$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b0c1977-2816-3d26-8641-1dd2ed1f9bca.roa File: 8b0c1977-2816-3d26-8641-1dd2ed1f9bca.roa (raw, json) Hash identifier: RTIsAn6NWCeVUunlFWrpHv8ntbHG8JDb9RarqGBmm/Y= Subject key identifier: 2D:55:7F:19:EB:72:70:40:34:12:49:05:B8:3C:7B:51:42:0B:25:85 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8B0B71390EC98BF3769EBE20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b0c1977-2816-3d26-8641-1dd2ed1f9bca.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 16625 IP address blocks: 23.221.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:71:39:0e:c9:8b:f3:76:9e:be:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=52ef6863-b35b-4f3c-8ee9-781893606e51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:85:f8:d8:95:2a:dd:c6:82:84:4f:ad:c7:eb: 72:7c:bb:02:00:1d:37:63:d4:37:86:8b:9e:99:c0: 41:d3:03:60:92:9f:4c:c5:ec:cd:71:8b:02:6d:01: 99:a1:9a:b6:05:21:d6:39:a4:c2:74:ce:15:0f:02: cc:c8:f6:63:14:5c:ff:ec:e6:05:57:08:7b:7b:a1: f6:24:c6:6d:ad:9c:29:60:a7:85:ef:b2:f9:a7:c9: 7f:12:9e:39:d0:26:59:d0:7b:43:d6:07:f0:c6:49: 74:c1:75:fd:99:3e:19:48:d4:36:39:a4:6b:e2:49: a4:80:8b:fc:fc:ee:0e:f0:f6:bf:21:71:cb:f8:a2: 0e:13:73:5f:e7:9c:5e:f6:6e:f4:4a:e1:d7:a0:e7: 84:f5:2f:eb:ab:1a:4b:fc:fd:79:cd:8f:c7:d3:e9: a9:18:a2:e2:66:c5:4a:b6:37:5d:aa:8e:b8:17:f1: 0e:ae:51:ad:ac:d5:21:03:f1:21:48:29:27:2a:16: 50:64:1e:a8:6c:1a:a3:5b:76:ff:e2:0d:b7:b1:05: ed:51:61:89:6f:c2:75:f0:1a:9a:17:bd:ae:30:d2: 6a:f9:db:ad:e7:ca:f0:a9:12:74:5f:9b:56:be:67: b1:7e:65:10:ef:53:2c:bc:00:14:e7:e1:ed:c8:90: d6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:55:7F:19:EB:72:70:40:34:12:49:05:B8:3C:7B:51:42:0B:25:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b0c1977-2816-3d26-8641-1dd2ed1f9bca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:84:3c:8e:6f:49:b4:7c:e6:f1:8c:7a:ad:41:7c:14:e0:73: 79:5c:25:3e:40:08:c5:4d:e3:83:62:f7:a1:31:ad:af:ec:2a: 1f:a3:6c:36:1a:a6:24:36:ea:aa:1d:c7:20:b2:d5:0e:1e:c5: 67:86:b0:a1:92:22:f9:b5:ef:30:ad:39:92:76:6e:bd:89:64: 49:2d:08:3b:4e:95:e8:5f:aa:85:8b:33:a4:76:94:d4:60:3b: a3:94:bb:fc:4e:e4:59:3a:49:24:a0:2b:a7:50:d9:e2:75:03: 07:2a:12:b4:a0:91:04:89:28:88:e7:ab:da:a8:a4:7f:df:23: a8:ee:90:16:fb:87:0a:f4:47:1a:83:02:a9:d8:2b:d9:b7:f4: cd:fe:11:a9:43:9c:d6:a9:9a:a6:1e:45:fc:31:4d:0d:d2:6b: 0c:af:10:a7:65:a2:63:f4:b6:19:ec:2d:27:25:79:8d:fb:f0: 8f:38:9c:fa:c1:4a:e7:73:38:c2:f9:a2:61:c7:c2:3b:39:7e: 3f:ec:cf:ce:9e:9e:c3:6b:f4:47:bb:9d:e3:a9:de:e5:ee:10: 6c:c8:4f:1a:26:81:26:7d:8b:29:5a:20:15:9a:c9:a3:20:07: 81:29:7f:ae:25:c8:8f:7a:37:2b:bb:ee:d0:a7:f6:7c:c8:98: b1:04:1d:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC3E5DsmL83aeviAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk NTJlZjY4NjMtYjM1Yi00ZjNjLThlZTktNzgxODkzNjA2ZTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoX42JUq3caChE+tx+tyfLsCAB03Y9Q3houe mcBB0wNgkp9MxezNcYsCbQGZoZq2BSHWOaTCdM4VDwLMyPZjFFz/7OYFVwh7e6H2 JMZtrZwpYKeF77L5p8l/Ep450CZZ0HtD1gfwxkl0wXX9mT4ZSNQ2OaRr4kmkgIv8 /O4O8Pa/IXHL+KIOE3Nf55xe9m70SuHXoOeE9S/rqxpL/P15zY/H0+mpGKLiZsVK tjddqo64F/EOrlGtrNUhA/EhSCknKhZQZB6obBqjW3b/4g23sQXtUWGJb8J18Bqa F72uMNJq+dut58rwqRJ0X5tWvmexfmUQ71MsvAAU5+HtyJDWCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1VfxnrcnBANBJJBbg8e1FCCyWFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGIwYzE5NzctMjgxNi0z ZDI2LTg2NDEtMWRkMmVkMWY5YmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF93IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKEPI5vSbR85vGMeq1BfBTgc3lcJT5ACMVN44Ni96Exra/sKh+jbDYa piQ26qodxyCy1Q4exWeGsKGSIvm17zCtOZJ2br2JZEktCDtOlehfqoWLM6R2lNRg O6OUu/xO5Fk6SSSgK6dQ2eJ1AwcqErSgkQSJKIjnq9qopH/fI6jukBb7hwr0RxqD AqnYK9m39M3+EalDnNapmqYeRfwxTQ3SawyvEKdlomP0thnsLScleY378I84nPrB SudzOML5omHHwjs5fj/sz86ensNr9Ee7neOp3uXuEGzITxomgSZ9iylaIBWayaMg B4Epf64lyI96Nyu77tCn9nzImLEEHQs= -----END CERTIFICATE-----Generated at Tue Aug 5 20:18:17 2025 by rpki-client