$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59e7e28e-1164-32ac-a831-09fd21531e45.roa File: 59e7e28e-1164-32ac-a831-09fd21531e45.roa (raw, json) Hash identifier: vMqfhfvdKEpvgRG70IEB9RFUgPU9RZb/shAkVXcZQcE= Subject key identifier: 77:52:F1:2F:85:B6:9D:30:03:4E:80:39:C9:CC:0E:FB:9A:A2:76:C2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC0162499F8C0C3CED0B20DA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59e7e28e-1164-32ac-a831-09fd21531e45.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 16625 IP address blocks: 23.221.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:24:99:f8:c0:c3:ce:d0:b2:0d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=fae88055-b3d9-4f29-a070-269b88f4b76e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8a:7e:ea:07:4f:c3:7e:f4:89:16:1f:22:7c: 64:3b:16:8a:b0:d3:06:27:c6:55:cf:e0:a8:30:34: 08:81:dd:a6:a2:a9:f7:ca:d2:9f:b9:17:1d:b9:f9: b1:12:98:76:1b:9a:32:8c:c0:ef:db:1b:92:60:3a: b4:c1:98:b5:99:fc:8a:fe:e6:c9:86:a4:0b:59:e6: d2:53:30:86:04:88:b4:7e:2f:99:3a:bb:19:35:de: 6d:62:bc:de:19:ad:9f:c8:8d:25:4e:29:34:a3:32: 4b:3e:4b:36:47:cd:8b:c0:3a:98:6e:c9:6a:8e:5e: 48:b1:3e:4e:62:8f:c7:64:c6:d7:7d:46:64:ab:31: 3e:ef:50:00:45:62:da:85:65:93:64:3b:68:7f:a5: d6:f7:3a:db:1a:63:be:01:ce:dd:9b:b7:74:79:34: eb:a6:d2:bb:2b:66:1a:4c:c8:9c:23:8c:2c:80:3d: 7f:dc:3b:69:7c:0e:7f:54:c2:87:f2:ae:b7:37:95: 99:20:b8:31:6d:b1:7b:b7:48:2b:97:76:ea:da:e4: 7e:cd:91:74:4e:21:f1:63:f1:e5:e4:e9:0d:2c:42: 81:1d:d7:50:8d:da:86:1c:d9:af:cf:36:1c:d8:e8: bb:c3:d4:5b:b8:fc:96:cf:19:46:84:ac:21:74:bc: d0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:52:F1:2F:85:B6:9D:30:03:4E:80:39:C9:CC:0E:FB:9A:A2:76:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59e7e28e-1164-32ac-a831-09fd21531e45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:49:de:d8:ed:c0:ed:aa:cd:9d:02:ca:c1:6b:b7:1b:2a:91: 07:88:bd:1a:42:f7:ea:42:ff:1d:95:4d:0a:d2:85:cf:41:12: 81:6a:84:1e:7d:63:fc:f8:06:85:41:e8:9b:fd:d2:4c:c6:bc: 39:79:e9:29:46:2f:d0:fb:da:2f:d9:ae:2c:57:94:fe:c8:c5: 5b:2e:dd:c6:26:da:62:82:d7:41:d2:28:d8:08:b8:36:8d:ca: e3:bd:d1:09:cd:c2:95:62:29:20:03:cb:50:75:09:e1:34:fc: 79:49:fe:b2:ae:12:21:9f:9b:a2:89:b7:90:76:9a:97:d0:e8: 5b:8b:8e:0f:9f:c8:d1:7d:cd:35:bc:16:2a:13:04:f9:01:74: 24:64:cf:b3:43:de:47:02:d7:f5:76:1c:8c:49:56:af:67:4e: 51:01:81:e7:59:47:a3:4d:92:48:8b:db:75:e9:f6:b3:29:e7: 78:ff:79:05:83:71:b7:dd:23:2c:fd:25:c7:45:90:42:16:c4: 5f:92:9e:1c:58:23:90:46:a6:19:fc:0e:cf:4c:c7:a1:02:f5: 06:ed:91:2c:3d:ec:93:fd:cb:0b:cb:5d:89:f9:be:e5:2d:ca: f5:15:4b:10:d4:85:e1:b8:ff:6a:e5:f8:e8:03:5d:0a:02:9e: c3:0f:92:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFiSZ+MDDztCyDaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk ZmFlODgwNTUtYjNkOS00ZjI5LWEwNzAtMjY5Yjg4ZjRiNzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIp+6gdPw370iRYfInxkOxaKsNMGJ8ZVz+Co MDQIgd2moqn3ytKfuRcdufmxEph2G5oyjMDv2xuSYDq0wZi1mfyK/ubJhqQLWebS UzCGBIi0fi+ZOrsZNd5tYrzeGa2fyI0lTik0ozJLPks2R82LwDqYbslqjl5IsT5O Yo/HZMbXfUZkqzE+71AARWLahWWTZDtof6XW9zrbGmO+Ac7dm7d0eTTrptK7K2Ya TMicI4wsgD1/3DtpfA5/VMKH8q63N5WZILgxbbF7t0grl3bq2uR+zZF0TiHxY/Hl 5OkNLEKBHddQjdqGHNmvzzYc2Oi7w9RbuPyWzxlGhKwhdLzQ0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdS8S+Ftp0wA06AOcnMDvuaonbCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTllN2UyOGUtMTE2NC0z MmFjLWE4MzEtMDlmZDIxNTMxZTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF93SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpJ3tjtwO2qzZ0CysFrtxsqkQeIvRpC9+pC/x2VTQrShc9BEoFqhB59 Y/z4BoVB6Jv90kzGvDl56SlGL9D72i/ZrixXlP7IxVsu3cYm2mKC10HSKNgIuDaN yuO90QnNwpViKSADy1B1CeE0/HlJ/rKuEiGfm6KJt5B2mpfQ6FuLjg+fyNF9zTW8 FioTBPkBdCRkz7ND3kcC1/V2HIxJVq9nTlEBgedZR6NNkkiL23Xp9rMp53j/eQWD cbfdIyz9JcdFkEIWxF+SnhxYI5BGphn8Ds9Mx6EC9QbtkSw97JP9ywvLXYn5vuUt yvUVSxDUheG4/2rl+OgDXQoCnsMPklc= -----END CERTIFICATE-----Generated at Wed Aug 6 00:36:14 2025 by rpki-client