$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bc3a46c-af30-3fef-9ba7-1d37521bb51e.roa File: 8bc3a46c-af30-3fef-9ba7-1d37521bb51e.roa (raw, json) Hash identifier: Bs+8wOFHGj96q7Us+mJBJcL+7WRwhUNmYP3/RPwnkUA= Subject key identifier: A6:8A:06:63:4B:3B:AA:24:85:87:C1:40:C3:96:95:F4:8E:48:65:0D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4C3B33FDAB1B2DC4780E7680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bc3a46c-af30-3fef-9ba7-1d37521bb51e.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.56.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:33:fd:ab:1b:2d:c4:78:0e:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=632b6e56-8cce-4160-b963-28021775bb47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:5c:bd:90:01:5e:9e:b2:60:63:df:77:c2:6f: 61:10:a0:50:4f:d6:92:65:27:32:48:1b:dc:66:fc: 1e:ac:bf:31:ff:1a:f4:b9:76:dd:ed:7c:af:b7:84: e4:83:2d:93:c4:d2:51:23:07:5d:80:8f:1a:90:22: cd:2e:3e:cd:af:5b:b3:a5:ca:2d:6a:0e:1f:a7:18: c2:ad:62:08:b7:23:57:95:ef:49:c7:a5:3b:ce:31: b4:16:fa:38:e8:37:a7:b4:7c:11:c2:07:3e:ee:85: 98:04:7f:9a:15:fb:7b:c9:d7:92:0d:6e:e2:d5:a5: fb:bd:c1:de:fb:83:b2:bc:9f:dd:ad:04:1e:1e:0e: 32:d4:49:57:05:4f:9d:70:8e:1f:58:ad:89:66:a6: fa:3d:93:c6:82:76:9c:df:26:5c:f4:5d:c5:cc:55: 46:13:e2:3a:1a:28:1c:a2:78:e0:04:a0:70:3a:bb: eb:58:bc:b6:2d:83:df:2f:72:16:a0:95:28:58:15: c9:58:36:9d:0b:02:6a:54:87:04:97:f9:be:78:58: ae:9b:7c:13:64:47:37:19:bb:b6:75:68:be:c6:fb: 18:b5:a6:fa:21:7c:21:ef:4d:81:5b:17:61:e0:c7: eb:4a:f0:8d:8f:db:ff:62:79:16:14:30:1b:36:54: 4f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8A:06:63:4B:3B:AA:24:85:87:C1:40:C3:96:95:F4:8E:48:65:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bc3a46c-af30-3fef-9ba7-1d37521bb51e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.56.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:8e:4c:49:df:9d:0c:65:b0:49:1a:ea:84:75:81:f6:a8:c9: ee:43:97:65:cb:bc:59:92:e5:b8:27:f4:e4:cf:04:18:2b:3f: 41:35:23:82:56:93:a1:f1:84:60:f7:bf:2e:ef:0a:c2:7a:28: 38:f7:01:63:12:88:70:ca:22:5e:61:f2:ec:d3:db:75:d5:a3: e6:5d:27:b1:0f:aa:23:63:b7:8a:a2:56:6b:25:14:6b:de:06: ac:fb:98:21:51:2c:8c:b8:cb:39:14:c7:9b:29:b1:45:ed:8d: 8a:35:81:e8:8a:3c:f4:06:36:36:95:72:7c:e8:74:93:f8:81: 44:5e:36:88:3b:a7:8b:35:fb:3c:93:b2:ff:5b:6d:47:2a:da: 13:ef:54:84:a3:86:cf:00:ed:e2:d2:54:ee:09:56:4e:6f:46: cb:c3:21:5b:77:c6:11:9d:8f:ee:8d:d7:93:a8:e9:c8:07:78: a8:97:b5:e7:be:9c:ba:18:66:cb:f8:07:98:0e:f9:e3:69:c2: 0a:28:4e:9c:8b:de:08:1e:8f:c5:c6:d7:97:db:8a:8e:aa:f8: 1f:9e:fc:98:ea:b4:80:43:35:bf:22:a4:29:37:3e:d9:56:f9: da:e6:87:55:73:44:21:0a:f9:a3:20:4d:bf:fc:3c:05:a6:0d: 21:ad:e2:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOzP9qxstxHgOdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk NjMyYjZlNTYtOGNjZS00MTYwLWI5NjMtMjgwMjE3NzViYjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Fy9kAFenrJgY993wm9hEKBQT9aSZScySBvc ZvwerL8x/xr0uXbd7Xyvt4Tkgy2TxNJRIwddgI8akCLNLj7Nr1uzpcotag4fpxjC rWIItyNXle9Jx6U7zjG0Fvo46DentHwRwgc+7oWYBH+aFft7ydeSDW7i1aX7vcHe +4OyvJ/drQQeHg4y1ElXBU+dcI4fWK2JZqb6PZPGgnac3yZc9F3FzFVGE+I6Gigc onjgBKBwOrvrWLy2LYPfL3IWoJUoWBXJWDadCwJqVIcEl/m+eFium3wTZEc3Gbu2 dWi+xvsYtab6IXwh702BWxdh4MfrSvCNj9v/YnkWFDAbNlRPwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKaKBmNLO6okhYfBQMOWlfSOSGUNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGJjM2E0NmMtYWYzMC0z ZmVmLTliYTctMWQzNzUyMWJiNTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzjuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGOTEnfnQxlsEka6oR1gfaoye5Dl2XLvFmS5bgn9OTPBBgrP0E1I4JW k6HxhGD3vy7vCsJ6KDj3AWMSiHDKIl5h8uzT23XVo+ZdJ7EPqiNjt4qiVmslFGve Bqz7mCFRLIy4yzkUx5spsUXtjYo1geiKPPQGNjaVcnzodJP4gUReNog7p4s1+zyT sv9bbUcq2hPvVISjhs8A7eLSVO4JVk5vRsvDIVt3xhGdj+6N15Oo6cgHeKiXtee+ nLoYZsv4B5gO+eNpwgooTpyL3ggej8XG15fbio6q+B+e/JjqtIBDNb8ipCk3PtlW +drmh1VzRCEK+aMgTb/8PAWmDSGt4sU= -----END CERTIFICATE-----Generated at Sun Jun 29 12:51:49 2025 by rpki-client