$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/571e1e21-5bb7-32bb-9449-889782fa7daf.roa File: 571e1e21-5bb7-32bb-9449-889782fa7daf.roa (raw, json) Hash identifier: 4AME1uAI5KiaUREkHlkod8bWvE7pwZvwAL3Wpvec/6I= Subject key identifier: 36:FE:23:17:1B:42:5C:DC:B3:70:C1:53:DC:58:44:D4:98:BF:45:F2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7A4B544048FCE4F25BE6C2E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/571e1e21-5bb7-32bb-9449-889782fa7daf.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 16625 IP address blocks: 23.212.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:54:40:48:fc:e4:f2:5b:e6:c2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=9996362d-24ce-40f2-b16b-44c3c5dd378d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c8:0d:8d:64:55:8b:ab:ec:eb:41:14:7a:90: a6:25:cf:c8:e7:f5:4c:6e:cd:6d:8d:54:9b:be:ba: 55:d3:98:d5:15:20:08:b7:fb:b1:88:cb:4e:16:f6: c1:c3:ce:da:b1:4b:96:d7:70:ea:52:cc:da:5f:12: 76:a1:c0:93:d3:e6:fe:13:f7:8b:d3:0d:df:ba:7d: f9:f6:49:fb:47:49:4f:e0:55:f1:79:23:87:f9:60: 4a:ef:07:4a:af:7c:4b:ae:40:f2:da:c1:4c:0d:04: 9a:f7:00:6c:cf:f0:db:1a:85:ce:b0:c4:39:a8:e1: 31:50:14:b3:2f:5b:aa:74:c7:4e:ec:23:13:d0:b3: 8e:a4:94:05:06:17:bf:5e:eb:3e:e4:c0:4c:16:a3: f2:46:72:26:7f:16:4d:6b:66:fa:bc:d4:6e:62:55: f4:87:2d:ed:7e:94:85:7f:4b:a5:b0:b2:5e:37:44: 2f:fd:40:9a:c3:19:8d:66:ab:39:63:bc:27:5e:38: f0:16:f8:13:c5:59:30:da:32:b5:2e:6f:41:56:50: af:3a:87:74:78:13:70:e0:57:2b:03:56:d2:dc:5b: 6b:50:03:70:3d:18:ee:a0:71:85:c3:18:9f:8e:47: 42:82:f1:85:40:1e:a5:59:87:92:5d:ec:ca:e9:26: 81:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:FE:23:17:1B:42:5C:DC:B3:70:C1:53:DC:58:44:D4:98:BF:45:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/571e1e21-5bb7-32bb-9449-889782fa7daf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:82:21:e9:e1:cc:54:c0:22:69:9c:a1:89:24:5c:f2:60:75: 76:3a:af:26:72:ce:6c:b4:43:98:5a:95:15:c5:cf:ef:86:fa: b4:eb:62:b8:61:d6:4b:0d:d7:4a:33:b6:bb:fb:45:1d:66:75: 18:dc:1c:b7:14:2c:9a:bf:05:62:b0:ac:62:46:58:c2:c6:89: e0:39:c0:63:60:6d:0a:4b:4a:c8:1d:0c:4a:d8:13:db:44:25: 96:cc:b5:ee:30:bf:a4:55:2a:26:fa:8a:d9:78:b8:d0:22:d6: ba:39:74:c6:63:ae:bc:b0:ce:7d:77:99:24:85:45:66:52:9b: 89:b9:0d:8d:be:5c:04:11:c0:77:9f:c4:c2:94:72:82:0f:92: 1a:16:b3:57:59:b6:a2:a8:fe:11:2f:e0:9a:8d:eb:e5:30:dd: a4:5f:81:80:7d:91:f1:ce:c7:0e:db:32:f3:4f:73:7f:42:3a: 9a:17:59:d2:d2:7e:ad:54:b5:80:c0:27:3a:f7:0e:f4:2a:9f: 8d:4c:a3:ae:1b:a0:a0:01:a2:fd:3d:28:95:dc:83:3a:df:5d: ed:13:97:33:b2:fd:68:c6:58:0b:22:5a:a7:bc:b9:84:24:bb: 27:0f:ec:23:76:14:8e:ed:4f:b5:10:e5:c5:26:18:35:bd:3d: 9f:25:c0:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S1RASPzk8lvmwuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk OTk5NjM2MmQtMjRjZS00MGYyLWIxNmItNDRjM2M1ZGQzNzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sgNjWRVi6vs60EUepCmJc/I5/VMbs1tjVSb vrpV05jVFSAIt/uxiMtOFvbBw87asUuW13DqUszaXxJ2ocCT0+b+E/eL0w3fun35 9kn7R0lP4FXxeSOH+WBK7wdKr3xLrkDy2sFMDQSa9wBsz/DbGoXOsMQ5qOExUBSz L1uqdMdO7CMT0LOOpJQFBhe/Xus+5MBMFqPyRnImfxZNa2b6vNRuYlX0hy3tfpSF f0ulsLJeN0Qv/UCawxmNZqs5Y7wnXjjwFvgTxVkw2jK1Lm9BVlCvOod0eBNw4Fcr A1bS3FtrUANwPRjuoHGFwxifjkdCgvGFQB6lWYeSXezK6SaBpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDb+IxcbQlzcs3DBU9xYRNSYv0XyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTcxZTFlMjEtNWJiNy0z MmJiLTk0NDktODg5NzgyZmE3ZGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9TQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWCIenhzFTAImmcoYkkXPJgdXY6ryZyzmy0Q5halRXFz++G+rTrYrhh 1ksN10oztrv7RR1mdRjcHLcULJq/BWKwrGJGWMLGieA5wGNgbQpLSsgdDErYE9tE JZbMte4wv6RVKib6itl4uNAi1ro5dMZjrrywzn13mSSFRWZSm4m5DY2+XAQRwHef xMKUcoIPkhoWs1dZtqKo/hEv4JqN6+Uw3aRfgYB9kfHOxw7bMvNPc39COpoXWdLS fq1UtYDAJzr3DvQqn41Mo64boKABov09KJXcgzrfXe0TlzOy/WjGWAsiWqe8uYQk uycP7CN2FI7tT7UQ5cUmGDW9PZ8lwK8= -----END CERTIFICATE-----Generated at Wed Aug 6 00:42:28 2025 by rpki-client