$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9caed2e-26c4-36da-af90-3667f35f76fd.roa File: d9caed2e-26c4-36da-af90-3667f35f76fd.roa (raw, json) Hash identifier: ey1Sls6vY9Fzkdg49N9T+pdGNQ22MeLvqBhP78U21YI= Subject key identifier: 3D:D3:19:82:1D:F5:F2:E5:9B:18:FA:DC:EE:84:BE:04:8C:BA:F6:75 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A78E5FE78BD9EE4AFE18DDC40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9caed2e-26c4-36da-af90-3667f35f76fd.roa Signing time: Thu 10 Jul 2025 13:01:02 +0000 ROA not before: Thu 10 Jul 2025 13:01:02 +0000 ROA not after: Wed 08 Oct 2025 13:01:02 +0000 asID: 16625 IP address blocks: 23.208.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:e5:fe:78:bd:9e:e4:af:e1:8d:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 10 13:01:02 2025 GMT Not After : Oct 8 13:01:02 2025 GMT Subject: CN=e75dd872-3f7e-4e34-b6af-6bfa8ca99257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3c:2d:8c:06:e3:9b:81:0d:7d:42:f9:e2:71: de:5c:a3:b1:48:4e:2b:a4:85:32:f6:01:2a:51:2e: 81:3f:1f:e2:21:a7:0d:43:1b:11:18:f4:3e:5f:3e: 66:2b:61:c9:4a:14:9a:b6:09:d9:be:4e:93:87:42: de:55:6d:f5:c9:20:f7:ca:91:1e:10:a3:4b:3f:03: 9f:a8:2a:54:87:0d:85:d0:f8:b0:1b:7e:c5:27:95: 2d:b9:a0:ff:0c:d7:c3:22:64:af:97:08:16:36:7a: 40:c7:e2:df:89:1b:5b:da:8b:79:60:91:6b:a3:3e: 08:27:43:37:d0:3d:67:89:ef:a4:9a:2f:9d:c7:ea: 47:61:b0:ee:66:b7:36:da:59:c9:fd:98:b2:91:bf: 22:34:bd:5d:48:17:d4:b1:2b:d8:07:53:14:70:21: 2a:fc:9c:a9:ae:73:02:06:8c:18:7e:06:c6:b7:fa: 11:8a:7a:48:2d:e6:0f:65:80:ad:c9:73:32:b4:bd: 1a:68:ab:5f:db:f6:f9:c4:fa:1a:05:e7:fb:72:fe: 83:66:6d:aa:e6:3c:0b:e3:29:dc:16:eb:2a:e7:09: 7b:c4:1e:82:5c:eb:32:1e:7d:9d:f6:71:e1:e5:f5: 94:b0:b9:df:da:e2:48:12:70:6f:8f:5d:b6:6e:07: d9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D3:19:82:1D:F5:F2:E5:9B:18:FA:DC:EE:84:BE:04:8C:BA:F6:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9caed2e-26c4-36da-af90-3667f35f76fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b4:e4:50:d2:98:42:0c:02:59:0e:c5:e1:3b:fb:17:46:33: 0c:12:e7:6c:51:83:ee:66:7f:42:6d:30:73:cb:1a:6f:99:15: 8a:9d:9b:2f:87:c4:87:c6:cf:3a:77:eb:47:5a:06:07:1e:0e: c3:8d:cb:a9:c9:af:47:41:ac:0f:84:a6:4c:74:43:14:c6:46: 03:af:3f:70:9e:b3:a7:c3:1e:45:c4:eb:10:48:ed:be:f3:cd: 78:12:de:00:c2:2a:45:31:f2:be:b1:c1:41:2d:82:81:68:71: 21:f2:e0:b0:62:00:57:02:24:58:10:fc:3f:d5:4f:f6:ff:64: 46:b9:b6:80:af:35:af:b3:8c:25:e5:ee:ae:46:ce:46:3c:9b: b9:5c:00:9e:1f:5b:08:d7:7a:1c:e9:a2:ec:58:ab:41:6a:31: 40:20:ea:5f:fd:93:22:91:48:27:3e:ff:ba:43:14:b3:11:13: e1:72:65:e5:97:b0:67:60:05:44:94:7d:13:4b:42:9e:3a:b6: ba:7a:63:51:04:46:9b:35:c1:39:48:55:f1:35:4e:5c:a6:9f: d2:47:c8:13:86:98:86:a1:9c:ba:12:91:c8:c0:af:4e:fc:c9: d6:af:08:ad:04:e3:60:62:0b:d9:ec:3f:59:76:f1:c9:8f:80: a7:0c:2f:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp45f54vZ7kr+GN3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMDEzMDEwMloXDTI1MTAwODEzMDEwMlowLzEtMCsGA1UEAxMk ZTc1ZGQ4NzItM2Y3ZS00ZTM0LWI2YWYtNmJmYThjYTk5MjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zwtjAbjm4ENfUL54nHeXKOxSE4rpIUy9gEq US6BPx/iIacNQxsRGPQ+Xz5mK2HJShSatgnZvk6Th0LeVW31ySD3ypEeEKNLPwOf qCpUhw2F0PiwG37FJ5UtuaD/DNfDImSvlwgWNnpAx+LfiRtb2ot5YJFroz4IJ0M3 0D1nie+kmi+dx+pHYbDuZrc22lnJ/Ziykb8iNL1dSBfUsSvYB1MUcCEq/JyprnMC BowYfgbGt/oRinpILeYPZYCtyXMytL0aaKtf2/b5xPoaBef7cv6DZm2q5jwL4ync Fusq5wl7xB6CXOsyHn2d9nHh5fWUsLnf2uJIEnBvj122bgfZFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3TGYId9fLlmxj63O6EvgSMuvZ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDljYWVkMmUtMjZjNC0z NmRhLWFmOTAtMzY2N2YzNWY3NmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9AUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA605FDSmEIMAlkOxeE7+xdGMwwS52xRg+5mf0JtMHPLGm+ZFYqdmy+H xIfGzzp360daBgceDsONy6nJr0dBrA+Epkx0QxTGRgOvP3Ces6fDHkXE6xBI7b7z zXgS3gDCKkUx8r6xwUEtgoFocSHy4LBiAFcCJFgQ/D/VT/b/ZEa5toCvNa+zjCXl 7q5GzkY8m7lcAJ4fWwjXehzpouxYq0FqMUAg6l/9kyKRSCc+/7pDFLMRE+FyZeWX sGdgBUSUfRNLQp46trp6Y1EERps1wTlIVfE1Tlymn9JHyBOGmIahnLoSkcjAr078 ydavCK0E42BiC9nsP1l28cmPgKcML5w= -----END CERTIFICATE-----Generated at Wed Jul 23 01:35:07 2025 by rpki-client