$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/7108cb79-914e-3bcb-be90-fa39e1b08f83.roa File: 7108cb79-914e-3bcb-be90-fa39e1b08f83.roa (raw, json) Hash identifier: xTz+/9bX9Y9UYD0YfKos7Lv4yAd1sBDdWZanv9ZP2bA= Subject key identifier: 58:BC:E9:93:A4:8C:04:81:4C:2F:F9:AE:A6:45:19:39:E4:2E:18:5E Certificate issuer: /CN=9d5e8807-643a-46c3-a245-693c793610e4 Certificate serial: 010D0C9F4328584ADECBC07C4F52EC7C23598660 Authority key identifier: 11:4F:A0:4D:D4:E3:78:3B:8A:F0:63:E9:49:24:2C:99:63:83:3C:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/7108cb79-914e-3bcb-be90-fa39e1b08f83.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 5065 IP address blocks: 23.129.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/9d5e8807-643a-46c3-a245-693c793610e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/9d5e8807-643a-46c3-a245-693c793610e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:c0:7c:4f:52:ec:7c:23:59:86:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5e8807-643a-46c3-a245-693c793610e4 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=40599a34-af2f-40b5-9680-38d43b6dfe3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:da:18:99:0b:45:34:03:05:15:42:b8:db:0f: 08:28:ba:bf:71:5c:e1:9e:d1:70:0f:fa:a8:60:ab: 68:d7:ed:20:d4:dc:da:36:34:a0:9f:f1:45:22:62: 6e:ea:cd:45:b7:60:eb:a3:39:c2:5e:74:74:02:03: 3f:84:7a:87:19:14:e3:99:c8:11:d9:5f:10:f5:8f: 07:b0:cd:89:00:5b:c3:7e:50:7a:d9:bb:b5:ef:a5: d5:2e:42:70:92:24:fd:b7:87:75:ad:55:05:67:bb: db:ee:a8:a2:61:88:df:9c:9d:6c:0e:61:42:21:cc: 79:83:47:be:9e:c3:b2:07:fc:9b:d5:ec:45:07:ff: ec:7d:47:e4:58:20:24:62:92:e8:07:cb:07:46:d6: 59:2c:5c:f6:a8:eb:a4:6e:04:5a:65:ae:a6:bc:d9: 72:65:33:24:ce:a0:cc:2b:db:dc:e4:43:36:28:2c: f9:a9:70:02:51:12:24:0d:98:b3:64:8e:5d:6f:f5: 86:ab:33:97:eb:56:ad:71:01:77:b0:c5:47:80:f9: 2c:7a:7b:f2:04:1d:0f:fb:01:83:fc:a8:78:6e:f2: 43:42:56:d6:d7:09:b4:e0:7a:ee:65:ff:27:84:aa: 83:ae:00:37:67:7f:41:a1:3e:1b:1e:ed:5c:24:5e: 30:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:BC:E9:93:A4:8C:04:81:4C:2F:F9:AE:A6:45:19:39:E4:2E:18:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/7108cb79-914e-3bcb-be90-fa39e1b08f83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/9d5e8807-643a-46c3-a245-693c793610e4.crl X509v3 Authority Key Identifier: keyid:11:4F:A0:4D:D4:E3:78:3B:8A:F0:63:E9:49:24:2C:99:63:83:3C:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4.cer sbgp-ipAddrBlock: critical IPv4: 23.129.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:7f:f7:a1:88:3b:51:98:c9:65:e9:c7:05:14:0e:29:b3:31: 1c:51:e6:dd:19:be:8d:c2:57:da:b9:c4:27:58:44:b2:48:e4: 4f:96:9a:bc:a3:0c:91:0b:37:75:18:a2:f0:69:13:7e:04:46: 34:51:98:66:eb:3e:5b:da:df:49:3b:50:f2:01:3c:b7:13:35: 97:6a:5e:12:6e:8d:c2:b7:7c:98:a1:7c:46:c4:38:d2:61:54: 1e:01:c4:a1:e4:f8:a0:e0:05:06:ba:43:fb:c6:a6:b3:71:b4: ba:41:46:b6:4f:2e:15:68:7c:29:37:1d:7d:4c:02:71:8d:ae: 49:b6:fe:69:fa:2d:9d:37:f1:31:6c:1e:7e:79:66:6f:ee:fc: 95:12:e6:08:aa:81:52:99:68:5a:55:0b:de:43:65:d4:72:a4: f4:a0:44:0c:9f:b3:f4:e4:b4:9a:a3:3a:ec:d8:48:17:f0:62: ea:b9:65:e6:b6:a3:a0:78:40:04:02:27:38:4d:e5:53:fa:a1: f5:81:b7:56:77:0f:2b:af:ee:91:23:2d:b9:b6:aa:59:27:e8: 18:0a:1c:e6:5c:73:46:29:dd:c9:c9:5e:a8:d3:a9:c5:0e:41: 19:f3:c9:15:32:0c:51:8b:50:6d:49:23:1e:fd:01:5c:c9:44: 2d:b1:f4:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey8B8T1LsfCNZhmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQ1ZTg4MDctNjQzYS00NmMzLWEyNDUtNjkzYzc5MzYx MGU0MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk NDA1OTlhMzQtYWYyZi00MGI1LTk2ODAtMzhkNDNiNmRmZTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4doYmQtFNAMFFUK42w8IKLq/cVzhntFwD/qo YKto1+0g1NzaNjSgn/FFImJu6s1Ft2DroznCXnR0AgM/hHqHGRTjmcgR2V8Q9Y8H sM2JAFvDflB62bu176XVLkJwkiT9t4d1rVUFZ7vb7qiiYYjfnJ1sDmFCIcx5g0e+ nsOyB/yb1exFB//sfUfkWCAkYpLoB8sHRtZZLFz2qOukbgRaZa6mvNlyZTMkzqDM K9vc5EM2KCz5qXACURIkDZizZI5db/WGqzOX61atcQF3sMVHgPksenvyBB0P+wGD /Kh4bvJDQlbW1wm04HruZf8nhKqDrgA3Z39BoT4bHu1cJF4wAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFi86ZOkjASBTC/5rqZFGTnkLhheMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZDVl ODgwNy02NDNhLTQ2YzMtYTI0NS02OTNjNzkzNjEwZTQvNzEwOGNiNzktOTE0ZS0z YmNiLWJlOTAtZmEzOWUxYjA4ZjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWQ1ZTg4MDctNjQzYS00NmMzLWEy NDUtNjkzYzc5MzYxMGU0LzlkNWU4ODA3LTY0M2EtNDZjMy1hMjQ1LTY5M2M3OTM2 MTBlNC5jcmwwHwYDVR0jBBgwFoAUEU+gTdTjeDuK8GPpSSQsmWODPMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZDVlODgwNy02NDNhLTQ2YzMtYTI0NS02OTNj NzkzNjEwZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4HcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEV/96GIO1GYyWXpxwUUDimzMRxR5t0Zvo3CV9q5xCdYRLJI5E+Wmryj DJELN3UYovBpE34ERjRRmGbrPlva30k7UPIBPLcTNZdqXhJujcK3fJihfEbEONJh VB4BxKHk+KDgBQa6Q/vGprNxtLpBRrZPLhVofCk3HX1MAnGNrkm2/mn6LZ038TFs Hn55Zm/u/JUS5giqgVKZaFpVC95DZdRypPSgRAyfs/TktJqjOuzYSBfwYuq5Zea2 o6B4QAQCJzhN5VP6ofWBt1Z3Dyuv7pEjLbm2qlkn6BgKHOZcc0Yp3cnJXqjTqcUO QRnzyRUyDFGLUG1JIx79AVzJRC2x9Fk= -----END CERTIFICATE-----Generated at Sat Aug 23 15:54:52 2025 by rpki-client