$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/421f59cb-e0a2-3bec-9337-1c49aa0e73ca.roa File: 421f59cb-e0a2-3bec-9337-1c49aa0e73ca.roa (raw, json) Hash identifier: 3DAxsdPjGdlJnYJMulJ1VTnDXnUQWYhnRkMsmCj5wHU= Subject key identifier: 49:5F:89:DC:E8:E6:95:42:A0:5E:D9:DA:58:43:0A:BA:0A:B9:A5:D2 Certificate issuer: /CN=9d5e8807-643a-46c3-a245-693c793610e4 Certificate serial: 010D0C9F43285849C36F7EFB3FE622C70F86DD00 Authority key identifier: 11:4F:A0:4D:D4:E3:78:3B:8A:F0:63:E9:49:24:2C:99:63:83:3C:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/421f59cb-e0a2-3bec-9337-1c49aa0e73ca.roa Signing time: Tue 06 May 2025 13:01:01 +0000 ROA not before: Tue 06 May 2025 13:01:01 +0000 ROA not after: Mon 04 Aug 2025 13:01:01 +0000 asID: 7018 IP address blocks: 23.129.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/9d5e8807-643a-46c3-a245-693c793610e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/9d5e8807-643a-46c3-a245-693c793610e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:6f:7e:fb:3f:e6:22:c7:0f:86:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5e8807-643a-46c3-a245-693c793610e4 Validity Not Before: May 6 13:01:01 2025 GMT Not After : Aug 4 13:01:01 2025 GMT Subject: CN=1a3e40cd-6e76-4a6b-90a4-d32d8d61b828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5b:6c:6f:89:9b:f4:7b:89:a0:10:f4:6f:ab: e3:0c:1b:53:2c:18:5a:de:3a:36:cd:b0:0f:d6:ea: c3:f4:84:c8:a6:31:2f:17:52:c8:9a:5f:77:71:1f: bd:93:1e:05:45:b4:17:39:24:52:9c:4a:a8:89:52: 16:85:30:54:50:11:73:85:a0:9b:66:b2:91:47:07: 5c:b9:92:55:88:2e:b8:be:db:02:a4:d4:c7:40:a9: e1:9f:08:f9:cc:48:06:2e:10:46:0c:c9:d3:a6:1a: d5:f1:e6:db:76:75:91:4d:56:44:da:16:a4:5c:29: ea:7f:e4:7f:2d:19:04:fe:13:9d:1d:61:29:b6:54: 28:b3:a3:b6:8e:22:b1:04:46:31:85:88:87:69:4f: 63:f1:a9:ab:2e:c0:30:46:00:aa:9a:fb:b3:af:8e: d5:23:5d:83:e7:cd:28:68:2d:ea:c9:46:6a:92:ee: 4e:26:87:52:13:ac:97:96:39:e7:35:d5:94:2b:74: b0:67:b3:66:8e:f4:dd:d3:0c:b1:ba:98:9c:87:45: 1d:d7:2b:cf:7d:6f:23:a1:65:11:06:b9:e4:eb:13: 74:20:8b:f6:eb:71:f9:9c:37:a8:28:ca:73:ed:b2: 8d:a0:c8:b4:0c:e9:7d:6a:71:5a:bd:de:61:25:8d: 13:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5F:89:DC:E8:E6:95:42:A0:5E:D9:DA:58:43:0A:BA:0A:B9:A5:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/421f59cb-e0a2-3bec-9337-1c49aa0e73ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/9d5e8807-643a-46c3-a245-693c793610e4.crl X509v3 Authority Key Identifier: keyid:11:4F:A0:4D:D4:E3:78:3B:8A:F0:63:E9:49:24:2C:99:63:83:3C:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4.cer sbgp-ipAddrBlock: critical IPv4: 23.129.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:8d:34:c7:03:25:b7:db:f5:13:eb:37:01:5c:81:5a:11:9e: 91:a9:01:65:6e:a4:a2:37:e4:fb:eb:1e:df:11:7e:be:27:c0: 38:a2:33:1b:6f:c4:10:d6:eb:61:48:0a:97:06:39:49:5e:6b: bd:43:6d:85:ca:67:3c:d8:1f:ac:b5:e3:f2:89:5b:1a:b7:3c: 7b:9d:03:21:2e:f1:81:05:93:d3:95:34:8e:7b:9f:9a:21:58: ec:bc:3a:42:59:c0:ea:99:e6:ab:f9:d2:85:51:5e:fe:b3:cb: df:3e:ce:c6:71:2e:9a:25:69:d5:71:98:77:66:a8:e5:82:d8: e9:27:59:77:2e:a3:06:e3:e5:18:13:e6:6f:bd:60:0d:12:91: 17:d3:02:f5:fc:aa:e9:23:56:41:be:33:3d:a2:38:51:77:d0: 37:2b:94:cb:c7:87:d3:e7:33:62:0f:e1:a0:a0:60:05:c0:ac: a5:cb:bf:b0:2f:99:08:fd:06:4e:f1:a0:c0:95:c9:b3:81:88: 09:5f:01:1b:e0:6a:cb:7e:f9:83:85:19:06:2e:05:45:67:79: b0:f5:4c:83:bf:1b:2e:ff:13:58:70:60:cc:da:9b:be:ce:09: 7b:5b:92:82:a0:5c:87:71:df:f6:8d:ce:6e:76:70:a4:31:67: ca:22:77:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnDb377P+Yixw+G3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQ1ZTg4MDctNjQzYS00NmMzLWEyNDUtNjkzYzc5MzYx MGU0MB4XDTI1MDUwNjEzMDEwMVoXDTI1MDgwNDEzMDEwMVowLzEtMCsGA1UEAxMk MWEzZTQwY2QtNmU3Ni00YTZiLTkwYTQtZDMyZDhkNjFiODI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Vtsb4mb9HuJoBD0b6vjDBtTLBha3jo2zbAP 1urD9ITIpjEvF1LIml93cR+9kx4FRbQXOSRSnEqoiVIWhTBUUBFzhaCbZrKRRwdc uZJViC64vtsCpNTHQKnhnwj5zEgGLhBGDMnTphrV8ebbdnWRTVZE2hakXCnqf+R/ LRkE/hOdHWEptlQos6O2jiKxBEYxhYiHaU9j8amrLsAwRgCqmvuzr47VI12D580o aC3qyUZqku5OJodSE6yXljnnNdWUK3SwZ7NmjvTd0wyxupich0Ud1yvPfW8joWUR Brnk6xN0IIv263H5nDeoKMpz7bKNoMi0DOl9anFavd5hJY0T0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElfidzo5pVCoF7Z2lhDCroKuaXSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZDVl ODgwNy02NDNhLTQ2YzMtYTI0NS02OTNjNzkzNjEwZTQvNDIxZjU5Y2ItZTBhMi0z YmVjLTkzMzctMWM0OWFhMGU3M2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWQ1ZTg4MDctNjQzYS00NmMzLWEy NDUtNjkzYzc5MzYxMGU0LzlkNWU4ODA3LTY0M2EtNDZjMy1hMjQ1LTY5M2M3OTM2 MTBlNC5jcmwwHwYDVR0jBBgwFoAUEU+gTdTjeDuK8GPpSSQsmWODPMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZDVlODgwNy02NDNhLTQ2YzMtYTI0NS02OTNj NzkzNjEwZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4HcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiNNMcDJbfb9RPrNwFcgVoRnpGpAWVupKI35PvrHt8Rfr4nwDiiMxtv xBDW62FICpcGOUlea71DbYXKZzzYH6y14/KJWxq3PHudAyEu8YEFk9OVNI57n5oh WOy8OkJZwOqZ5qv50oVRXv6zy98+zsZxLpoladVxmHdmqOWC2OknWXcuowbj5RgT 5m+9YA0SkRfTAvX8qukjVkG+Mz2iOFF30DcrlMvHh9PnM2IP4aCgYAXArKXLv7Av mQj9Bk7xoMCVybOBiAlfARvgast++YOFGQYuBUVnebD1TIO/Gy7/E1hwYMzam77O CXtbkoKgXIdx3/aNzm52cKQxZ8oidyc= -----END CERTIFICATE-----Generated at Tue Jul 1 09:38:48 2025 by rpki-client