$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c808a35b-e4ce-306e-92be-3badd339f1da.roa File: c808a35b-e4ce-306e-92be-3badd339f1da.roa (raw, json) Hash identifier: FOKiZ6wfxrFFOzjnfsriq0I9KoC2IyY90zMecHT9WoA= Subject key identifier: 46:D5:72:02:00:14:72:AE:E9:A0:70:AC:13:D9:74:02:2C:3A:8D:AC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ADD668E45E2F3F58FFCE48540 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c808a35b-e4ce-306e-92be-3badd339f1da.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.215.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:8e:45:e2:f3:f5:8f:fc:e4:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=8ab6d6a7-8019-4c30-b753-c82eea3694d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:38:f9:da:47:67:a2:e9:b1:0f:8b:af:c2:b5: 12:34:95:14:40:af:83:a7:54:97:37:5b:a0:1f:08: 1d:17:b3:c2:75:fd:b4:e5:66:dc:07:af:ed:83:0f: 28:b9:d6:56:83:b6:11:9a:c5:57:bd:51:52:56:8c: 36:1e:e1:ef:00:e9:7c:6a:a8:b5:75:f6:3d:8f:e1: da:19:72:c1:21:4c:42:3a:fc:47:56:37:ee:1d:da: cc:51:01:e7:e2:06:37:54:cd:32:71:7c:15:db:01: 28:e2:af:0d:12:5e:00:27:60:8f:08:b4:e6:da:5c: fa:b8:7c:0b:39:7c:87:01:81:74:7e:81:cb:3a:bb: af:fe:7c:e7:e6:94:ab:a6:ae:a4:ee:d0:d8:d6:9b: 4c:18:11:67:0c:e5:6b:c3:8a:fb:40:6f:b2:c1:d1: 8e:23:e8:75:ac:13:3f:14:66:70:63:88:8b:2a:38: 29:84:54:cf:15:f7:2f:2f:4e:26:25:0f:dd:02:0d: 27:f7:20:2c:5a:e0:a9:9d:42:95:e6:0b:54:9d:50: e7:d0:16:c4:4a:8e:b3:b6:3c:76:09:d8:18:86:a3: 24:a4:3d:45:a0:05:5b:6e:d1:c1:79:6e:80:fd:14: 98:8d:f2:00:d5:bf:8f:89:b8:a9:53:30:4b:a5:64: 63:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D5:72:02:00:14:72:AE:E9:A0:70:AC:13:D9:74:02:2C:3A:8D:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c808a35b-e4ce-306e-92be-3badd339f1da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:92:38:d5:cc:b1:b0:ed:41:25:a4:83:4e:c0:43:cb:a2:5a: 1e:f7:0a:bb:3c:31:34:eb:a5:2d:f3:5b:41:d4:3e:20:0c:fb: 42:9c:a0:02:7c:0e:78:04:bf:da:4f:94:00:7f:20:7b:94:04: a5:7a:7f:c3:8b:07:93:19:47:60:4a:b9:f7:45:81:4e:aa:2d: da:7e:fe:2c:eb:50:32:06:8a:31:c6:92:a3:3b:d9:c1:cf:c1: 6b:4d:84:13:0d:96:f1:16:24:92:1b:50:e9:4a:9c:0f:92:28: 72:29:b6:ce:d4:8c:63:e2:b9:05:56:35:56:07:18:3c:0a:06: 45:d1:f4:55:6c:c4:f8:dc:00:07:d5:b3:c1:40:b2:3a:0f:21: b8:66:17:09:39:1b:86:b4:88:89:d6:c8:a1:3b:9a:ae:a6:08: c5:36:39:52:14:19:bb:3a:d5:a5:3a:39:fe:6a:2a:5e:90:92: 8b:45:c4:ad:58:4c:38:e2:6c:77:81:dd:48:a3:67:cf:1f:54: 8f:2e:bf:89:b2:f1:a2:e9:1d:e0:30:b1:12:ef:9a:9e:36:33: 12:08:f7:a2:13:34:f1:66:66:a6:70:86:a3:49:e9:eb:a6:d3: 49:2c:dd:cd:c5:41:68:92:fe:14:13:1e:32:a6:a6:bb:c8:33: 45:c9:4a:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZo5F4vP1j/zkhUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk OGFiNmQ2YTctODAxOS00YzMwLWI3NTMtYzgyZWVhMzY5NGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTj52kdnoumxD4uvwrUSNJUUQK+Dp1SXN1ug HwgdF7PCdf205WbcB6/tgw8oudZWg7YRmsVXvVFSVow2HuHvAOl8aqi1dfY9j+Ha GXLBIUxCOvxHVjfuHdrMUQHn4gY3VM0ycXwV2wEo4q8NEl4AJ2CPCLTm2lz6uHwL OXyHAYF0foHLOruv/nzn5pSrpq6k7tDY1ptMGBFnDOVrw4r7QG+ywdGOI+h1rBM/ FGZwY4iLKjgphFTPFfcvL04mJQ/dAg0n9yAsWuCpnUKV5gtUnVDn0BbESo6ztjx2 CdgYhqMkpD1FoAVbbtHBeW6A/RSYjfIA1b+PibipUzBLpWRjlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbVcgIAFHKu6aBwrBPZdAIsOo2sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzgwOGEzNWItZTRjZS0z MDZlLTkyYmUtM2JhZGQzMzlmMWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9c+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKSONXMsbDtQSWkg07AQ8uiWh73Crs8MTTrpS3zW0HUPiAM+0KcoAJ8 DngEv9pPlAB/IHuUBKV6f8OLB5MZR2BKufdFgU6qLdp+/izrUDIGijHGkqM72cHP wWtNhBMNlvEWJJIbUOlKnA+SKHIpts7UjGPiuQVWNVYHGDwKBkXR9FVsxPjcAAfV s8FAsjoPIbhmFwk5G4a0iInWyKE7mq6mCMU2OVIUGbs61aU6Of5qKl6QkotFxK1Y TDjibHeB3UijZ88fVI8uv4my8aLpHeAwsRLvmp42MxII96ITNPFmZqZwhqNJ6eum 00ks3c3FQWiS/hQTHjKmprvIM0XJSnI= -----END CERTIFICATE-----Generated at Sat Aug 23 16:59:31 2025 by rpki-client