$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1523b54c-b22c-38bf-bbf2-ea364411cb5f.roa File: 1523b54c-b22c-38bf-bbf2-ea364411cb5f.roa (raw, json) Hash identifier: zytaPc9eWEGLwZPP1WOGoIFJpBxl7EmzPe0TXr0k4/s= Subject key identifier: 08:01:14:A2:7A:A1:B6:49:FE:E0:4D:19:C6:F9:29:32:F1:2E:79:3C Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584AECC135C242AACE22EBB52000 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1523b54c-b22c-38bf-bbf2-ea364411cb5f.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 25645 IP address blocks: 23.249.96.0/21 maxlen: 21 23.249.104.0/21 maxlen: 21 23.249.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:35:c2:42:aa:ce:22:eb:b5:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=f8a5098e-bd83-4545-a27d-df12736f42b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:78:63:ec:47:a7:99:35:d3:dc:7e:b5:c6:0a: e8:f3:aa:f0:d8:99:26:62:11:00:14:11:97:3a:e5: 5e:a2:f7:a7:3d:63:33:5d:17:a6:b5:50:35:4b:a7: 35:ab:5c:99:51:de:67:0a:19:1b:8e:3f:1b:7d:08: 9d:03:25:5c:10:32:bd:66:95:a6:bb:10:29:5c:84: bc:81:de:6c:4e:27:12:2d:88:13:74:bd:c0:44:a6: 60:d0:6b:54:a5:05:33:3e:a5:d9:af:6a:ee:12:23: e6:fb:ce:4a:9f:c1:87:64:60:ac:3b:a7:1f:ba:8f: 8d:c3:80:61:9f:02:98:23:a4:c9:4b:6d:7c:43:b0: 7e:ae:78:a4:8b:e6:df:90:d5:1b:63:2e:70:b2:43: 82:d6:a9:07:9d:1f:cd:54:7c:c2:14:fa:70:2c:d1: cd:0f:d5:6f:79:54:2e:05:5b:1a:61:77:b8:05:d9: 8e:14:be:40:0b:6b:e6:30:19:d3:0e:0c:36:88:8d: 22:00:a4:fe:ad:05:5c:d1:89:6b:18:40:8e:fe:97: 34:5b:2e:de:9c:95:a9:20:b9:21:1d:02:ed:aa:e7: d2:be:85:af:65:62:49:39:a5:95:6e:41:c6:4a:87: f3:c3:7d:c5:1c:09:e6:e3:12:fd:10:24:a5:50:eb: fc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:01:14:A2:7A:A1:B6:49:FE:E0:4D:19:C6:F9:29:32:F1:2E:79:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1523b54c-b22c-38bf-bbf2-ea364411cb5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 23.249.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:61:12:d9:d4:84:73:8e:6e:3a:fe:bd:b3:9e:2e:ad:13:de: 18:21:67:a3:ce:b3:c8:1c:fe:e5:78:53:9d:9e:e1:83:8c:16: 27:3a:86:8a:a9:a4:44:34:94:be:cf:23:2a:e9:1a:3d:66:0e: a3:2f:d2:a2:50:50:a6:09:ef:16:ab:c8:f6:71:73:59:98:9d: 88:0a:f7:e3:58:df:db:df:bd:a4:9f:85:54:6a:80:e7:0d:45: 59:97:2b:f6:d0:46:e7:07:be:05:69:db:e0:e0:ba:ad:fc:d1: 73:64:f0:e1:66:50:9b:72:b6:8a:57:77:64:f7:76:47:02:a0: e7:8c:5b:10:83:82:e5:47:9d:ca:b7:9b:19:e3:08:61:fe:2d: ce:73:50:eb:a0:67:c1:53:61:84:bf:31:da:83:06:8b:40:b1: 6a:b3:96:5d:88:be:8e:38:25:88:f4:94:c2:0e:f5:3c:b3:dd: e5:d0:26:fa:5d:9a:2c:c5:f9:16:e7:f9:86:44:f3:f7:63:6e: 36:5e:d9:d1:b1:15:bd:ff:4c:9a:70:d0:e8:62:7d:2c:7e:a0: fd:b0:3d:00:d3:1b:e0:99:ad:4b:ea:0b:0b:2f:97:96:88:97: 66:47:54:8b:d2:19:fb:cc:6e:f0:a6:54:58:25:94:f2:86:2f: 48:f8:22:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswTXCQqrOIuu1IAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZjhhNTA5OGUtYmQ4My00NTQ1LWEyN2QtZGYxMjczNmY0MmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnhj7EenmTXT3H61xgro86rw2JkmYhEAFBGX OuVeovenPWMzXRemtVA1S6c1q1yZUd5nChkbjj8bfQidAyVcEDK9ZpWmuxApXIS8 gd5sTicSLYgTdL3ARKZg0GtUpQUzPqXZr2ruEiPm+85Kn8GHZGCsO6cfuo+Nw4Bh nwKYI6TJS218Q7B+rniki+bfkNUbYy5wskOC1qkHnR/NVHzCFPpwLNHND9VveVQu BVsaYXe4BdmOFL5AC2vmMBnTDgw2iI0iAKT+rQVc0YlrGECO/pc0Wy7enJWpILkh HQLtqufSvoWvZWJJOaWVbkHGSofzw33FHAnm4xL9ECSlUOv8dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgBFKJ6obZJ/uBNGcb5KTLxLnk8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvMTUyM2I1NGMtYjIyYy0z OGJmLWJiZjItZWEzNjQ0MTFjYjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/lgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAthEtnUhHOObjr+vbOeLq0T3hghZ6POs8gc/uV4U52e4YOMFic6hoqp pEQ0lL7PIyrpGj1mDqMv0qJQUKYJ7xaryPZxc1mYnYgK9+NY39vfvaSfhVRqgOcN RVmXK/bQRucHvgVp2+Dguq380XNk8OFmUJtytopXd2T3dkcCoOeMWxCDguVHncq3 mxnjCGH+Lc5zUOugZ8FTYYS/MdqDBotAsWqzll2Ivo44JYj0lMIO9Tyz3eXQJvpd mizF+Rbn+YZE8/djbjZe2dGxFb3/TJpw0OhifSx+oP2wPQDTG+CZrUvqCwsvl5aI l2ZHVIvSGfvMbvCmVFgllPKGL0j4IlE= -----END CERTIFICATE-----Generated at Sun Aug 24 00:29:21 2025 by rpki-client