$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f386e46-5f55-3aef-853f-c40aca2da2f6.roa File: 7f386e46-5f55-3aef-853f-c40aca2da2f6.roa (raw, json) Hash identifier: adbYi8GkHUnL4JScP1oz+jFxf16HnljQD9fSPeyDXrw= Subject key identifier: 7C:95:60:23:71:BD:A7:B3:34:08:D6:EF:12:09:6A:8D:C0:94:B3:DC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3B7B3D0D8E876B6194105780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f386e46-5f55-3aef-853f-c40aca2da2f6.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 16625 IP address blocks: 23.44.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:3d:0d:8e:87:6b:61:94:10:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=1d975365-05a9-4ff4-9b2e-240271d53ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:37:4c:e4:35:8a:b6:ad:6a:f1:e9:36:d6:13: 5b:38:9c:0b:bd:f2:2a:02:28:76:27:a6:05:7c:76: 75:6f:ea:10:d2:d1:db:18:1e:62:7c:50:91:11:e9: 30:17:67:0f:de:84:9f:59:68:ca:e5:25:4a:7d:b0: a3:64:b8:98:ec:a1:24:9a:92:33:71:98:e2:19:9f: 7a:97:86:7c:60:58:cf:61:2d:41:df:76:f6:df:13: 3a:d9:f5:96:23:10:32:83:d7:43:17:a5:87:a8:5e: c1:d0:dc:5d:f4:51:5a:71:29:de:65:ad:ae:4f:cd: ed:4e:be:e9:26:50:22:0a:9d:ea:16:51:65:07:7a: 9d:3f:db:fb:c0:39:bb:44:fb:ff:c9:a2:08:06:43: f8:b6:a3:da:d4:4e:27:c4:c9:03:4f:df:79:62:b9: f3:db:0e:ba:0f:30:ba:59:76:06:32:b6:0c:34:9d: ae:7b:eb:d3:67:89:b7:3f:0e:e0:f8:ca:33:29:58: 37:f6:1f:62:4e:f3:7c:80:d6:6f:35:6c:4e:94:a5: db:a9:f3:dd:9d:d2:64:fd:4a:de:ae:4b:9e:af:c1: a2:d8:39:27:26:d1:a9:3b:49:ec:c1:32:83:7d:76: 74:5b:e5:76:29:05:91:d9:ee:27:26:b2:5a:71:0b: 8c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:95:60:23:71:BD:A7:B3:34:08:D6:EF:12:09:6A:8D:C0:94:B3:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f386e46-5f55-3aef-853f-c40aca2da2f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:63:86:c9:56:b2:77:da:95:11:18:47:a5:0a:d2:d9:36:b5: 0a:97:b2:69:66:9b:da:fc:8a:c2:ed:cc:6e:0c:45:c9:04:d4: 23:e7:91:5f:6d:ae:09:c1:06:0d:a6:e2:29:34:00:d4:ee:ae: ee:97:ee:39:a5:06:5b:65:b1:cb:33:d8:a9:8b:f7:78:d4:e9: 0b:82:32:ef:30:24:e6:65:94:62:3e:b7:b4:ac:f0:49:86:06: 30:0b:1c:75:be:ce:8f:1f:e3:59:ae:63:e8:b5:12:20:14:71: 42:ca:65:90:7e:cb:f8:b0:0d:5e:ed:f1:6c:85:27:08:34:e0: 5d:ee:f5:9c:2b:cb:66:54:26:86:08:27:8f:b9:f1:fe:d7:67: bc:7b:3c:10:74:a8:fb:24:ae:e4:ef:65:06:0e:3f:40:77:8d: 19:fd:40:c9:71:26:87:e2:86:eb:2b:de:f4:1a:19:e4:5b:96: f4:65:a6:a4:3e:06:09:b4:65:ce:a3:3e:cc:67:c2:3e:d3:fe: bb:f3:05:4c:b6:ed:4d:ff:4e:17:c8:32:f0:5f:4c:f0:31:3d: 33:50:ec:d2:c0:4b:f4:71:79:9d:38:16:1b:36:f9:39:88:cd: ad:70:f2:09:a5:a7:e7:06:fb:eb:43:31:16:43:f3:77:49:3e: e2:74:ac:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ez0NjodrYZQQV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk MWQ5NzUzNjUtMDVhOS00ZmY0LTliMmUtMjQwMjcxZDUzY2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzdM5DWKtq1q8ek21hNbOJwLvfIqAih2J6YF fHZ1b+oQ0tHbGB5ifFCREekwF2cP3oSfWWjK5SVKfbCjZLiY7KEkmpIzcZjiGZ96 l4Z8YFjPYS1B33b23xM62fWWIxAyg9dDF6WHqF7B0Nxd9FFacSneZa2uT83tTr7p JlAiCp3qFlFlB3qdP9v7wDm7RPv/yaIIBkP4tqPa1E4nxMkDT995Yrnz2w66DzC6 WXYGMrYMNJ2ue+vTZ4m3Pw7g+MozKVg39h9iTvN8gNZvNWxOlKXbqfPdndJk/Ure rkuer8Gi2DknJtGpO0nswTKDfXZ0W+V2KQWR2e4nJrJacQuM8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyVYCNxvaezNAjW7xIJao3AlLPcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2YzODZlNDYtNWY1NS0z YWVmLTg1M2YtYzQwYWNhMmRhMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyxwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBjhslWsnfalREYR6UK0tk2tQqXsmlmm9r8isLtzG4MRckE1CPnkV9t rgnBBg2m4ik0ANTuru6X7jmlBltlscsz2KmL93jU6QuCMu8wJOZllGI+t7Ss8EmG BjALHHW+zo8f41muY+i1EiAUcULKZZB+y/iwDV7t8WyFJwg04F3u9Zwry2ZUJoYI J4+58f7XZ7x7PBB0qPskruTvZQYOP0B3jRn9QMlxJofihusr3vQaGeRblvRlpqQ+ Bgm0Zc6jPsxnwj7T/rvzBUy27U3/ThfIMvBfTPAxPTNQ7NLAS/RxeZ04Fhs2+TmI za1w8gmlp+cG++tDMRZD83dJPuJ0rAA= -----END CERTIFICATE-----Generated at Sun Jun 29 19:26:16 2025 by rpki-client