$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/914fe38b-b2be-36d7-b1b8-29b3b8ce239c.roa File: 914fe38b-b2be-36d7-b1b8-29b3b8ce239c.roa (raw, json) Hash identifier: iIZRKhZGoGGM+x/UNEuSW9ssygMUieRFmiiaMKuEwmA= Subject key identifier: 62:77:7E:3B:31:6B:22:B9:2E:2D:02:A2:B6:4F:91:CF:90:4E:96:80 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A43DB159B70846017A82B4B40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/914fe38b-b2be-36d7-b1b8-29b3b8ce239c.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 9498 IP address blocks: 23.53.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:15:9b:70:84:60:17:a8:2b:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=574a7b49-325d-475f-b4de-a586b5ae13e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6f:bd:ca:8a:cb:ea:98:ff:10:83:9d:e7:24: 94:ec:69:11:7e:e0:3e:63:29:15:2c:59:fd:60:2e: 59:3c:38:d8:86:b6:b5:0b:98:de:ed:96:71:86:32: af:19:a4:c8:8b:8b:18:e7:7c:2f:1c:48:75:65:42: ae:4a:e0:fd:a9:43:fb:00:47:31:75:11:43:8d:88: 03:19:0b:06:64:ee:fa:e1:06:6f:ed:ab:54:91:20: a0:18:b2:78:45:f6:b0:4d:fe:fd:e9:bb:b3:74:a5: 01:47:25:69:95:04:66:4e:ee:7a:3d:fa:be:ac:0c: 18:8d:32:de:17:9a:86:fc:59:d1:5e:48:42:ec:84: d4:e3:2f:24:f6:b1:3e:4e:27:46:79:d9:94:aa:ad: 34:68:31:b8:61:80:72:cc:c3:44:28:bc:7d:0d:35: 4a:7e:b4:fc:31:3d:9c:3e:72:b7:7a:c3:45:5c:cd: 47:4b:d8:06:61:f6:56:3f:1d:6e:03:77:87:fc:f6: d7:eb:68:22:b1:37:d6:fb:f5:2f:8c:70:ea:77:0b: 46:6d:41:fa:12:31:46:e3:86:7d:4c:e6:1f:60:80: 3d:c0:4b:ee:6c:cf:b5:6d:6a:ef:7a:71:8d:17:aa: e1:ab:11:c2:35:cf:48:56:c7:31:4d:a8:75:79:f6: 6e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:77:7E:3B:31:6B:22:B9:2E:2D:02:A2:B6:4F:91:CF:90:4E:96:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/914fe38b-b2be-36d7-b1b8-29b3b8ce239c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:d2:24:8b:c8:10:59:7f:4e:ea:5d:ba:4a:62:fc:94:15:37: 23:19:1b:9d:b0:72:56:a0:5e:04:66:d2:53:18:d1:63:bb:2e: 43:c2:40:d2:e0:10:45:2e:92:87:1f:62:de:22:69:a7:c0:93: f3:63:e2:8c:fc:3d:73:af:c2:d3:66:21:28:04:59:bc:69:5c: cf:a4:c0:8b:ae:3c:33:f4:c8:af:94:81:da:19:14:1e:dc:d7: 3a:04:a0:7f:65:71:25:e2:2b:a4:57:e2:ea:b8:4a:08:71:13: d5:4c:ee:6e:37:e9:26:55:17:54:e5:28:7a:13:05:6b:9c:89: 5c:3f:9a:13:f6:5b:fb:d3:7f:d2:ef:ca:d7:b4:51:d1:38:83: 6f:c1:ff:53:ae:7f:b7:ac:48:fb:ad:77:78:e4:8e:e4:c1:3f: 8a:da:0f:3a:02:f9:26:9e:02:20:db:a9:e0:f7:82:7b:1a:02: 65:81:03:30:e8:7a:d1:a4:cf:dd:8c:57:ea:c4:ed:71:c3:72: b9:64:be:a8:a8:32:4b:df:d8:53:f1:91:2a:91:cc:0c:a8:f2: 7a:a3:b8:5a:5c:88:50:0e:03:4e:b1:8e:2a:86:34:cd:5e:48: 6e:2d:72:0f:de:72:92:5f:13:4d:a8:08:9e:9e:16:c9:be:f5: 4a:a9:b0:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2xWbcIRgF6grS0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk NTc0YTdiNDktMzI1ZC00NzVmLWI0ZGUtYTU4NmI1YWUxM2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0m+9yorL6pj/EIOd5ySU7GkRfuA+YykVLFn9 YC5ZPDjYhra1C5je7ZZxhjKvGaTIi4sY53wvHEh1ZUKuSuD9qUP7AEcxdRFDjYgD GQsGZO764QZv7atUkSCgGLJ4RfawTf796buzdKUBRyVplQRmTu56Pfq+rAwYjTLe F5qG/FnRXkhC7ITU4y8k9rE+TidGedmUqq00aDG4YYByzMNEKLx9DTVKfrT8MT2c PnK3esNFXM1HS9gGYfZWPx1uA3eH/PbX62gisTfW+/UvjHDqdwtGbUH6EjFG44Z9 TOYfYIA9wEvubM+1bWrvenGNF6rhqxHCNc9IVscxTah1efZuCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJ3fjsxayK5Li0CorZPkc+QTpaAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTE0ZmUzOGItYjJiZS0z NmQ3LWIxYjgtMjliM2I4Y2UyMzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTSJIvIEFl/Tupdukpi/JQVNyMZG52wclagXgRm0lMY0WO7LkPCQNLg EEUukocfYt4iaafAk/Nj4oz8PXOvwtNmISgEWbxpXM+kwIuuPDP0yK+UgdoZFB7c 1zoEoH9lcSXiK6RX4uq4SghxE9VM7m436SZVF1TlKHoTBWuciVw/mhP2W/vTf9Lv yte0UdE4g2/B/1Ouf7esSPutd3jkjuTBP4raDzoC+SaeAiDbqeD3gnsaAmWBAzDo etGkz92MV+rE7XHDcrlkvqioMkvf2FPxkSqRzAyo8nqjuFpciFAOA06xjiqGNM1e SG4tcg/ecpJfE02oCJ6eFsm+9UqpsKM= -----END CERTIFICATE-----Generated at Sun Jun 29 13:30:50 2025 by rpki-client