$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/ad56f5a3-c4e9-3d40-94f8-39c72894f448.roa File: ad56f5a3-c4e9-3d40-94f8-39c72894f448.roa (raw, json) Hash identifier: cjfpTJSXM/oRhdu21EISOAlu9HvIbglbdCDxXRGfoY8= Subject key identifier: 16:AB:82:E7:C8:D3:3A:97:6C:46:C2:85:38:65:B5:92:E7:FE:5B:5D Certificate issuer: /CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc Certificate serial: 010D0C9F4328584A0E784095B7BAB03FA63D49C8 Authority key identifier: 54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/ad56f5a3-c4e9-3d40-94f8-39c72894f448.roa Signing time: Mon 02 Jun 2025 10:04:22 +0000 ROA not before: Mon 02 Jun 2025 10:04:22 +0000 ROA not after: Sun 31 Aug 2025 10:04:22 +0000 asID: 26879 IP address blocks: 23.129.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0e:78:40:95:b7:ba:b0:3f:a6:3d:49:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc Validity Not Before: Jun 2 10:04:22 2025 GMT Not After : Aug 31 10:04:22 2025 GMT Subject: CN=9acc1860-6048-49bd-9ebb-8669b4f220f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c8:6e:c2:ab:dd:6a:a7:c5:9e:d1:32:e7:ba: 3d:b2:69:29:83:3a:53:09:97:e7:15:81:57:1a:79: a5:32:a0:ba:5d:7f:53:87:5c:dd:74:08:d2:63:dc: a3:3a:ae:1b:e2:df:60:c9:ec:22:ab:c0:91:94:17: a8:11:d4:57:a4:f9:dd:41:cc:42:ed:b6:5e:3a:9e: 48:88:f1:6d:9b:67:c1:f6:26:f5:4f:40:1e:b8:ec: ed:b4:69:54:b5:04:e9:d5:e1:6d:c5:16:94:3e:a8: e0:97:43:bc:0e:59:b8:6d:ba:6a:ca:22:a7:4d:c9: 6e:f1:5a:cf:5f:61:f1:ce:6b:01:1a:5d:30:f7:e9: de:fd:6c:5d:9d:4b:51:dc:cd:34:7b:c5:17:20:e3: f1:01:8a:4e:55:2a:00:5d:58:b1:08:ae:12:b9:59: e3:b5:8c:31:df:34:ba:d2:54:d3:20:a9:90:0b:01: 7b:45:aa:81:65:f8:ef:9b:42:8f:e0:a3:48:3b:e1: d1:c0:e6:82:ad:fe:b4:d7:17:5c:ef:f2:d0:74:95: 9e:02:23:2c:0e:df:7e:57:fb:25:15:8a:2b:86:3c: d6:cd:ba:2e:e8:82:e0:5f:b9:07:ea:a1:c9:21:b0: 97:e6:6a:46:13:02:98:2a:04:8e:51:8e:4e:28:61: 43:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AB:82:E7:C8:D3:3A:97:6C:46:C2:85:38:65:B5:92:E7:FE:5B:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/ad56f5a3-c4e9-3d40-94f8-39c72894f448.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl X509v3 Authority Key Identifier: keyid:54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer sbgp-ipAddrBlock: critical IPv4: 23.129.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:b8:8e:ba:2c:fd:a3:93:c5:56:f6:61:68:49:b7:0d:b9:1a: 8c:da:bf:5f:92:4e:a7:77:06:8d:b5:60:5a:c6:c7:ae:3b:fb: d1:ba:4f:e6:a3:8c:ed:2f:e0:ed:ef:e0:1f:ac:88:57:1e:36: ee:6b:fa:5b:79:e7:36:ce:e1:e9:df:ca:c7:ba:1a:fd:93:a4: c0:dd:6c:cd:bc:ee:ca:11:27:24:8c:1a:70:f2:d5:83:d3:64: b6:bd:b0:f3:0d:09:fc:e7:39:29:f7:e8:55:3d:fd:89:d6:91: ca:d7:a9:6b:80:35:a2:d9:88:14:b0:e2:ab:9a:e2:ec:7f:fe: 71:f6:af:f0:97:05:d0:39:29:d7:19:49:85:05:86:13:5d:bc: c5:ae:a4:68:dc:b9:c3:ae:dd:f8:77:ed:ac:7c:d5:c5:92:f2: 5e:50:e2:3d:5e:68:10:e0:cc:b7:d3:f4:7a:2b:0e:48:e2:cd: aa:17:5e:28:f3:c0:07:94:37:41:1a:25:47:66:b4:ac:83:32: 58:8b:32:be:9f:39:d6:a2:62:4a:e3:68:fd:d9:93:e4:ef:85: 8a:96:ca:33:16:ce:83:60:8a:0d:4f:9f:07:bb:94:0c:b4:1f: 32:a8:8e:34:91:c2:9b:a9:ab:b1:70:40:51:69:be:34:3d:a5: d8:86:36:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoOeECVt7qwP6Y9ScgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWUyMmM1OWUtMjkwNC00ZWE2LWIwNDQtMGE5ZmFjMzk0 NmNjMB4XDTI1MDYwMjEwMDQyMloXDTI1MDgzMTEwMDQyMlowLzEtMCsGA1UEAxMk OWFjYzE4NjAtNjA0OC00OWJkLTllYmItODY2OWI0ZjIyMGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MhuwqvdaqfFntEy57o9smkpgzpTCZfnFYFX GnmlMqC6XX9Th1zddAjSY9yjOq4b4t9gyewiq8CRlBeoEdRXpPndQcxC7bZeOp5I iPFtm2fB9ib1T0AeuOzttGlUtQTp1eFtxRaUPqjgl0O8Dlm4bbpqyiKnTclu8VrP X2HxzmsBGl0w9+ne/WxdnUtR3M00e8UXIOPxAYpOVSoAXVixCK4SuVnjtYwx3zS6 0lTTIKmQCwF7RaqBZfjvm0KP4KNIO+HRwOaCrf601xdc7/LQdJWeAiMsDt9+V/sl FYorhjzWzbou6ILgX7kH6qHJIbCX5mpGEwKYKgSOUY5OKGFDWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBargufI0zqXbEbChThltZLn/ltdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZTIy YzU5ZS0yOTA0LTRlYTYtYjA0NC0wYTlmYWMzOTQ2Y2MvYWQ1NmY1YTMtYzRlOS0z ZDQwLTk0ZjgtMzljNzI4OTRmNDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWUyMmM1OWUtMjkwNC00ZWE2LWIw NDQtMGE5ZmFjMzk0NmNjLzVlMjJjNTllLTI5MDQtNGVhNi1iMDQ0LTBhOWZhYzM5 NDZjYy5jcmwwHwYDVR0jBBgwFoAUVAq19A7rP/3q8yJu5kT27+vMkGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZTIyYzU5ZS0yOTA0LTRlYTYtYjA0NC0wYTlm YWMzOTQ2Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4FEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADO4jros/aOTxVb2YWhJtw25Gozav1+STqd3Bo21YFrGx647+9G6T+aj jO0v4O3v4B+siFceNu5r+lt55zbO4enfyse6Gv2TpMDdbM287soRJySMGnDy1YPT ZLa9sPMNCfznOSn36FU9/YnWkcrXqWuANaLZiBSw4qua4ux//nH2r/CXBdA5KdcZ SYUFhhNdvMWupGjcucOu3fh37ax81cWS8l5Q4j1eaBDgzLfT9HorDkjizaoXXijz wAeUN0EaJUdmtKyDMliLMr6fOdaiYkrjaP3Zk+TvhYqWyjMWzoNgig1Pnwe7lAy0 HzKojjSRwpupq7FwQFFpvjQ9pdiGNuY= -----END CERTIFICATE-----Generated at Tue Jul 1 15:45:21 2025 by rpki-client