$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e1d1f4c-e9af-3dec-ac9c-9302faaa0168.roa File: 9e1d1f4c-e9af-3dec-ac9c-9302faaa0168.roa (raw, json) Hash identifier: uTI/s8SqhZ0NyQPj4qlX4tDA7vwn52jvNIYyaGmPh2o= Subject key identifier: D0:E3:DD:C1:25:20:15:CE:AD:F1:FA:A8:B8:51:B0:C7:DD:9D:16:F6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4C3B3393F1DC2C73D9C7DC40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e1d1f4c-e9af-3dec-ac9c-9302faaa0168.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 16625 IP address blocks: 23.56.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:33:93:f1:dc:2c:73:d9:c7:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=ecf2a98a-2ebb-48d9-9dec-e353a7c55b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:aa:cf:bf:0d:a2:f7:ff:66:3a:29:eb:fa:23: 8e:e7:b5:82:fb:a6:07:ae:1d:91:18:cc:02:f1:d0: 40:36:c1:2d:8c:39:9e:20:1f:29:1b:9c:34:0f:92: d0:3b:8f:7d:3a:0f:dd:99:a8:e4:b2:89:ea:f8:aa: 1c:ab:80:82:80:c2:c4:a6:b5:9b:a1:ae:7c:45:2e: fb:5e:b8:a9:27:ce:30:14:28:3e:a8:f8:72:9e:d5: 12:97:f6:00:ca:09:c1:30:28:e1:c9:19:32:af:6f: 92:62:77:89:1b:0c:2c:2f:16:e1:ea:d6:61:81:9b: d5:af:e7:e5:64:e7:50:68:39:1d:88:79:94:09:8c: 92:3d:9a:ac:52:37:58:e2:74:9b:56:7c:82:a0:d8: be:14:2f:73:f8:76:e6:2f:bb:bb:1d:58:d8:7b:8e: 77:14:8d:e6:16:ab:1b:83:55:81:a0:d3:c8:a4:0e: 2a:54:28:c6:9d:4e:7f:94:99:28:29:1a:e6:fd:a1: 71:42:9a:16:eb:26:0a:4e:5e:6f:92:94:5b:e6:20: 32:d8:6c:6d:0a:e1:c4:ce:82:ed:69:fb:9b:f4:ba: 9e:dc:14:81:bf:e1:a1:12:0d:4b:26:fd:d8:bf:ea: 0d:e4:5a:df:70:c6:1d:b6:a9:db:00:93:4a:80:36: b5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E3:DD:C1:25:20:15:CE:AD:F1:FA:A8:B8:51:B0:C7:DD:9D:16:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e1d1f4c-e9af-3dec-ac9c-9302faaa0168.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.56.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:24:1f:85:eb:3f:7f:a2:08:f6:5a:e2:43:0a:a2:67:55:b9: a6:87:0b:d5:81:34:ec:90:38:9c:76:74:05:21:86:7a:36:db: 64:0b:63:16:bb:2c:91:7a:eb:1a:8b:55:cb:37:63:9d:a3:77: e1:80:9a:43:37:27:41:8f:c5:f3:22:8d:e4:c8:b2:76:be:a1: f6:32:73:c2:5f:09:d5:94:bf:07:4e:c3:d2:2a:f3:02:28:6b: 2e:f8:05:a0:f3:3c:fd:95:f9:92:90:31:6b:2a:f4:69:aa:3b: 1e:9c:f5:a1:de:14:4c:89:18:72:59:79:6d:29:a8:95:1d:d5: 7c:ec:2a:de:30:9e:b5:68:22:ed:ca:81:f3:e1:b5:0d:78:78: 5b:63:0b:67:33:7b:73:64:92:e6:ba:8b:f5:5d:83:eb:46:d4: d3:eb:4d:f2:3f:ae:17:5c:93:1d:f1:9d:4e:d3:db:4d:ca:5e: 58:b6:08:34:43:6f:e7:8f:75:81:df:46:44:8a:54:44:4e:1a: 93:0c:21:95:0b:03:7f:23:10:e5:a8:f0:60:d3:03:cb:60:fd: 4a:a7:ca:96:5d:f1:36:be:c7:ea:80:c9:6e:f0:2f:67:86:d3: 65:c4:51:e9:e9:0a:36:0b:75:7b:d8:4b:ca:96:91:3b:d9:36: da:98:6f:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOzOT8dwsc9nH3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk ZWNmMmE5OGEtMmViYi00OGQ5LTlkZWMtZTM1M2E3YzU1YjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjarPvw2i9/9mOinr+iOO57WC+6YHrh2RGMwC 8dBANsEtjDmeIB8pG5w0D5LQO499Og/dmajksonq+Kocq4CCgMLEprWboa58RS77 XripJ84wFCg+qPhyntUSl/YAygnBMCjhyRkyr2+SYneJGwwsLxbh6tZhgZvVr+fl ZOdQaDkdiHmUCYySPZqsUjdY4nSbVnyCoNi+FC9z+HbmL7u7HVjYe453FI3mFqsb g1WBoNPIpA4qVCjGnU5/lJkoKRrm/aFxQpoW6yYKTl5vkpRb5iAy2GxtCuHEzoLt afub9Lqe3BSBv+GhEg1LJv3Yv+oN5FrfcMYdtqnbAJNKgDa1EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDj3cElIBXOrfH6qLhRsMfdnRb2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWUxZDFmNGMtZTlhZi0z ZGVjLWFjOWMtOTMwMmZhYWEwMTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFzjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGckH4XrP3+iCPZa4kMKomdVuaaHC9WBNOyQOJx2dAUhhno222QLYxa7 LJF66xqLVcs3Y52jd+GAmkM3J0GPxfMijeTIsna+ofYyc8JfCdWUvwdOw9Iq8wIo ay74BaDzPP2V+ZKQMWsq9GmqOx6c9aHeFEyJGHJZeW0pqJUd1XzsKt4wnrVoIu3K gfPhtQ14eFtjC2cze3Nkkua6i/Vdg+tG1NPrTfI/rhdckx3xnU7T203KXli2CDRD b+ePdYHfRkSKVEROGpMMIZULA38jEOWo8GDTA8tg/UqnypZd8Ta+x+qAyW7wL2eG 02XEUenpCjYLdXvYS8qWkTvZNtqYb2E= -----END CERTIFICATE-----Generated at Sun Jun 29 12:32:42 2025 by rpki-client