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTk2MmFiNDAtMjkzNS0z Y2ZkLWE5YzUtNjZlYTVkYTQwY2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9/yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACD7UqZhbpaylXBdvQ2TGM0I6LFb1jWMwKSzbzf2YQ2IrHSzU3GFoUNh a4rr+/vGJvzIlnUU7itrC0o8WTRvQj1uWZKGXCcbYWTyrRJW9wUs5QqGjeFlXg+v kdYEbIAoBmzjgm/8bNQX9/ssvBIwAM6URXTXV2lfx1tpV7V9iYan7X0FZiPcVDKR c8QsrZ7YwZis+k6P3qeup6Nt0GQpbDMoWC6S+OCK716j3XC8Gylm1y5arsLLjMTm EX+LWMxQ1h1HK2rSBOCRyijbyuzgeXvvcZPeInVqF8C546rvwFFZ2yabOXQn1XF5 200xlYIWqNrZ9trhKJqcDPk01tJdSr0= -----END CERTIFICATE-----Generated at Wed Jul 23 01:45:11 2025 by rpki-client