$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/122f7b0f-3897-3cc8-9224-5f6a75b3a5e2.roa File: 122f7b0f-3897-3cc8-9224-5f6a75b3a5e2.roa (raw, json) Hash identifier: +TuwHMJuWTw59KDn1u2jemxgAGi+3Wd97yU5O0oRgYE= Subject key identifier: EC:9D:93:BB:7D:A2:34:9D:8B:47:83:96:72:6B:C8:52:D4:A7:A9:6A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC5AB80DAD1A9932916F2DB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/122f7b0f-3897-3cc8-9224-5f6a75b3a5e2.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.219.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:80:da:d1:a9:93:29:16:f2:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=487b0eb5-a6be-4235-9681-358b26faad19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dd:71:78:11:85:54:78:ed:cc:44:73:5a:5b: 83:85:07:d5:10:1d:de:f0:67:ed:96:5e:79:54:1f: 9d:ef:49:0f:55:83:07:80:20:11:31:a5:5a:16:c7: 33:96:71:ba:28:67:ca:d6:35:67:e4:f5:39:2c:2f: 67:50:ab:ef:a1:31:49:6c:95:5e:1e:16:93:ce:b7: 3b:c4:0f:ca:90:58:cb:87:99:af:48:58:8a:d5:93: 93:9d:63:44:d2:40:3d:9c:d3:27:cd:ca:f2:19:c1: 16:de:ae:aa:68:9e:fb:82:10:85:9d:e6:b9:91:a6: 4b:78:f3:9b:c3:22:ee:0c:14:1e:74:e0:ed:94:5e: b3:78:14:78:f4:5b:c1:7d:a1:73:1d:d2:50:cd:25: 6a:ad:f3:29:4b:ae:1d:42:ba:2b:32:96:23:a1:ce: cf:03:d0:58:35:56:a5:2d:4d:e2:ae:07:3a:68:fc: 42:3f:e2:63:88:3b:a9:5b:8e:c9:24:5f:05:60:af: 54:68:96:be:de:aa:2a:4d:85:fa:cc:bb:88:00:15: 2b:00:4a:cc:57:27:8c:e8:1f:33:03:c3:86:e0:76: 8d:1f:a1:16:b8:b7:aa:1c:50:7e:94:20:71:f3:3a: d9:04:91:1c:f4:49:c4:af:bb:38:15:36:85:a5:93: 6f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9D:93:BB:7D:A2:34:9D:8B:47:83:96:72:6B:C8:52:D4:A7:A9:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/122f7b0f-3897-3cc8-9224-5f6a75b3a5e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:ea:5e:2f:2c:fe:df:e8:19:ce:ad:2a:03:5b:78:5f:f1:e7: 97:b1:0b:d3:45:af:a8:b8:37:78:77:53:ed:49:e6:94:db:e6: 02:92:81:10:db:82:5a:90:1a:46:2a:f1:00:d9:19:d3:1d:59: 57:13:aa:ab:da:63:6d:b5:27:04:cd:22:c6:be:3d:07:05:e6: 5c:e9:d0:da:99:9a:00:64:2a:85:14:16:e8:7d:48:9b:d3:29: ed:be:f1:91:08:0c:18:bb:28:2c:b9:f0:51:06:d2:50:14:4f: bb:92:93:94:26:e0:15:68:c3:ab:24:05:37:eb:c1:89:72:8f: 60:ea:6f:e3:b9:f3:0b:7d:7b:aa:63:ef:3d:8b:89:a6:74:0f: 6b:ca:8e:cf:12:20:5f:d6:3a:e0:1d:01:22:04:6a:0b:d1:c7: 48:58:6d:28:3c:3e:ed:9d:fd:ea:10:3e:d3:f6:5a:39:47:17: 2e:0a:c0:a2:16:9d:73:dc:67:ec:44:1f:22:36:55:16:98:82: 2d:6a:93:12:87:89:e5:c1:32:1b:f8:b7:84:f3:b9:c1:58:55: 40:2f:c0:03:ac:f6:62:95:96:f5:bc:21:3f:16:8b:76:6a:c3: e3:40:83:0d:66:7d:55:c4:81:d7:67:d3:50:dc:de:63:5e:cd: 03:63:a8:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq4Da0amTKRby2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk NDg3YjBlYjUtYTZiZS00MjM1LTk2ODEtMzU4YjI2ZmFhZDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd1xeBGFVHjtzERzWluDhQfVEB3e8Gftll55 VB+d70kPVYMHgCARMaVaFsczlnG6KGfK1jVn5PU5LC9nUKvvoTFJbJVeHhaTzrc7 xA/KkFjLh5mvSFiK1ZOTnWNE0kA9nNMnzcryGcEW3q6qaJ77ghCFnea5kaZLePOb wyLuDBQedODtlF6zeBR49FvBfaFzHdJQzSVqrfMpS64dQrorMpYjoc7PA9BYNVal LU3irgc6aPxCP+JjiDupW47JJF8FYK9UaJa+3qoqTYX6zLuIABUrAErMVyeM6B8z A8OG4HaNH6EWuLeqHFB+lCBx8zrZBJEc9EnEr7s4FTaFpZNvBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOydk7t9ojSdi0eDlnJryFLUp6lqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTIyZjdiMGYtMzg5Ny0z Y2M4LTkyMjQtNWY2YTc1YjNhNWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ufMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjqXi8s/t/oGc6tKgNbeF/x55exC9NFr6i4N3h3U+1J5pTb5gKSgRDb glqQGkYq8QDZGdMdWVcTqqvaY221JwTNIsa+PQcF5lzp0NqZmgBkKoUUFuh9SJvT Ke2+8ZEIDBi7KCy58FEG0lAUT7uSk5Qm4BVow6skBTfrwYlyj2Dqb+O58wt9e6pj 7z2LiaZ0D2vKjs8SIF/WOuAdASIEagvRx0hYbSg8Pu2d/eoQPtP2WjlHFy4KwKIW nXPcZ+xEHyI2VRaYgi1qkxKHieXBMhv4t4TzucFYVUAvwAOs9mKVlvW8IT8Wi3Zq w+NAgw1mfVXEgddn01Dc3mNezQNjqO4= -----END CERTIFICATE-----Generated at Sat Aug 23 16:52:46 2025 by rpki-client