$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52040ac5-edac-3e67-954f-3dd323ad7236.roa File: 52040ac5-edac-3e67-954f-3dd323ad7236.roa (raw, json) Hash identifier: Nfr3/xqBr3MHDJ95IE8z18KNwQ4fpnR2yXI6yNXhA0w= Subject key identifier: 3C:0A:A7:4B:24:AE:D8:22:7F:C8:BE:F2:0F:3E:29:93:CF:B9:E3:77 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3B7B3DDFDE7D313AB57B91E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52040ac5-edac-3e67-954f-3dd323ad7236.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 20940 IP address blocks: 23.44.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:3d:df:de:7d:31:3a:b5:7b:91:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=f1c61d95-93a3-4fa3-9a26-887aba72b8c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4a:53:a0:0c:d9:bf:77:e2:4e:09:63:d0:51: 0d:87:45:3a:2f:77:fb:c5:2b:52:9d:17:0c:79:1c: 51:92:c7:06:97:73:bc:3c:b8:c4:ce:bb:8f:e6:e8: 5f:e2:7f:ec:f4:09:1b:16:b3:73:22:53:a6:ed:4c: 65:65:ae:14:a1:04:ff:36:71:bc:bd:51:c0:94:f6: 40:55:fc:dc:f6:62:b7:25:a5:a0:4f:57:98:88:54: 08:b4:2f:8d:57:ba:c9:b3:08:f0:33:25:c5:76:9f: 23:04:b4:16:fd:96:41:51:86:80:fa:3d:04:f3:f3: 6d:7f:fe:9a:52:74:dd:8e:2f:07:9b:c8:53:2c:dc: 18:2c:ed:38:d1:fc:d0:3c:75:5e:44:c3:dd:04:4b: 2f:a3:f1:a0:41:87:bf:00:e0:a5:07:c6:2e:6d:52: 52:58:68:74:f8:75:48:2e:bc:97:3c:b2:ca:fc:7e: 26:15:65:3d:e0:99:ce:22:e8:36:c9:ad:3c:5c:a2: 32:e7:b8:ed:48:f1:ca:f8:b4:8d:69:3a:96:64:db: 88:cc:84:2e:3e:24:ac:1b:1a:b7:4f:6e:9c:f2:59: 7f:a8:63:a0:af:ef:39:cd:13:ae:34:ca:70:e7:49: 17:dc:e3:e1:f4:bb:f7:91:e1:7f:00:d5:b8:35:89: 55:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0A:A7:4B:24:AE:D8:22:7F:C8:BE:F2:0F:3E:29:93:CF:B9:E3:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52040ac5-edac-3e67-954f-3dd323ad7236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:8d:37:71:4c:ae:b2:2a:e9:6c:c3:01:ae:c1:c4:b4:cb:61: 03:20:67:4e:bd:f2:97:8e:8e:5b:ab:ec:66:ca:ad:ec:52:e0: 4f:98:ba:ec:9a:57:61:a8:09:91:46:d0:6f:69:d7:de:b9:4b: a9:b0:84:3a:b8:9f:f7:36:89:18:a4:d5:6a:e9:fb:f5:6d:85: 0d:f9:f1:d1:76:6c:0f:8d:a8:bd:f0:74:0a:ce:c1:4d:b9:ee: 8c:84:fd:15:12:69:48:de:82:92:11:26:9e:0f:d7:c2:a1:19: 0e:c7:be:f0:8c:a6:d1:cc:8f:69:73:ea:40:4d:9f:fc:37:f9: a4:5b:24:37:c0:38:02:f6:60:89:bf:88:8f:65:93:0e:bc:49: f1:6b:e1:9f:e1:c0:5b:e7:c6:40:22:10:62:bf:32:03:1a:69: 55:23:d1:cf:7f:c9:76:57:0c:64:34:47:a7:bc:3a:f2:d5:44: 62:11:96:67:8b:3a:ba:53:0d:b5:0b:2b:6c:43:10:c5:b4:a9: 78:ff:7f:52:8f:0d:f5:26:da:51:4c:22:14:b3:8b:c9:5f:72: 2e:f3:28:4a:44:60:be:02:86:7c:bb:d9:98:c9:08:40:c0:44: a6:69:b1:34:21:39:0c:57:41:a8:c6:01:f4:ce:dc:89:e3:69: ab:6d:52:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ez3f3n0xOrV7keAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk ZjFjNjFkOTUtOTNhMy00ZmEzLTlhMjYtODg3YWJhNzJiOGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUpToAzZv3fiTglj0FENh0U6L3f7xStSnRcM eRxRkscGl3O8PLjEzruP5uhf4n/s9AkbFrNzIlOm7UxlZa4UoQT/NnG8vVHAlPZA Vfzc9mK3JaWgT1eYiFQItC+NV7rJswjwMyXFdp8jBLQW/ZZBUYaA+j0E8/Ntf/6a UnTdji8Hm8hTLNwYLO040fzQPHVeRMPdBEsvo/GgQYe/AOClB8YubVJSWGh0+HVI LryXPLLK/H4mFWU94JnOIug2ya08XKIy57jtSPHK+LSNaTqWZNuIzIQuPiSsGxq3 T26c8ll/qGOgr+85zROuNMpw50kX3OPh9Lv3keF/ANW4NYlVuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwKp0skrtgif8i+8g8+KZPPueN3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTIwNDBhYzUtZWRhYy0z ZTY3LTk1NGYtM2RkMzIzYWQ3MjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyytMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuNN3FMrrIq6WzDAa7BxLTLYQMgZ0698peOjlur7GbKrexS4E+Yuuya V2GoCZFG0G9p1965S6mwhDq4n/c2iRik1Wrp+/VthQ358dF2bA+NqL3wdArOwU25 7oyE/RUSaUjegpIRJp4P18KhGQ7HvvCMptHMj2lz6kBNn/w3+aRbJDfAOAL2YIm/ iI9lkw68SfFr4Z/hwFvnxkAiEGK/MgMaaVUj0c9/yXZXDGQ0R6e8OvLVRGIRlmeL OrpTDbULK2xDEMW0qXj/f1KPDfUm2lFMIhSzi8lfci7zKEpEYL4Chny72ZjJCEDA RKZpsTQhOQxXQajGAfTO3InjaattUjg= -----END CERTIFICATE-----Generated at Sun Jun 29 14:03:41 2025 by rpki-client