$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d315ce0-963e-3a5f-b684-c2980030b44c.roa File: 2d315ce0-963e-3a5f-b684-c2980030b44c.roa (raw, json) Hash identifier: 91xUh7QRwV0YEFXjvbGrubmSEGFgzxkOHIZlevW+0/I= Subject key identifier: A3:A8:03:44:A1:DD:1F:26:E1:CC:24:6A:65:75:84:50:EB:BA:78:AB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4C3B255D5FEFB794B44B7E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d315ce0-963e-3a5f-b684-c2980030b44c.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 9498 IP address blocks: 23.56.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:25:5d:5f:ef:b7:94:b4:4b:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=1ae97d92-a0d6-4853-894e-824238891818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:66:fa:0e:b4:c4:2a:d0:f8:7a:f0:63:e2:8d: e3:77:14:03:5f:2c:6c:49:a5:f7:10:6c:a0:57:a1: 3a:9d:87:16:ae:e0:9f:e3:fd:b5:ca:e4:06:cb:b0: 91:a9:2f:d3:7a:e7:77:0e:a4:99:3d:88:ea:b0:d4: ec:f4:b8:4a:5c:8c:0b:42:a8:03:52:b4:eb:45:3e: 06:c3:d6:30:a6:46:e4:72:b4:f0:55:c0:9a:7f:da: 97:41:06:9d:99:46:39:82:2d:5d:ac:48:f0:ba:17: 31:75:97:cc:fa:cb:7c:26:43:99:13:09:a0:15:65: 45:09:be:a4:c0:58:40:5f:ac:74:ed:90:54:c7:b1: ed:e7:35:17:c8:c7:26:73:50:95:a1:0a:ae:dc:1a: a3:8d:71:4d:ba:87:6e:dc:43:68:25:c9:01:2b:73: 52:84:71:dd:03:bd:52:fb:34:83:d2:06:24:c8:af: fa:d4:b7:7b:36:68:f6:3f:41:af:6f:b0:6c:f4:35: 5c:1d:b5:f6:30:b0:8c:90:16:64:d5:68:ab:64:8c: 3c:4a:0f:ca:d2:50:c0:1b:b1:14:48:9b:00:18:b6: 5d:80:6f:6b:7b:b8:ef:6e:be:a9:fb:3d:e8:34:47: 24:67:71:d8:06:47:3d:2b:fa:f2:25:b3:b4:c1:fa: a8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A8:03:44:A1:DD:1F:26:E1:CC:24:6A:65:75:84:50:EB:BA:78:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d315ce0-963e-3a5f-b684-c2980030b44c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.56.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:80:a0:b7:e3:81:79:63:fc:c1:76:fb:69:28:c4:90:ec:60: fe:81:45:08:20:04:48:f6:fd:72:36:aa:77:50:a9:fa:55:6e: 20:ea:78:45:2f:9f:d7:cd:6c:7d:3e:32:5b:72:e5:cd:2c:b7: fe:43:35:d1:a4:db:50:31:10:dc:d7:85:67:8e:f7:5b:22:7c: d6:ea:68:6f:85:78:f6:9f:6f:4d:0d:c2:ed:d8:c6:20:53:28: be:8a:23:4c:83:3a:2b:d4:00:e6:4f:70:62:78:fd:5d:89:ba: 50:f1:22:3b:d0:60:5e:83:47:b2:52:7f:2e:65:40:49:e7:62: d5:a6:15:09:13:bd:7b:c2:a5:3c:37:b8:0e:e3:e3:3f:f3:62: 66:13:2f:66:e3:d2:75:90:c8:a8:61:be:03:be:d6:e2:a7:01: 48:f3:aa:d5:d9:e9:87:0e:9b:5d:2c:30:e2:d3:a8:f8:3e:86: 63:96:8b:ad:7b:78:b8:39:03:b5:71:04:35:3d:22:0c:e2:8a: 45:8b:0c:72:51:9b:13:fd:2c:c0:8b:97:38:a6:1f:3e:f9:72: 02:f2:e2:d4:95:fa:46:0d:69:9f:5b:fc:3e:8a:14:10:a5:af: 77:09:5a:cc:4e:33:0e:3f:0a:8b:05:43:14:b3:56:60:18:20: 65:e5:0b:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOyVdX++3lLRLfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk MWFlOTdkOTItYTBkNi00ODUzLTg5NGUtODI0MjM4ODkxODE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWb6DrTEKtD4evBj4o3jdxQDXyxsSaX3EGyg V6E6nYcWruCf4/21yuQGy7CRqS/Teud3DqSZPYjqsNTs9LhKXIwLQqgDUrTrRT4G w9YwpkbkcrTwVcCaf9qXQQadmUY5gi1drEjwuhcxdZfM+st8JkOZEwmgFWVFCb6k wFhAX6x07ZBUx7Ht5zUXyMcmc1CVoQqu3BqjjXFNuodu3ENoJckBK3NShHHdA71S +zSD0gYkyK/61Ld7Nmj2P0Gvb7Bs9DVcHbX2MLCMkBZk1WirZIw8Sg/K0lDAG7EU SJsAGLZdgG9re7jvbr6p+z3oNEckZ3HYBkc9K/ryJbO0wfqobwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOoA0Sh3R8m4cwkamV1hFDrunirMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmQzMTVjZTAtOTYzZS0z YTVmLWI2ODQtYzI5ODAwMzBiNDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzhlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKAoLfjgXlj/MF2+2koxJDsYP6BRQggBEj2/XI2qndQqfpVbiDqeEUv n9fNbH0+Mlty5c0st/5DNdGk21AxENzXhWeO91sifNbqaG+FePafb00Nwu3YxiBT KL6KI0yDOivUAOZPcGJ4/V2JulDxIjvQYF6DR7JSfy5lQEnnYtWmFQkTvXvCpTw3 uA7j4z/zYmYTL2bj0nWQyKhhvgO+1uKnAUjzqtXZ6YcOm10sMOLTqPg+hmOWi617 eLg5A7VxBDU9IgziikWLDHJRmxP9LMCLlzimHz75cgLy4tSV+kYNaZ9b/D6KFBCl r3cJWsxOMw4/CosFQxSzVmAYIGXlCz4= -----END CERTIFICATE-----Generated at Sun Jun 29 13:34:12 2025 by rpki-client