$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ac786d2-a7d5-34b5-b427-53a497c20e1a.roa File: 3ac786d2-a7d5-34b5-b427-53a497c20e1a.roa (raw, json) Hash identifier: nfRMm0B+BcMDbIUlmY0LVPxLziU7J5v9K6I892/O2xg= Subject key identifier: EF:AA:AB:3C:DA:70:02:04:46:40:92:92:F4:82:97:15:50:A3:EE:C3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4F05E259FFABAACC448CD100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ac786d2-a7d5-34b5-b427-53a497c20e1a.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 16625 IP address blocks: 23.200.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:e2:59:ff:ab:aa:cc:44:8c:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=f0181ede-b1b3-48d0-a9c6-7f332f165769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:52:57:4e:82:c8:17:c9:81:93:33:65:83:8b: 0b:0c:73:f0:4d:69:96:10:25:42:5c:28:66:6f:b2: e6:f1:e1:9a:aa:e6:09:4f:ce:9e:da:91:e9:f0:e1: f4:c2:0a:fa:d6:d9:09:5a:24:0d:9e:32:f9:f5:59: 31:bf:7f:63:c5:56:7a:73:79:49:8a:38:5c:dd:02: cb:90:ea:34:ef:b9:ce:9b:4f:d4:ab:26:c2:d9:61: 44:44:c3:85:91:e3:06:8d:4f:c0:85:5f:99:44:2d: 04:ff:fd:37:54:76:a6:cc:0b:a1:88:4b:f5:c4:19: 16:9f:87:5f:55:74:38:91:5b:30:fd:bf:8e:9b:fe: c2:64:35:29:d7:53:71:7e:57:46:b0:5e:e6:d8:57: 61:2f:d4:30:a1:c9:5b:01:29:7e:fc:7f:09:8f:8b: 60:f7:7b:4b:de:63:ce:88:c6:b5:a7:4c:ec:0c:89: 93:6d:2e:ed:39:02:b6:2a:ce:2d:03:5d:7d:c7:bc: 81:f2:99:a5:fd:56:22:b7:e5:e8:22:78:0c:05:0a: a4:1c:48:bc:cb:46:24:d7:89:71:2e:87:22:e1:6c: 9d:53:a2:6d:17:e4:03:59:0c:2c:f2:02:bd:bf:38: e6:37:94:5d:a0:94:0a:41:9a:6d:c6:84:fb:aa:c1: 8f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:AA:AB:3C:DA:70:02:04:46:40:92:92:F4:82:97:15:50:A3:EE:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ac786d2-a7d5-34b5-b427-53a497c20e1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:54:69:3c:e6:a2:d2:de:d8:7a:45:45:94:71:97:1a:b6:ad: 79:c6:1a:41:2f:27:5b:fa:b2:81:dc:de:e4:d2:1f:b7:d9:cd: 2b:a6:1a:67:e5:df:2e:37:6b:80:e4:dd:3e:c3:83:66:58:88: 7e:7d:19:b8:05:90:6d:fb:4e:00:47:fc:72:54:67:5c:7d:aa: eb:5b:e0:0f:6a:b1:04:2a:52:85:72:77:11:6b:1f:ba:20:16: d3:6e:e6:d8:02:dc:b0:b1:f9:79:8e:b2:44:4d:24:eb:d0:69: aa:2d:f4:f3:1f:d5:22:f0:0d:55:c7:ba:cc:d3:b0:c4:5a:8a: c2:d3:e1:01:ec:bd:54:d5:9a:04:02:db:2e:dc:69:85:b9:d5: bb:02:57:a3:82:76:64:17:e2:2a:31:0e:1e:27:19:5b:56:c5: 06:7b:6f:05:56:a0:6a:94:80:f2:64:97:c7:45:fd:83:8c:9e: 56:f0:4f:27:52:f6:1c:3c:3a:1d:48:aa:77:57:4d:9c:33:2e: 3c:ee:e6:d5:73:4a:0a:9f:66:16:4f:da:75:69:b1:95:47:e2: 53:68:53:e4:f5:11:a1:a8:5b:98:37:b4:6d:23:92:56:2d:22: 3d:f7:8f:5a:88:15:93:06:67:fc:f6:23:f4:f2:d2:8f:09:51: 66:a3:0f:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBeJZ/6uqzESM0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk ZjAxODFlZGUtYjFiMy00OGQwLWE5YzYtN2YzMzJmMTY1NzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1JXToLIF8mBkzNlg4sLDHPwTWmWECVCXChm b7Lm8eGaquYJT86e2pHp8OH0wgr61tkJWiQNnjL59Vkxv39jxVZ6c3lJijhc3QLL kOo077nOm0/UqybC2WFERMOFkeMGjU/AhV+ZRC0E//03VHamzAuhiEv1xBkWn4df VXQ4kVsw/b+Om/7CZDUp11NxfldGsF7m2FdhL9QwoclbASl+/H8Jj4tg93tL3mPO iMa1p0zsDImTbS7tOQK2Ks4tA119x7yB8pml/VYit+XoIngMBQqkHEi8y0Yk14lx Loci4WydU6JtF+QDWQws8gK9vzjmN5RdoJQKQZptxoT7qsGPBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+qqzzacAIERkCSkvSClxVQo+7DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2FjNzg2ZDItYTdkNS0z NGI1LWI0MjctNTNhNDk3YzIwZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8iwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVUaTzmotLe2HpFRZRxlxq2rXnGGkEvJ1v6soHc3uTSH7fZzSumGmfl 3y43a4Dk3T7Dg2ZYiH59GbgFkG37TgBH/HJUZ1x9qutb4A9qsQQqUoVydxFrH7og FtNu5tgC3LCx+XmOskRNJOvQaaot9PMf1SLwDVXHuszTsMRaisLT4QHsvVTVmgQC 2y7caYW51bsCV6OCdmQX4ioxDh4nGVtWxQZ7bwVWoGqUgPJkl8dF/YOMnlbwTydS 9hw8Oh1IqndXTZwzLjzu5tVzSgqfZhZP2nVpsZVH4lNoU+T1EaGoW5g3tG0jklYt Ij33j1qIFZMGZ/z2I/Ty0o8JUWajD3k= -----END CERTIFICATE-----Generated at Sun Jun 29 12:27:51 2025 by rpki-client