$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91aa4966-4e46-3b60-ab01-ffd00fa4b1f5.roa File: 91aa4966-4e46-3b60-ab01-ffd00fa4b1f5.roa (raw, json) Hash identifier: Zz2iXVbDulayOM+DD9lBDBimUM3EC3+k6VgYb8zm650= Subject key identifier: 3B:A3:4A:49:4B:7C:E6:37:6A:0D:D1:E7:A4:75:35:4B:78:D6:41:9B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4DA04A371F8A814A3ADACD40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91aa4966-4e46-3b60-ab01-ffd00fa4b1f5.roa Signing time: Wed 25 Jun 2025 01:00:49 +0000 ROA not before: Wed 25 Jun 2025 01:00:49 +0000 ROA not after: Tue 23 Sep 2025 01:00:49 +0000 asID: 20940 IP address blocks: 23.63.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:a0:4a:37:1f:8a:81:4a:3a:da:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 25 01:00:49 2025 GMT Not After : Sep 23 01:00:49 2025 GMT Subject: CN=a03ef833-247f-490a-be98-b3f85124ea1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:17:18:25:f2:fc:8e:f9:6d:5c:a7:fc:fa:10: 98:e0:3b:78:6a:76:3c:a0:c5:b0:fb:65:9b:cb:e5: 2e:07:b1:ce:1a:60:ee:f4:90:f7:35:5e:f9:66:69: 94:b5:8e:65:90:00:12:7e:7c:d3:44:a2:d2:25:72: 87:2b:4e:75:d4:fb:99:a4:a4:ef:9a:38:3f:6d:61: f4:7e:75:63:6e:d4:39:a3:78:90:8d:04:be:75:25: f4:5f:99:be:ab:9e:a6:34:e2:cc:e2:a8:66:af:97: 4b:d7:35:6d:38:91:05:af:41:d1:52:3e:1e:17:c0: be:f4:99:16:77:82:a4:28:38:3a:03:40:0e:8c:32: 01:66:0a:48:22:b3:61:a1:1b:7e:6f:23:c9:f6:b0: d1:29:e6:ff:22:fa:40:f3:80:ab:62:9f:1d:ec:7a: fb:41:04:38:e2:d1:ae:de:f0:9e:1a:fc:97:40:8f: 8f:64:c4:3c:a7:31:80:d7:de:fd:b8:16:fb:0d:93: 6c:4f:3a:b1:0b:98:f4:93:e3:62:51:53:2b:9d:21: 24:d2:f6:94:27:5a:d4:ef:e4:93:b5:5f:04:a6:e4: e8:29:a0:49:af:e6:3f:6a:cd:af:df:b1:3c:d5:74: 31:85:40:5c:f5:b7:e4:bc:05:4d:10:03:3c:ea:86: d2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A3:4A:49:4B:7C:E6:37:6A:0D:D1:E7:A4:75:35:4B:78:D6:41:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91aa4966-4e46-3b60-ab01-ffd00fa4b1f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.63.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:4c:6b:bd:4f:25:33:33:cf:0c:ca:17:a1:30:c4:61:23:02: 9f:13:16:11:77:b7:d4:e0:52:f3:0b:45:29:c5:9c:2c:ac:0b: b8:4c:8e:58:a5:fc:72:b7:02:32:3f:35:78:cf:ff:dd:c4:a2: d3:70:c1:68:c9:34:7b:ba:c6:6b:17:b9:cc:b5:89:df:54:97: 4a:93:b5:48:eb:ed:6a:09:fa:98:d6:59:f4:c3:79:d7:69:13: 1d:60:e8:ee:79:36:37:8a:45:2f:3b:b2:c7:77:b4:b4:d9:76: 3e:f5:3e:45:76:9b:05:48:26:1d:a2:60:9e:eb:06:bb:92:e3: 1d:29:d7:79:73:50:61:63:dd:ba:aa:ac:c8:c8:29:71:53:2d: fc:85:e2:86:bd:0c:51:ed:57:d8:f0:29:fc:75:5a:b9:09:d1: 3d:32:cd:6f:59:78:72:2b:1e:bb:ff:5f:b9:25:7d:b9:c8:f7: 8d:9d:43:21:c5:e7:ae:89:ff:ab:b7:a7:dc:14:a9:01:31:71: 13:e0:3a:1c:86:e1:6a:40:ca:ce:4c:74:64:a7:67:cc:59:02: 88:cb:6d:26:3d:0f:e8:b6:fd:73:fc:b4:4c:2d:00:1e:31:83: 02:f4:73:cd:18:85:fd:21:87:54:cc:b2:a8:e6:78:14:05:a0: 25:01:b2:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpNoEo3H4qBSjrazUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNTAxMDA0OVoXDTI1MDkyMzAxMDA0OVowLzEtMCsGA1UEAxMk YTAzZWY4MzMtMjQ3Zi00OTBhLWJlOTgtYjNmODUxMjRlYTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxcYJfL8jvltXKf8+hCY4Dt4anY8oMWw+2Wb y+UuB7HOGmDu9JD3NV75ZmmUtY5lkAASfnzTRKLSJXKHK0511PuZpKTvmjg/bWH0 fnVjbtQ5o3iQjQS+dSX0X5m+q56mNOLM4qhmr5dL1zVtOJEFr0HRUj4eF8C+9JkW d4KkKDg6A0AOjDIBZgpIIrNhoRt+byPJ9rDRKeb/IvpA84CrYp8d7Hr7QQQ44tGu 3vCeGvyXQI+PZMQ8pzGA1979uBb7DZNsTzqxC5j0k+NiUVMrnSEk0vaUJ1rU7+ST tV8EpuToKaBJr+Y/as2v37E81XQxhUBc9bfkvAVNEAM86obS1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDujSklLfOY3ag3R56R1NUt41kGbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTFhYTQ5NjYtNGU0Ni0z YjYwLWFiMDEtZmZkMDBmYTRiMWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFz/7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJMa71PJTMzzwzKF6EwxGEjAp8TFhF3t9TgUvMLRSnFnCysC7hMjlil /HK3AjI/NXjP/93EotNwwWjJNHu6xmsXucy1id9Ul0qTtUjr7WoJ+pjWWfTDeddp Ex1g6O55NjeKRS87ssd3tLTZdj71PkV2mwVIJh2iYJ7rBruS4x0p13lzUGFj3bqq rMjIKXFTLfyF4oa9DFHtV9jwKfx1WrkJ0T0yzW9ZeHIrHrv/X7klfbnI942dQyHF 566J/6u3p9wUqQExcRPgOhyG4WpAys5MdGSnZ8xZAojLbSY9D+i2/XP8tEwtAB4x gwL0c80Yhf0hh1TMsqjmeBQFoCUBsj0= -----END CERTIFICATE-----Generated at Sun Jun 29 13:28:51 2025 by rpki-client