$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afd72be9-4c55-3681-a88f-8b9a80d50fcb.roa File: afd72be9-4c55-3681-a88f-8b9a80d50fcb.roa (raw, json) Hash identifier: lk5BHtKRobn0QzVI5Sga0Vw9azTaLSxn+2c/McJlPac= Subject key identifier: C1:F6:1A:B2:FC:12:8C:31:C7:BF:02:9C:17:E0:EC:74:5F:AF:91:5C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A81465D22FAFCE37FFD70A880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afd72be9-4c55-3681-a88f-8b9a80d50fcb.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.217.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:5d:22:fa:fc:e3:7f:fd:70:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=6e00393d-ea78-40d9-bf11-970eae63c0c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:45:cd:e9:0f:e8:cb:fe:50:fe:e4:27:1e:b7: 88:2e:78:fc:e0:39:99:43:d8:eb:0d:9e:41:83:e2: 28:21:9e:a3:5c:d3:9a:c9:12:51:ad:ab:e9:f6:ef: 83:6a:ad:7f:86:0c:eb:dd:7a:96:ce:fb:c2:6f:de: ea:38:6a:8e:72:c3:a2:e9:8e:47:f6:6c:b6:4d:16: d4:f6:ed:4b:6e:46:61:b2:5c:80:63:97:41:36:65: 76:7b:37:80:d0:e2:ab:83:15:06:6b:18:b4:74:f9: e8:30:d4:f1:74:09:7a:6e:eb:a2:55:84:8e:a3:ab: 6e:17:c9:84:b4:ad:2c:5c:7c:0d:b3:9d:75:e1:a7: 3f:84:51:66:d0:c2:94:4e:d9:60:b3:cb:b7:1b:b4: 5f:f0:39:31:93:bd:45:97:11:c4:2e:32:a1:da:52: bc:87:4f:6c:c1:87:a4:2c:6a:5b:86:d9:f0:d8:fd: f0:8e:0d:28:98:f4:e6:65:70:5c:ed:b4:2d:b9:30: 23:50:53:e0:83:10:30:83:15:fa:4d:f0:cf:2a:94: d8:dc:10:77:a6:b2:b0:9a:a1:59:ee:9c:da:3d:09: 0a:a9:37:7f:a8:39:66:9e:eb:2d:93:38:cd:74:84: 73:a8:2a:50:f2:3b:f1:ff:56:a8:c0:18:8b:01:bc: 67:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F6:1A:B2:FC:12:8C:31:C7:BF:02:9C:17:E0:EC:74:5F:AF:91:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afd72be9-4c55-3681-a88f-8b9a80d50fcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:fc:92:34:5a:fa:e1:4b:34:27:c7:6b:b5:78:0f:a3:cc:2c: 84:34:d2:69:1e:4e:53:b0:92:8e:b5:0d:ed:e5:96:d8:00:b7: cf:37:a0:c7:db:ee:c2:43:4e:52:74:ae:a1:30:fb:c9:99:4a: 5f:63:fd:39:00:5e:00:52:d9:a0:d1:2d:99:b2:0b:a0:6a:92: 12:fc:50:00:c3:45:c9:3e:28:95:21:61:e3:83:c5:69:72:64: ba:0b:71:f0:e4:ce:cc:d2:ae:19:53:01:d3:0b:88:93:15:ab: d4:4e:6c:ce:7b:84:86:72:22:c1:24:c1:31:7f:c1:0a:bc:e4: 92:9a:70:ca:17:a9:ad:9e:b4:05:17:a7:9b:e8:16:57:10:89: 63:62:cf:32:72:37:97:d6:26:19:ca:3f:9d:3b:0b:2f:73:c1: 2a:bc:2b:01:fa:ac:87:2c:6f:46:99:6d:13:28:4a:b8:4b:50: b4:c1:c8:22:93:d2:b0:3d:81:12:1e:e5:19:d0:cf:79:cf:1f: 07:3f:2c:d7:53:07:8d:db:09:06:8b:5d:65:55:b1:1f:94:9a: 99:c9:c8:78:b9:3c:3f:0c:1e:fa:e6:b1:4b:39:b5:12:11:3f: a8:a4:93:86:2c:a0:e2:9a:35:b3:0a:fb:3c:76:d5:b0:c2:db: 06:71:17:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRl0i+vzjf/1wqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NmUwMDM5M2QtZWE3OC00MGQ5LWJmMTEtOTcwZWFlNjNjMGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUXN6Q/oy/5Q/uQnHreILnj84DmZQ9jrDZ5B g+IoIZ6jXNOayRJRravp9u+Daq1/hgzr3XqWzvvCb97qOGqOcsOi6Y5H9my2TRbU 9u1LbkZhslyAY5dBNmV2ezeA0OKrgxUGaxi0dPnoMNTxdAl6buuiVYSOo6tuF8mE tK0sXHwNs5114ac/hFFm0MKUTtlgs8u3G7Rf8Dkxk71FlxHELjKh2lK8h09swYek LGpbhtnw2P3wjg0omPTmZXBc7bQtuTAjUFPggxAwgxX6TfDPKpTY3BB3prKwmqFZ 7pzaPQkKqTd/qDlmnustkzjNdIRzqCpQ8jvx/1aowBiLAbxnPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMH2GrL8Eowxx78CnBfg7HRfr5FcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWZkNzJiZTktNGM1NS0z NjgxLWE4OGYtOGI5YTgwZDUwZmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9nIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFH8kjRa+uFLNCfHa7V4D6PMLIQ00mkeTlOwko61De3lltgAt883oMfb 7sJDTlJ0rqEw+8mZSl9j/TkAXgBS2aDRLZmyC6BqkhL8UADDRck+KJUhYeODxWly ZLoLcfDkzszSrhlTAdMLiJMVq9RObM57hIZyIsEkwTF/wQq85JKacMoXqa2etAUX p5voFlcQiWNizzJyN5fWJhnKP507Cy9zwSq8KwH6rIcsb0aZbRMoSrhLULTByCKT 0rA9gRIe5RnQz3nPHwc/LNdTB43bCQaLXWVVsR+UmpnJyHi5PD8MHvrmsUs5tRIR P6ikk4YsoOKaNbMK+zx21bDC2wZxF/g= -----END CERTIFICATE-----Generated at Wed Jul 23 01:25:17 2025 by rpki-client