$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f07d94b9-d700-3ca9-9c15-d45684d85854.roa File: f07d94b9-d700-3ca9-9c15-d45684d85854.roa (raw, json) Hash identifier: BGDbS9khWmGFmKkIJG2abPt9tw3s4SVPn5iDuK4C5Io= Subject key identifier: 82:61:73:31:A3:1E:BE:DC:43:36:23:D0:BA:08:5E:CE:00:06:45:24 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A348025CFF69B425E70AE3CC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f07d94b9-d700-3ca9-9c15-d45684d85854.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 16625 IP address blocks: 23.217.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:25:cf:f6:9b:42:5e:70:ae:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=e52ec4ff-2eac-46fd-9fae-e90d6d7b36ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:82:7b:04:70:7d:55:60:14:d6:fb:98:e1:f7: fb:02:5f:de:53:fd:c3:b0:e2:3a:cb:a3:be:92:40: 3a:32:9f:be:9f:69:55:5b:d0:69:ae:e2:e6:b8:65: 64:13:0e:c7:a2:6e:3f:33:ca:a2:f8:83:29:e2:ce: 8b:4d:37:09:1c:1f:99:7b:41:13:9d:b7:ad:58:36: 46:ea:9e:0c:a6:c9:6a:9a:de:eb:a6:d3:f7:0e:38: 42:5c:ea:26:54:2e:d5:c1:25:ca:60:53:e2:01:b0: 49:3e:ed:8e:35:6f:13:6c:51:ae:84:f9:e1:84:81: 69:b4:ee:f4:ad:67:b4:15:22:f0:4d:c1:92:a6:a9: f2:fd:0e:cd:f2:e7:06:c0:4a:cf:16:38:20:b0:fd: d4:3e:c6:46:7e:c5:bc:4a:2a:80:a5:f0:d6:01:30: 65:43:cd:e8:c8:69:35:ce:ea:0c:a1:71:93:81:67: 4f:b8:cc:30:96:95:6a:dd:e9:09:af:44:52:0f:e3: 61:e6:6d:ad:16:1e:e6:3c:7c:bb:cc:0e:b6:a7:58: 45:35:da:8e:2b:b7:8d:2f:2e:42:1c:0e:e6:74:13: b4:c3:14:ce:28:e2:e4:7d:11:b0:06:ae:36:68:ac: de:f5:bb:fc:03:71:6a:26:00:28:65:38:f5:72:9e: e8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:61:73:31:A3:1E:BE:DC:43:36:23:D0:BA:08:5E:CE:00:06:45:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f07d94b9-d700-3ca9-9c15-d45684d85854.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:b8:91:c8:3c:ff:38:0d:96:2c:62:7d:0d:a3:be:77:ae:a1: 94:66:49:e1:5a:8e:87:ba:71:5b:3f:8a:ca:7d:83:bc:44:2c: 95:6b:2b:28:6f:7d:48:65:47:02:6c:c0:5d:cb:4f:8c:3d:5d: 68:21:00:fb:0b:fb:3f:c0:d8:58:e8:af:48:bc:a2:d4:e3:2a: 0a:ae:bf:65:9f:26:2e:cf:a9:10:f9:57:84:08:2f:e8:c9:a8: 9c:fe:f1:8a:ef:58:b0:bb:5a:6d:b5:ca:f8:02:af:ae:97:79: 7c:66:5e:f7:06:b6:20:10:16:3b:0a:71:38:a2:15:12:c4:f0: f9:cd:81:e4:10:ad:f1:4e:c0:7a:79:a0:1a:85:63:20:16:dd: af:c3:bd:ac:53:07:28:b3:4d:c7:c4:39:5a:3c:80:7b:2f:e3: 5e:d3:d0:0f:3a:00:fe:fc:40:f8:0e:92:fc:48:e8:2f:ed:8a: b4:53:8f:49:a5:9e:0a:76:52:b6:81:c5:ca:12:e7:45:d7:75: a8:9d:ec:05:7c:0a:ed:20:fb:1d:31:1f:55:71:bc:2e:f9:1a: 49:8f:b9:2d:fa:97:89:e0:49:b8:4c:0c:32:3f:10:4c:56:7d: 9b:08:87:b3:e1:68:e3:c8:6a:3c:cc:a5:33:72:d4:d6:8e:34: 26:a7:5d:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gCXP9ptCXnCuPMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk ZTUyZWM0ZmYtMmVhYy00NmZkLTlmYWUtZTkwZDZkN2IzNmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYJ7BHB9VWAU1vuY4ff7Al/eU/3DsOI6y6O+ kkA6Mp++n2lVW9BpruLmuGVkEw7Hom4/M8qi+IMp4s6LTTcJHB+Ze0ETnbetWDZG 6p4Mpslqmt7rptP3DjhCXOomVC7VwSXKYFPiAbBJPu2ONW8TbFGuhPnhhIFptO70 rWe0FSLwTcGSpqny/Q7N8ucGwErPFjggsP3UPsZGfsW8SiqApfDWATBlQ83oyGk1 zuoMoXGTgWdPuMwwlpVq3ekJr0RSD+Nh5m2tFh7mPHy7zA62p1hFNdqOK7eNLy5C HA7mdBO0wxTOKOLkfRGwBq42aKze9bv8A3FqJgAoZTj1cp7oHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJhczGjHr7cQzYj0LoIXs4ABkUkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjA3ZDk0YjktZDcwMC0z Y2E5LTljMTUtZDQ1Njg0ZDg1ODU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9lMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB24kcg8/zgNlixifQ2jvneuoZRmSeFajoe6cVs/isp9g7xELJVrKyhv fUhlRwJswF3LT4w9XWghAPsL+z/A2Fjor0i8otTjKgquv2WfJi7PqRD5V4QIL+jJ qJz+8YrvWLC7Wm21yvgCr66XeXxmXvcGtiAQFjsKcTiiFRLE8PnNgeQQrfFOwHp5 oBqFYyAW3a/DvaxTByizTcfEOVo8gHsv417T0A86AP78QPgOkvxI6C/tirRTj0ml ngp2UraBxcoS50XXdaid7AV8Cu0g+x0xH1VxvC75GkmPuS36l4ngSbhMDDI/EExW fZsIh7PhaOPIajzMpTNy1NaONCanXXw= -----END CERTIFICATE-----Generated at Sun Jun 29 13:48:14 2025 by rpki-client