$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b25c6fa-4d73-3b92-8f4f-8843ec0268a5.roa File: 4b25c6fa-4d73-3b92-8f4f-8843ec0268a5.roa (raw, json) Hash identifier: +Ywm8cLAphRwtItR9zk+LCFOgC3yrUMgYdtAEnRzoHA= Subject key identifier: 8F:52:9E:BC:51:71:54:7F:71:72:5B:DD:F5:9B:BC:6B:D9:CE:80:B1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A42758AD05DF80CFAB0B443C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b25c6fa-4d73-3b92-8f4f-8843ec0268a5.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 16625 IP address blocks: 23.50.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:8a:d0:5d:f8:0c:fa:b0:b4:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=8eda1e3f-73b4-4678-a580-d3a5299a381c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e2:ee:b7:15:52:7c:b3:f2:c7:19:6f:ea:fb: 03:9e:2b:a2:20:4d:07:9e:40:a1:64:38:aa:02:6a: 42:f3:d4:49:6c:61:6e:fe:77:5e:36:ef:96:df:21: 7f:88:15:2f:1f:41:69:3b:47:a0:2c:55:32:2d:73: 6d:55:7c:0c:fe:8e:d9:7c:53:a9:01:33:22:8e:cb: 31:e4:f3:2a:75:6e:63:9a:28:f0:bc:d0:e0:44:16: da:ef:33:d4:3a:50:14:f9:3e:31:f6:4b:b1:50:13: 21:09:33:63:48:94:3a:85:c8:fa:42:f3:28:37:91: 13:c8:5f:4c:01:18:bc:07:2c:51:ec:8c:18:ed:ad: c7:25:7c:d1:1a:4f:d4:ec:47:d9:8e:65:1d:fd:70: 9b:f1:c8:ac:f0:5d:a6:b6:00:96:02:e8:40:30:ec: e5:a2:dc:df:00:61:fe:3e:46:94:13:b0:a2:ed:a6: fd:7a:0c:b5:72:a8:3b:ce:8c:60:42:6e:e1:bb:cd: 49:aa:fa:31:13:1e:82:9a:8e:d5:33:a4:e6:f0:e2: d2:1e:2d:a9:28:46:06:d7:d2:ae:54:5f:5b:87:b0: 3b:10:04:d1:84:f7:c0:d5:6b:5c:92:2b:60:45:ee: 1d:71:08:f5:d6:7f:41:ea:3f:bd:06:6e:b6:a3:35: 28:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:52:9E:BC:51:71:54:7F:71:72:5B:DD:F5:9B:BC:6B:D9:CE:80:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b25c6fa-4d73-3b92-8f4f-8843ec0268a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.50.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:f8:3f:34:36:41:b9:4c:35:85:fb:f1:33:a4:38:32:52:31: bf:b6:fa:58:10:f4:60:2d:1b:98:11:81:7a:30:f6:d1:b8:0e: 10:f8:97:86:81:4b:57:12:af:df:98:e7:4e:93:92:41:0b:1a: 36:42:5d:a8:13:a8:48:b8:7c:3e:88:1d:e8:9f:3b:27:89:29: 76:1b:a1:14:c9:2c:ca:65:9e:e8:0f:ba:84:88:0e:8c:00:69: 22:a8:68:d5:ad:3e:7c:19:bd:e5:1d:02:2b:e6:83:01:c4:da: 6f:5d:16:16:3d:92:bb:fc:eb:e3:61:9a:e6:9e:37:a7:75:b1: ff:63:90:80:bc:e3:83:9d:cd:7a:fe:5a:4c:1d:5f:85:69:73: 8c:40:88:b9:45:f8:03:ed:e5:96:8b:9b:20:ea:f6:13:cf:ca: bb:1b:5c:58:87:0c:97:06:b6:d7:9d:49:a3:8c:8a:67:1d:03: 75:bd:cb:33:44:8a:46:59:df:d1:f0:2d:46:18:53:fa:68:a5: b9:e8:4e:bd:26:c3:a3:fc:d1:8d:d8:d2:fa:9b:c3:1c:02:73: ef:7a:51:33:db:d9:fd:4e:ed:7d:36:cf:80:f3:63:13:3a:ba: 76:58:5f:22:ce:3c:6f:d8:50:21:8a:0d:03:d0:71:6f:17:55: ce:d7:fc:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdYrQXfgM+rC0Q8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk OGVkYTFlM2YtNzNiNC00Njc4LWE1ODAtZDNhNTI5OWEzODFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuLutxVSfLPyxxlv6vsDniuiIE0HnkChZDiq AmpC89RJbGFu/ndeNu+W3yF/iBUvH0FpO0egLFUyLXNtVXwM/o7ZfFOpATMijssx 5PMqdW5jmijwvNDgRBba7zPUOlAU+T4x9kuxUBMhCTNjSJQ6hcj6QvMoN5ETyF9M ARi8ByxR7IwY7a3HJXzRGk/U7EfZjmUd/XCb8cis8F2mtgCWAuhAMOzlotzfAGH+ PkaUE7Ci7ab9egy1cqg7zoxgQm7hu81JqvoxEx6Cmo7VM6Tm8OLSHi2pKEYG19Ku VF9bh7A7EATRhPfA1WtckitgRe4dcQj11n9B6j+9Bm62ozUo1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9SnrxRcVR/cXJb3fWbvGvZzoCxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGIyNWM2ZmEtNGQ3My0z YjkyLThmNGYtODg0M2VjMDI2OGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFzIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADb4PzQ2QblMNYX78TOkODJSMb+2+lgQ9GAtG5gRgXow9tG4DhD4l4aB S1cSr9+Y506TkkELGjZCXagTqEi4fD6IHeifOyeJKXYboRTJLMplnugPuoSIDowA aSKoaNWtPnwZveUdAivmgwHE2m9dFhY9krv86+NhmuaeN6d1sf9jkIC844OdzXr+ WkwdX4Vpc4xAiLlF+APt5ZaLmyDq9hPPyrsbXFiHDJcGttedSaOMimcdA3W9yzNE ikZZ39HwLUYYU/popbnoTr0mw6P80Y3Y0vqbwxwCc+96UTPb2f1O7X02z4DzYxM6 unZYXyLOPG/YUCGKDQPQcW8XVc7X/Cs= -----END CERTIFICATE-----Generated at Sun Jun 29 19:27:09 2025 by rpki-client