$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16b1e747-7a38-34b0-b1c5-b1112934c531.roa File: 16b1e747-7a38-34b0-b1c5-b1112934c531.roa (raw, json) Hash identifier: ALEnc/Lj/LxSbJZPEh8us5C1E2b/6fTb29QC/nRAVZQ= Subject key identifier: DF:0A:C4:02:35:82:C0:4C:91:74:71:0C:D3:B0:3E:FB:F8:20:2A:79 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7D16067A7B0D430BEA43D1A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16b1e747-7a38-34b0-b1c5-b1112934c531.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.215.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:16:06:7a:7b:0d:43:0b:ea:43:d1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=b61953bb-42a2-4911-a811-a453273c8bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:01:8d:31:ef:43:6b:1b:a4:61:0b:f6:d0:65: cd:e7:d0:e4:72:e7:12:fd:b6:4b:7b:5f:34:a0:7e: a8:2f:76:dd:19:fc:ca:a9:4d:73:6f:e2:4d:5c:fa: 46:69:2c:b4:42:8e:01:4a:af:4c:16:90:5e:56:8b: 42:80:70:ee:1b:c6:5f:6a:e7:db:25:d2:01:94:f9: b4:fc:07:a0:a9:1a:08:19:f7:50:65:b4:58:4e:98: 00:b7:ab:1a:95:72:56:3d:49:7d:5b:8c:4b:73:a1: a5:2b:98:80:ca:b7:3a:dd:49:eb:3f:f8:8d:3e:b1: bb:42:89:4c:63:a4:50:cb:b8:0b:63:e3:3c:fe:05: 44:24:54:cc:0d:64:eb:2d:f0:49:fa:7a:b8:df:cc: d2:55:f7:96:7e:a8:4c:13:6a:80:31:98:26:91:3c: 83:83:26:ab:0f:f7:9a:4f:ce:db:1a:90:29:ee:e9: 0f:d1:a9:90:e6:35:0c:da:72:18:cd:44:f9:67:be: 8c:22:c1:73:8a:bd:50:0c:d9:e7:b9:c9:a7:19:7c: 4c:b4:02:0a:7d:06:aa:da:06:6d:40:3b:f1:ea:64: 7c:6e:26:26:8b:89:f3:83:37:03:6a:9c:13:34:92: fc:f1:36:9e:36:20:bd:3e:46:3f:69:85:07:43:ed: 95:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:0A:C4:02:35:82:C0:4C:91:74:71:0C:D3:B0:3E:FB:F8:20:2A:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16b1e747-7a38-34b0-b1c5-b1112934c531.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:23:33:c2:d0:44:5e:e3:a4:3e:2e:f1:cc:66:0d:0a:91:62: ed:2a:43:df:fd:92:2b:2c:1a:48:9b:6d:23:4a:b8:45:d8:0a: 44:49:39:79:4e:64:b1:39:05:18:0d:52:e9:06:ac:69:08:f4: b5:1b:9d:4e:0b:b5:c3:87:6f:28:c1:20:96:92:e1:4f:b0:54: ed:14:2c:c8:12:d9:e5:18:14:5d:2b:a4:0f:1d:1e:e5:d0:19: 9f:f0:ed:75:2f:8c:ad:06:e8:01:92:60:e7:bb:5f:01:44:c7: 73:3f:5a:a0:37:a8:3a:aa:fc:12:9a:0f:f3:5e:58:c0:d8:50: 9f:1d:b8:c5:5c:b8:99:86:25:08:9f:5c:af:a1:12:cf:02:e4: fa:64:aa:70:d8:76:ac:41:44:65:5a:0e:1f:2f:7b:4c:6f:78: b9:a7:28:71:d5:9b:e5:6e:fc:8c:66:9d:50:39:1d:06:49:46: 82:1f:d9:a0:c9:6b:ac:50:d8:68:cb:ef:fb:33:88:a4:37:ff: 05:32:db:d4:54:5a:79:9c:df:77:46:26:1c:ae:6d:47:93:5c: 72:01:16:dd:fc:dc:82:1f:4e:ef:6f:42:c5:22:ee:f7:c4:57: 82:26:74:b2:d3:43:d4:65:3e:cc:c9:cf:8b:98:63:13:7c:50: 7e:ac:53:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FgZ6ew1DC+pD0aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk YjYxOTUzYmItNDJhMi00OTExLWE4MTEtYTQ1MzI3M2M4YmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwGNMe9DaxukYQv20GXN59DkcucS/bZLe180 oH6oL3bdGfzKqU1zb+JNXPpGaSy0Qo4BSq9MFpBeVotCgHDuG8ZfaufbJdIBlPm0 /AegqRoIGfdQZbRYTpgAt6salXJWPUl9W4xLc6GlK5iAyrc63UnrP/iNPrG7QolM Y6RQy7gLY+M8/gVEJFTMDWTrLfBJ+nq438zSVfeWfqhME2qAMZgmkTyDgyarD/ea T87bGpAp7ukP0amQ5jUM2nIYzUT5Z76MIsFzir1QDNnnucmnGXxMtAIKfQaq2gZt QDvx6mR8biYmi4nzgzcDapwTNJL88TaeNiC9PkY/aYUHQ+2VMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8KxAI1gsBMkXRxDNOwPvv4ICp5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTZiMWU3NDctN2EzOC0z NGIwLWIxYzUtYjExMTI5MzRjNTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9d4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEjM8LQRF7jpD4u8cxmDQqRYu0qQ9/9kissGkibbSNKuEXYCkRJOXlO ZLE5BRgNUukGrGkI9LUbnU4LtcOHbyjBIJaS4U+wVO0ULMgS2eUYFF0rpA8dHuXQ GZ/w7XUvjK0G6AGSYOe7XwFEx3M/WqA3qDqq/BKaD/NeWMDYUJ8duMVcuJmGJQif XK+hEs8C5PpkqnDYdqxBRGVaDh8ve0xveLmnKHHVm+Vu/IxmnVA5HQZJRoIf2aDJ a6xQ2GjL7/sziKQ3/wUy29RUWnmc33dGJhyubUeTXHIBFt383IIfTu9vQsUi7vfE V4ImdLLTQ9RlPszJz4uYYxN8UH6sU7c= -----END CERTIFICATE-----Generated at Tue Aug 5 20:03:29 2025 by rpki-client