$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b16e226-4cef-3f17-aa6d-2a0bf40a3ac8.roa File: 3b16e226-4cef-3f17-aa6d-2a0bf40a3ac8.roa (raw, json) Hash identifier: 4Xt2gfi4SX8m2vx/HKfqsSO3yzQHucrxD3ESPxZtlQk= Subject key identifier: BD:52:E7:2C:F4:8F:41:3C:D3:DF:1F:76:BA:C1:2F:9F:7E:47:63:B2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4F05DF41F8953674033D2900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b16e226-4cef-3f17-aa6d-2a0bf40a3ac8.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 16625 IP address blocks: 23.195.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:df:41:f8:95:36:74:03:3d:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=30cb163f-6a88-43d1-9dec-921e5f661ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:77:e7:b6:8c:06:53:c6:e1:f3:93:36:1f:00: 80:6f:7a:b3:c8:60:c0:25:03:26:61:4b:6a:7d:8f: c7:5f:83:3e:d9:7c:bf:1a:61:9e:d8:04:78:c3:e6: 4a:0b:15:29:05:0d:e8:68:c4:a0:b0:53:d6:98:ed: cf:a6:50:6c:00:d4:d0:a4:75:ab:53:e0:c7:91:72: a2:1e:1b:d9:02:1d:91:8c:30:a7:33:6a:5e:fc:a1: df:12:a2:8a:44:65:40:57:96:67:0a:dc:b1:de:c3: 38:fb:4d:f3:2b:52:28:7a:8c:30:57:04:16:b8:b6: 86:45:d4:d1:77:40:82:34:ff:70:a1:81:f4:73:73: 75:a8:d3:dd:6b:70:ff:ff:49:73:3e:68:11:f3:f8: 92:fc:c7:ea:31:8d:be:27:1f:97:d9:39:b7:1a:05: 9b:07:fd:d9:c1:6d:96:26:53:93:39:ba:6e:2c:4e: c0:20:03:1e:31:e4:ef:63:e4:5f:35:0f:21:8d:c4: c1:f7:e5:03:72:df:0c:83:6c:ef:2f:33:10:fb:a4: 62:ac:72:f1:36:e9:b2:a7:59:17:9f:1c:72:0a:36: d1:85:54:82:e7:18:fd:12:bf:02:f5:57:03:af:f1: 42:44:2c:34:d6:fe:20:e4:27:53:6b:e5:2d:98:ec: 59:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:52:E7:2C:F4:8F:41:3C:D3:DF:1F:76:BA:C1:2F:9F:7E:47:63:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b16e226-4cef-3f17-aa6d-2a0bf40a3ac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ff:5e:6e:db:91:8f:c1:57:0d:68:5e:00:ee:92:f6:32:c9: d4:27:5b:a7:44:33:b7:aa:ce:e7:8e:1b:58:b2:a4:6e:da:9b: cf:a4:ef:ae:70:5f:bb:1e:05:a2:b4:22:35:b2:3c:fb:46:48: 46:16:1f:40:d0:84:b1:69:a3:8d:ed:a4:1f:01:ef:80:a8:93: c8:bd:f8:23:92:b0:db:e6:c9:ad:08:96:07:44:48:7d:d0:db: d1:40:da:9e:e6:38:2d:f9:80:67:df:ea:70:bd:62:b3:45:31: c1:f7:82:92:79:cb:01:8e:f8:37:88:47:e5:ee:cc:11:cf:a9: 5f:25:2d:21:0f:1e:83:b0:3b:ba:5d:0f:9e:81:27:17:af:78: fe:12:1d:06:29:d8:8c:a7:2d:c0:ab:80:b5:57:83:12:26:53: 68:e0:73:d9:1e:9c:d7:b2:04:e2:2a:7a:9d:40:69:d6:b1:98: da:6e:cd:ac:3d:d6:24:d8:85:e3:44:d2:fa:2f:f4:fb:80:31: dd:c4:f9:32:03:0e:b8:9c:3b:03:ac:c1:2f:bf:37:e4:ad:df: 76:7a:07:6e:f7:38:b9:e3:c9:35:b0:71:11:32:8d:c8:01:ae: c1:80:5f:01:a6:9f:48:6a:e0:09:1e:25:81:69:1e:c0:be:5b: 54:8b:3c:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBd9B+JU2dAM9KQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk MzBjYjE2M2YtNmE4OC00M2QxLTlkZWMtOTIxZTVmNjYxZWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnfntowGU8bh85M2HwCAb3qzyGDAJQMmYUtq fY/HX4M+2Xy/GmGe2AR4w+ZKCxUpBQ3oaMSgsFPWmO3PplBsANTQpHWrU+DHkXKi HhvZAh2RjDCnM2pe/KHfEqKKRGVAV5ZnCtyx3sM4+03zK1IoeowwVwQWuLaGRdTR d0CCNP9woYH0c3N1qNPda3D//0lzPmgR8/iS/MfqMY2+Jx+X2Tm3GgWbB/3ZwW2W JlOTObpuLE7AIAMeMeTvY+RfNQ8hjcTB9+UDct8Mg2zvLzMQ+6RirHLxNumyp1kX nxxyCjbRhVSC5xj9Er8C9VcDr/FCRCw01v4g5CdTa+UtmOxZHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1S5yz0j0E8098fdrrBL59+R2OyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2IxNmUyMjYtNGNlZi0z ZjE3LWFhNmQtMmEwYmY0MGEzYWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF8OgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHr/Xm7bkY/BVw1oXgDukvYyydQnW6dEM7eqzueOG1iypG7am8+k765w X7seBaK0IjWyPPtGSEYWH0DQhLFpo43tpB8B74Cok8i9+COSsNvmya0IlgdESH3Q 29FA2p7mOC35gGff6nC9YrNFMcH3gpJ5ywGO+DeIR+XuzBHPqV8lLSEPHoOwO7pd D56BJxeveP4SHQYp2IynLcCrgLVXgxImU2jgc9kenNeyBOIqep1AadaxmNpuzaw9 1iTYheNE0vov9PuAMd3E+TIDDricOwOswS+/N+St33Z6B273OLnjyTWwcREyjcgB rsGAXwGmn0hq4AkeJYFpHsC+W1SLPJw= -----END CERTIFICATE-----Generated at Sun Jun 29 19:26:05 2025 by rpki-client