$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d33ff60-315e-3c7a-9698-7690422dad3c.roa File: 7d33ff60-315e-3c7a-9698-7690422dad3c.roa (raw, json) Hash identifier: 0dj/gXXYYRQB1FRa4hhbf6v83WKjTXXFS0Ntd/2H7ZY= Subject key identifier: A6:75:55:31:20:72:E9:43:CB:D5:43:DE:22:BE:3F:FF:8D:2A:1B:17 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A093AAE9276D859D61FDE3E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d33ff60-315e-3c7a-9698-7690422dad3c.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 16625 IP address blocks: 23.221.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:ae:92:76:d8:59:d6:1f:de:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=5e61f090-2ab9-44dc-af57-acb795640bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3c:77:71:3e:ab:79:77:0f:d0:15:e1:03:91: f1:bb:5c:07:c8:4f:ed:27:8b:74:77:5c:f4:84:09: a1:ce:31:79:5f:64:ad:7b:97:fa:27:b9:e0:d7:eb: 7a:4d:bf:1a:6f:13:06:2b:6d:eb:3a:b5:bc:c9:36: 99:cd:a6:5c:f8:05:83:a5:96:c7:a2:09:54:7f:66: 64:29:7c:e1:e0:02:d9:76:03:66:83:0f:12:cd:46: 34:69:0a:88:46:a7:b6:28:c6:df:d5:d9:ec:b2:be: a3:a4:c6:51:de:7f:60:22:87:6e:18:dd:ad:92:be: ed:9d:b5:2a:8b:4a:ed:d7:29:13:9d:b0:a9:7a:36: ea:91:cc:d3:90:a1:14:7b:17:2e:fd:6f:a1:9c:6c: 60:db:36:c4:92:ee:35:f5:be:bc:5b:00:23:ee:6d: 36:46:62:64:7a:57:0f:c6:99:79:81:f8:5d:c1:e3: f2:5b:07:5f:8a:71:1c:b7:fe:d0:55:bf:59:85:cb: 27:a3:30:78:3c:6a:fd:23:97:85:ea:7d:15:f8:cd: 1b:9c:21:d6:7b:7a:db:22:0d:ef:e9:30:ff:85:5e: 4a:7a:a1:1a:d5:e6:39:90:9c:c8:36:bb:81:39:84: b1:44:f1:70:37:86:51:5f:9e:94:56:7a:ae:4b:b5: c0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:75:55:31:20:72:E9:43:CB:D5:43:DE:22:BE:3F:FF:8D:2A:1B:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d33ff60-315e-3c7a-9698-7690422dad3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:1b:b9:a7:97:5f:ea:09:72:30:2f:6e:24:bb:18:25:8c:fe: 63:97:8a:6d:58:61:07:14:8f:92:77:0b:72:dd:51:fd:40:02: 57:92:1b:70:1a:7b:da:ae:13:aa:c7:59:6f:e4:5b:df:4b:fd: 79:61:f5:4a:96:c5:77:ce:ba:a8:b0:9d:9f:a7:bf:44:34:7e: 28:33:49:d5:66:54:99:53:8d:b8:08:b2:00:ea:23:e9:71:63: b7:cd:bc:0b:87:db:9d:f9:2b:f8:c2:a4:20:1e:79:a6:b4:29: 37:e6:e1:7d:33:07:a4:85:40:c2:65:6c:9c:1b:31:9a:f1:79: f8:67:b7:f0:9d:90:41:e4:f5:c5:ed:75:c6:78:56:b4:ac:b9: cc:22:26:cc:37:13:0e:c5:0d:99:61:bb:10:36:db:31:03:b8: 51:97:29:66:c3:b5:0e:6b:d8:ab:37:aa:04:5d:c0:ca:42:27: 85:e7:bc:a7:8a:24:b5:5d:c1:00:3f:61:8d:d1:21:38:fb:fd: 49:af:d6:4e:51:27:af:6b:f0:6d:46:ae:63:77:e3:d0:14:10: 2d:ae:91:5d:09:f4:37:5a:04:fc:73:dd:c3:7d:e8:d5:96:b8: 55:32:24:ec:b6:b9:38:7c:1a:9a:a9:bd:4c:cd:88:46:19:7e: 2c:44:67:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoJOq6SdthZ1h/ePgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk NWU2MWYwOTAtMmFiOS00NGRjLWFmNTctYWNiNzk1NjQwYmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDx3cT6reXcP0BXhA5Hxu1wHyE/tJ4t0d1z0 hAmhzjF5X2Ste5f6J7ng1+t6Tb8abxMGK23rOrW8yTaZzaZc+AWDpZbHoglUf2Zk KXzh4ALZdgNmgw8SzUY0aQqIRqe2KMbf1dnssr6jpMZR3n9gIoduGN2tkr7tnbUq i0rt1ykTnbCpejbqkczTkKEUexcu/W+hnGxg2zbEku419b68WwAj7m02RmJkelcP xpl5gfhdwePyWwdfinEct/7QVb9ZhcsnozB4PGr9I5eF6n0V+M0bnCHWe3rbIg3v 6TD/hV5KeqEa1eY5kJzINruBOYSxRPFwN4ZRX56UVnquS7XA3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZ1VTEgculDy9VD3iK+P/+NKhsXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2QzM2ZmNjAtMzE1ZS0z YzdhLTk2OTgtNzY5MDQyMmRhZDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF92EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMbuaeXX+oJcjAvbiS7GCWM/mOXim1YYQcUj5J3C3LdUf1AAleSG3Aa e9quE6rHWW/kW99L/Xlh9UqWxXfOuqiwnZ+nv0Q0figzSdVmVJlTjbgIsgDqI+lx Y7fNvAuH2535K/jCpCAeeaa0KTfm4X0zB6SFQMJlbJwbMZrxefhnt/CdkEHk9cXt dcZ4VrSsucwiJsw3Ew7FDZlhuxA22zEDuFGXKWbDtQ5r2Ks3qgRdwMpCJ4XnvKeK JLVdwQA/YY3RITj7/Umv1k5RJ69r8G1GrmN349AUEC2ukV0J9DdaBPxz3cN96NWW uFUyJOy2uTh8GpqpvUzNiEYZfixEZ+c= -----END CERTIFICATE-----Generated at Sat Jun 7 15:35:07 2025 by rpki-client