$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a915177c-91c4-31b6-8cda-be44a0fc0ea3.roa File: a915177c-91c4-31b6-8cda-be44a0fc0ea3.roa (raw, json) Hash identifier: 2n/p4g8+hBK863ZHTK+BEPwX7UYNyIw2mpTS6F+NMX0= Subject key identifier: C8:AA:AF:A9:AD:E4:05:02:01:56:68:AA:B8:F9:11:E2:EF:AF:17:D7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A15A4E916BC5D7D103F4180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a915177c-91c4-31b6-8cda-be44a0fc0ea3.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.41.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:a4:e9:16:bc:5d:7d:10:3f:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=0219f18f-fccc-47fb-9b9b-fb9e8006373e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b0:48:ba:91:3d:8a:7b:8f:58:cf:91:db:39: 2f:8d:9d:54:01:73:57:1d:73:99:43:eb:39:2e:56: 97:90:27:47:45:07:47:3e:d0:e7:f4:b0:bb:3e:cb: c7:28:d2:33:34:a9:4c:c3:e5:c2:01:39:ae:70:03: c2:a4:5d:a4:e9:c6:3a:89:89:d8:5a:54:e0:ab:ae: 5a:e2:da:65:98:ae:a0:7f:3b:0f:d5:79:71:20:0a: 0b:c4:e4:48:79:4d:58:de:6f:d0:af:c0:15:48:57: e0:c3:92:28:9b:eb:74:b3:d3:95:94:79:9a:0c:a5: e9:38:05:9a:ee:46:63:21:0c:07:62:53:62:24:a3: b7:a8:40:35:64:3d:3c:ca:5b:e3:e3:49:bc:be:17: af:a3:f0:f9:f5:38:03:dd:07:dc:d3:c0:6b:d7:d1: 76:e9:2d:1f:dd:ff:72:3e:00:21:25:7e:98:f0:df: 71:91:90:0b:0c:4c:97:3a:ea:60:08:b5:b6:45:48: b4:09:9c:7d:bb:2e:cc:c1:cd:7e:81:24:4c:65:d0: 3e:19:41:76:86:9e:e6:c9:22:42:e1:9b:42:83:d9: 49:55:9b:ba:c4:9c:04:e5:03:01:b6:1f:d8:53:8b: 2b:5e:70:88:b3:be:24:a9:b3:f2:e7:80:7e:40:82: aa:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AA:AF:A9:AD:E4:05:02:01:56:68:AA:B8:F9:11:E2:EF:AF:17:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a915177c-91c4-31b6-8cda-be44a0fc0ea3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:09:02:b2:00:72:51:56:3a:86:47:e2:ed:3f:f9:48:3d:3c: 97:9d:55:17:7a:73:a7:e3:17:42:da:73:2d:f1:e7:5c:ec:64: 79:d8:8d:f6:b7:8b:aa:c5:f4:85:77:2c:43:57:2a:28:94:77: 81:b7:ca:75:5b:56:9b:0a:ca:02:8b:18:da:06:d2:3f:d9:55: 72:d4:0f:17:bc:31:c3:d9:4e:ee:af:9b:0f:da:ca:4d:08:02: 6f:e9:f7:4f:4b:97:ad:c6:68:61:a8:c7:97:26:44:43:ac:6d: 5e:ee:b9:08:c1:5d:4a:59:a0:0e:80:b8:7e:0c:20:c7:19:a1: a0:13:1e:27:9d:b6:2a:14:41:63:e5:a0:84:5b:12:b6:23:67: 5f:b3:37:9b:b0:81:d5:61:f2:79:dd:59:bc:3d:de:ef:fa:f2: 85:71:ba:23:11:dd:75:12:dc:7f:76:eb:0b:94:27:27:ac:a0: 5f:97:3c:fb:ce:d2:f3:02:e4:cb:3f:73:be:44:98:3a:47:92: 40:74:66:02:f6:46:8d:bd:89:39:5a:ae:51:03:3f:37:d4:c9: 30:89:ad:56:33:cf:bf:aa:67:86:f9:70:ce:1f:4f:64:43:32: 89:3b:8b:0c:d1:c9:c0:90:94:23:9a:83:d1:94:05:69:21:02: e8:94:9d:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FaTpFrxdfRA/QYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk MDIxOWYxOGYtZmNjYy00N2ZiLTliOWItZmI5ZTgwMDYzNzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbBIupE9inuPWM+R2zkvjZ1UAXNXHXOZQ+s5 LlaXkCdHRQdHPtDn9LC7PsvHKNIzNKlMw+XCATmucAPCpF2k6cY6iYnYWlTgq65a 4tplmK6gfzsP1XlxIAoLxORIeU1Y3m/Qr8AVSFfgw5Iom+t0s9OVlHmaDKXpOAWa 7kZjIQwHYlNiJKO3qEA1ZD08ylvj40m8vhevo/D59TgD3Qfc08Br19F26S0f3f9y PgAhJX6Y8N9xkZALDEyXOupgCLW2RUi0CZx9uy7Mwc1+gSRMZdA+GUF2hp7mySJC 4ZtCg9lJVZu6xJwE5QMBth/YU4srXnCIs74kqbPy54B+QIKq1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiqr6mt5AUCAVZoqrj5EeLvrxfXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTkxNTE3N2MtOTFjNC0z MWI2LThjZGEtYmU0NGEwZmMwZWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFylAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUJArIAclFWOoZH4u0/+Ug9PJedVRd6c6fjF0Lacy3x51zsZHnYjfa3 i6rF9IV3LENXKiiUd4G3ynVbVpsKygKLGNoG0j/ZVXLUDxe8McPZTu6vmw/ayk0I Am/p909Ll63GaGGox5cmREOsbV7uuQjBXUpZoA6AuH4MIMcZoaATHiedtioUQWPl oIRbErYjZ1+zN5uwgdVh8nndWbw93u/68oVxuiMR3XUS3H926wuUJyesoF+XPPvO 0vMC5Ms/c75EmDpHkkB0ZgL2Ro29iTlarlEDPzfUyTCJrVYzz7+qZ4b5cM4fT2RD Mok7iwzRycCQlCOag9GUBWkhAuiUnfo= -----END CERTIFICATE-----Generated at Sun Jun 29 13:34:00 2025 by rpki-client