$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2859ec2-312e-3155-83f0-593e6003e8e4.roa File: b2859ec2-312e-3155-83f0-593e6003e8e4.roa (raw, json) Hash identifier: BWemjz8M/A079n1fSRS2qiv3EU+eOkkr3XIScBvJR9w= Subject key identifier: 93:E3:B9:CE:FE:61:71:F7:DC:6B:17:F9:A1:87:F3:74:20:F8:A0:B2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7A4B5D0FFE4AEFCAE32DBA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2859ec2-312e-3155-83f0-593e6003e8e4.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 16625 IP address blocks: 23.212.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:5d:0f:fe:4a:ef:ca:e3:2d:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=38d19a7b-3c8f-4f60-ba0d-ee06acf485e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:76:63:f1:69:88:af:86:d0:ec:6f:b7:6c:2a: ca:a4:dd:10:f5:62:ad:fe:a6:0f:b0:e6:69:70:bf: 15:80:80:20:80:d3:1b:c4:d6:6f:1a:fc:71:9b:b5: 88:d2:db:19:b6:a7:e3:e5:ff:15:f0:a2:76:ab:e3: be:86:e8:b7:af:4e:f5:49:b7:b0:98:ee:05:92:53: ba:37:7f:10:93:1b:a2:29:db:78:de:9b:b1:42:ae: db:a5:f8:94:1e:86:92:db:eb:17:13:df:cd:21:e5: 79:7c:8e:00:cd:40:35:21:39:a0:5c:08:64:92:ea: f4:88:2d:5d:52:28:ff:a1:06:07:6e:4b:23:a7:83: e1:71:0f:8b:07:0b:2a:a0:92:fe:2a:cf:72:a3:79: d7:ee:65:48:95:30:f5:0f:ca:0b:d1:02:69:a3:28: 95:10:db:67:4a:58:d2:66:c2:92:09:04:28:12:c6: 4b:96:aa:7a:a4:fb:97:86:02:fe:5c:82:1c:5e:5f: e4:41:1f:76:f5:1b:14:2f:66:1c:48:af:8e:01:92: ca:db:6c:a8:98:d4:6f:a2:55:5c:aa:66:68:6d:9b: 3f:42:89:ab:f1:71:16:75:2c:0f:c6:2d:82:39:84: 55:51:34:e1:c5:ef:fb:c8:a5:64:51:af:6b:74:2a: ad:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E3:B9:CE:FE:61:71:F7:DC:6B:17:F9:A1:87:F3:74:20:F8:A0:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2859ec2-312e-3155-83f0-593e6003e8e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:5e:8e:c7:2f:a1:c0:b1:b4:13:db:dc:23:0f:1f:85:2e:b1: e2:27:f8:00:68:14:b4:26:95:97:f3:4f:cf:3b:fd:07:fb:b3: 7b:3f:96:e1:f3:ca:0b:46:78:bb:fc:cb:e6:1d:f5:4a:a9:41: 12:28:8e:c1:3d:b4:72:59:c5:e2:70:be:31:cd:3a:6a:9f:41: 3f:6d:9e:6e:6a:fa:d7:64:06:a9:a6:61:41:19:b9:a8:c0:9e: f7:8d:8a:a7:33:f2:dc:60:60:60:ce:a4:bd:2e:11:c3:bb:72: 9f:c0:a3:3d:d9:ae:c8:11:dd:8b:be:21:a2:43:80:3c:89:af: ac:ed:c5:a5:7a:95:64:eb:e2:a7:fa:98:c1:e6:8a:b4:02:00: f7:b7:08:57:8d:a4:d3:3e:cc:1b:6d:f6:ba:3b:cc:9b:a2:32: d5:0f:2f:61:87:01:e0:44:cd:1f:ff:0b:c4:f2:f9:67:a8:22: 9e:80:91:83:61:ea:25:0f:8c:6a:6a:e4:a7:89:ff:55:17:c4: 4b:33:e5:1c:10:4e:ee:9d:d8:02:22:8e:4a:ae:a4:1d:cb:00: 33:b7:4b:39:3c:1b:d6:4a:c2:fe:9e:e7:df:05:47:d2:a2:d8: 07:e7:48:6a:71:ce:7f:3d:28:4f:bf:64:81:4b:15:e9:e3:23: 24:5c:00:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S10P/krvyuMtuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk MzhkMTlhN2ItM2M4Zi00ZjYwLWJhMGQtZWUwNmFjZjQ4NWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXZj8WmIr4bQ7G+3bCrKpN0Q9WKt/qYPsOZp cL8VgIAggNMbxNZvGvxxm7WI0tsZtqfj5f8V8KJ2q+O+hui3r071SbewmO4FklO6 N38QkxuiKdt43puxQq7bpfiUHoaS2+sXE9/NIeV5fI4AzUA1ITmgXAhkkur0iC1d Uij/oQYHbksjp4PhcQ+LBwsqoJL+Ks9yo3nX7mVIlTD1D8oL0QJpoyiVENtnSljS ZsKSCQQoEsZLlqp6pPuXhgL+XIIcXl/kQR929RsUL2YcSK+OAZLK22yomNRvolVc qmZobZs/Qomr8XEWdSwPxi2COYRVUTThxe/7yKVkUa9rdCqt0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPjuc7+YXH33GsX+aGH83Qg+KCyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjI4NTllYzItMzEyZS0z MTU1LTgzZjAtNTkzZTYwMDNlOGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9SQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZejscvocCxtBPb3CMPH4UuseIn+ABoFLQmlZfzT887/Qf7s3s/luHz ygtGeLv8y+Yd9UqpQRIojsE9tHJZxeJwvjHNOmqfQT9tnm5q+tdkBqmmYUEZuajA nveNiqcz8txgYGDOpL0uEcO7cp/Aoz3ZrsgR3Yu+IaJDgDyJr6ztxaV6lWTr4qf6 mMHmirQCAPe3CFeNpNM+zBtt9ro7zJuiMtUPL2GHAeBEzR//C8Ty+WeoIp6AkYNh 6iUPjGpq5KeJ/1UXxEsz5RwQTu6d2AIijkqupB3LADO3Szk8G9ZKwv6e598FR9Ki 2AfnSGpxzn89KE+/ZIFLFenjIyRcAAo= -----END CERTIFICATE-----Generated at Tue Aug 5 17:19:45 2025 by rpki-client