$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ef6277c-a8f5-30ec-9f74-baf8d282f6da.roa File: 3ef6277c-a8f5-30ec-9f74-baf8d282f6da.roa (raw, json) Hash identifier: pBEGaByDngeEX3WBV59Kl0LX8kClrTcW9vk2/l2yOSk= Subject key identifier: 0D:C7:9E:01:C3:AA:3A:85:69:D7:BE:28:B6:6D:9B:03:59:FE:40:89 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A51D06F408EFD1E268B100280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ef6277c-a8f5-30ec-9f74-baf8d282f6da.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 32787 IP address blocks: 23.32.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:6f:40:8e:fd:1e:26:8b:10:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=fcd2f5b0-3777-49d0-9f26-aca52fadbbb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:98:85:7c:7c:6c:2f:ca:8d:7a:9d:e8:9c:62: 4c:d3:e3:11:99:4c:c0:e0:e5:9b:b5:2b:9f:1f:67: 10:e2:25:94:42:3b:53:c0:c3:63:a5:95:ae:7a:02: 40:49:4d:db:44:ea:b0:38:61:81:d6:83:04:a0:6a: 3b:e2:43:b5:a0:ae:5e:21:91:bf:f5:fc:25:e2:46: 19:d2:9b:3d:77:99:27:3e:5f:8c:4a:ac:d1:d8:31: 65:9f:e7:56:95:7d:50:db:fc:e4:d6:d4:ba:58:6b: 3a:61:bb:6a:47:99:46:cd:b8:c8:3c:2a:25:47:c6: 96:29:14:7f:f1:1c:1c:8b:ce:e8:a6:03:6f:8a:e4: 7a:96:ba:37:81:35:b8:75:ea:80:e6:49:93:5c:2f: c7:fc:0c:f9:3e:b3:12:df:62:69:3c:02:8a:c4:b5: 62:b9:35:66:14:8b:81:44:17:e2:73:c5:f4:11:45: 7d:60:6c:af:e6:98:04:3f:a0:9e:06:13:5c:bf:73: 48:40:93:2f:ec:a0:40:fe:0a:c1:7a:5a:52:f7:25: d4:9b:74:c3:ab:98:88:81:90:cc:79:53:83:ab:03: a0:1a:47:c5:d2:7c:f4:89:3e:ac:ab:58:c9:a1:41: 47:41:1e:e7:05:74:06:1e:a9:eb:77:04:7b:d1:1e: d6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C7:9E:01:C3:AA:3A:85:69:D7:BE:28:B6:6D:9B:03:59:FE:40:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ef6277c-a8f5-30ec-9f74-baf8d282f6da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:0f:08:cb:4c:b7:ae:41:c5:b0:ad:2e:b6:b2:b6:03:c2:80: 43:5d:40:ac:5a:7f:fe:c8:b5:2b:b7:77:b8:9b:49:da:dc:d0: 02:f5:0c:cd:d9:ec:5c:76:06:36:ec:09:f7:4c:9d:6f:49:62: 2f:8c:28:ce:15:b7:90:c3:fc:dc:6b:b5:c1:e0:d5:cf:22:ab: 19:5f:48:bc:eb:ae:f5:f4:09:8b:99:75:82:38:54:1e:c6:95: 25:35:49:56:af:5b:c5:6b:c2:01:3d:9a:40:cd:7e:67:69:10: b4:b4:cd:fb:32:21:3a:bc:f5:c6:a9:42:ca:dd:f7:32:97:e7: 71:51:c9:cf:07:8b:bb:6f:f9:ad:d5:17:21:99:1b:01:06:05: c8:72:74:de:4a:1b:e3:31:a4:04:a3:5f:73:54:09:44:e3:4c: a2:a1:8a:44:3b:c7:e9:02:fe:ab:e1:35:10:07:72:25:6c:f4: ee:4c:da:87:da:0e:b8:08:72:35:21:40:b5:b1:0f:47:a5:80: 26:b3:59:44:b4:2e:74:80:0c:d7:c2:24:51:c7:12:fe:4b:89: c1:78:22:74:13:17:dc:71:eb:1a:30:52:2a:f3:5c:2b:d1:ae: b1:75:63:c4:61:d5:54:2c:0c:29:b4:0b:25:6d:fc:88:d0:3d: 1f:79:9e:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0G9Ajv0eJosQAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk ZmNkMmY1YjAtMzc3Ny00OWQwLTlmMjYtYWNhNTJmYWRiYmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJiFfHxsL8qNep3onGJM0+MRmUzA4OWbtSuf H2cQ4iWUQjtTwMNjpZWuegJASU3bROqwOGGB1oMEoGo74kO1oK5eIZG/9fwl4kYZ 0ps9d5knPl+MSqzR2DFln+dWlX1Q2/zk1tS6WGs6YbtqR5lGzbjIPColR8aWKRR/ 8Rwci87opgNviuR6lro3gTW4deqA5kmTXC/H/Az5PrMS32JpPAKKxLViuTVmFIuB RBfic8X0EUV9YGyv5pgEP6CeBhNcv3NIQJMv7KBA/grBelpS9yXUm3TDq5iIgZDM eVODqwOgGkfF0nz0iT6sq1jJoUFHQR7nBXQGHqnrdwR70R7WWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3HngHDqjqFade+KLZtmwNZ/kCJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2VmNjI3N2MtYThmNS0z MGVjLTlmNzQtYmFmOGQyODJmNmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyBHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIPCMtMt65BxbCtLraytgPCgENdQKxaf/7ItSu3d7ibSdrc0AL1DM3Z 7Fx2BjbsCfdMnW9JYi+MKM4Vt5DD/NxrtcHg1c8iqxlfSLzrrvX0CYuZdYI4VB7G lSU1SVavW8VrwgE9mkDNfmdpELS0zfsyITq89capQsrd9zKX53FRyc8Hi7tv+a3V FyGZGwEGBchydN5KG+MxpASjX3NUCUTjTKKhikQ7x+kC/qvhNRAHciVs9O5M2ofa DrgIcjUhQLWxD0elgCazWUS0LnSADNfCJFHHEv5LicF4InQTF9xx6xowUirzXCvR rrF1Y8Rh1VQsDCm0CyVt/IjQPR95ni8= -----END CERTIFICATE-----Generated at Sun Jun 29 12:45:58 2025 by rpki-client