$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5523cd5-104d-3011-b66d-ba564b4e42aa.roa File: b5523cd5-104d-3011-b66d-ba564b4e42aa.roa (raw, json) Hash identifier: oGK6XoBFBmyEeVGo8LozLUJ8G2D0mTrumJGDUWuq/Yg= Subject key identifier: 21:51:81:EB:DF:FD:8F:4E:EC:A7:79:DD:BA:25:9C:59:02:B0:EC:86 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7D160FE4272B9D85D1542180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5523cd5-104d-3011-b66d-ba564b4e42aa.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.217.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:16:0f:e4:27:2b:9d:85:d1:54:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=25da7934-e076-4347-9123-247d6f2ef3c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cd:d8:25:a2:4b:66:fe:66:12:0f:57:6e:86: eb:65:d5:26:90:f2:27:ef:8c:df:b7:69:c3:cc:0b: e8:5b:2c:c7:48:c8:25:66:82:7a:6b:a0:8c:82:2e: f1:4c:36:5d:09:2e:cd:f5:04:ef:fa:70:b3:c6:df: 86:93:08:a4:43:ce:11:ae:7c:6f:b9:0b:0d:b2:c6: 89:18:52:ce:26:fc:4c:55:65:f7:d7:d2:92:55:eb: 8f:ee:40:ab:fb:d5:c9:85:ae:95:bb:b0:b2:7b:41: d8:92:a8:e0:36:a4:ab:94:d1:eb:b9:33:8e:2d:66: 62:dc:e4:90:7f:06:f1:bf:9d:c9:7c:4c:f1:51:30: b3:e0:d4:f6:77:a7:8a:94:4f:56:0a:0b:bf:75:f9: 0b:a7:52:cc:d2:89:ba:ba:19:82:c4:93:8e:a7:39: b7:e2:7e:1a:9a:bf:23:80:2a:1f:64:b5:79:8e:f0: 83:60:51:10:9e:9d:26:cd:8e:4f:ea:9f:07:6e:b7: 79:45:36:70:13:18:d4:f0:ed:3a:00:cd:40:1d:99: f5:8f:05:5d:0f:72:54:37:3b:d0:d2:01:47:42:00: 7c:cd:8b:31:eb:0d:6a:d6:2d:a1:a5:eb:58:02:5e: c1:68:cf:87:05:9e:53:99:21:f4:91:82:8d:35:54: c4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:51:81:EB:DF:FD:8F:4E:EC:A7:79:DD:BA:25:9C:59:02:B0:EC:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5523cd5-104d-3011-b66d-ba564b4e42aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:bc:31:af:0e:a7:a7:75:9f:cf:9c:b2:5e:d0:d6:cf:f1:b2: 07:33:96:f7:38:8e:4d:d8:05:4c:48:79:4d:62:11:b7:90:d4: 22:70:58:5e:de:c2:d7:18:a5:e2:85:7d:70:d4:a4:b5:d0:01: 37:6f:d3:33:d8:56:ff:2a:31:58:4d:5d:bf:fe:f9:07:e1:8b: 05:5b:95:ad:15:1b:f5:20:c1:8d:6a:7e:22:da:7d:60:9e:a3: d3:42:f7:25:06:61:3b:c1:4a:f2:d5:02:a5:5d:41:ac:82:54: f2:d6:5f:7c:8b:d9:96:24:93:8c:f9:e5:99:43:bf:77:66:f9: 90:cb:7e:47:d2:b8:5f:f5:6b:79:ec:a9:14:22:4c:18:6a:96: 97:4f:3f:fe:92:5f:b1:46:32:c0:9d:77:53:fe:69:13:bf:c8: 00:9f:b7:db:53:68:be:3e:7e:a7:d8:c6:d4:30:ef:8a:5a:5b: b8:e7:dc:8b:a0:22:d0:61:2e:92:fb:07:ed:d7:6e:ca:d4:af: 92:c0:5b:6c:e5:bc:bc:68:19:dd:af:51:92:03:74:be:b1:29: 2b:fd:ce:b0:c7:58:12:61:84:ad:65:ad:b9:1e:1b:e6:40:45: dd:49:07:c7:10:4f:42:0a:ce:67:18:2c:ff:df:41:1d:62:f3: 68:31:b6:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9Fg/kJyudhdFUIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk MjVkYTc5MzQtZTA3Ni00MzQ3LTkxMjMtMjQ3ZDZmMmVmM2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx83YJaJLZv5mEg9XbobrZdUmkPIn74zft2nD zAvoWyzHSMglZoJ6a6CMgi7xTDZdCS7N9QTv+nCzxt+GkwikQ84RrnxvuQsNssaJ GFLOJvxMVWX319KSVeuP7kCr+9XJha6Vu7Cye0HYkqjgNqSrlNHruTOOLWZi3OSQ fwbxv53JfEzxUTCz4NT2d6eKlE9WCgu/dfkLp1LM0om6uhmCxJOOpzm34n4amr8j gCofZLV5jvCDYFEQnp0mzY5P6p8Hbrd5RTZwExjU8O06AM1AHZn1jwVdD3JUNzvQ 0gFHQgB8zYsx6w1q1i2hpetYAl7BaM+HBZ5TmSH0kYKNNVTE7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFRgevf/Y9O7Kd53bolnFkCsOyGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjU1MjNjZDUtMTA0ZC0z MDExLWI2NmQtYmE1NjRiNGU0MmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9llMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI68Ma8Op6d1n8+csl7Q1s/xsgczlvc4jk3YBUxIeU1iEbeQ1CJwWF7e wtcYpeKFfXDUpLXQATdv0zPYVv8qMVhNXb/++QfhiwVbla0VG/UgwY1qfiLafWCe o9NC9yUGYTvBSvLVAqVdQayCVPLWX3yL2ZYkk4z55ZlDv3dm+ZDLfkfSuF/1a3ns qRQiTBhqlpdPP/6SX7FGMsCdd1P+aRO/yACft9tTaL4+fqfYxtQw74paW7jn3Iug ItBhLpL7B+3XbsrUr5LAW2zlvLxoGd2vUZIDdL6xKSv9zrDHWBJhhK1lrbkeG+ZA Rd1JB8cQT0IKzmcYLP/fQR1i82gxts0= -----END CERTIFICATE-----Generated at Fri Jul 25 06:19:01 2025 by rpki-client