$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa87476e-6587-32f8-9e25-ff671f5c947a.roa File: aa87476e-6587-32f8-9e25-ff671f5c947a.roa (raw, json) Hash identifier: fyqi7SpV12yd6fGJh7lUpFuokYSs7cNvG/vWmkAqas0= Subject key identifier: 41:94:17:35:71:46:FB:96:6B:F4:B6:79:C0:60:88:9C:83:42:09:C9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4F05E19E6A9DCA7DBE3F3200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa87476e-6587-32f8-9e25-ff671f5c947a.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.195.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:e1:9e:6a:9d:ca:7d:be:3f:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=e737fde0-e614-4347-9195-fa0008d63c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:17:1a:23:ab:4d:e3:19:ed:84:a8:d0:c6:5d: 34:83:c2:f5:61:24:b6:76:1e:68:2e:3b:84:cf:53: ce:cd:37:1c:25:d5:10:c3:6b:bf:3c:80:b3:59:17: 5f:66:66:74:4a:9a:4b:8c:a4:42:bc:42:7a:db:41: 87:eb:6f:68:3a:48:d5:cb:9d:af:74:fd:b5:a9:af: 35:52:4f:f7:09:35:4a:5c:77:cc:2e:be:17:23:87: 00:dd:99:a5:c3:2b:02:a9:bb:cf:6e:a3:2e:92:82: b7:87:67:43:7e:d5:3f:71:59:24:92:6e:d8:fd:17: cb:4a:40:31:b9:01:8e:1a:0c:ad:66:df:be:f2:9e: bc:e8:3f:a2:ab:42:b4:6e:f7:a3:27:ed:90:0a:2d: b0:58:14:ec:5f:02:e6:16:2e:4a:53:9b:7f:32:d3: 39:05:52:56:d3:a8:66:56:51:70:ca:ae:87:bb:eb: 43:72:13:6b:29:f1:9a:fe:4b:b3:51:3e:43:36:1f: d4:60:3c:bd:f0:ba:3d:fd:ff:ac:61:31:f4:e6:10: d1:21:35:7d:79:d6:f7:6c:1c:bd:35:a6:7f:b3:49: 23:0c:3a:5c:e1:95:e2:99:88:14:7d:e7:41:31:36: b9:0e:77:57:16:6f:ca:ed:94:b5:30:15:d2:4d:80: 2f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:94:17:35:71:46:FB:96:6B:F4:B6:79:C0:60:88:9C:83:42:09:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa87476e-6587-32f8-9e25-ff671f5c947a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:24:a1:e3:03:b1:74:fc:d0:ba:eb:d6:16:b5:bd:26:05:29: 04:bb:38:7f:60:f1:88:31:f6:af:03:57:5e:82:c5:70:b9:e2: 6a:2e:2a:c7:a8:54:20:fe:d2:a9:97:aa:bb:64:f9:2c:53:cc: 9a:ee:b3:d4:85:6b:ea:fb:b0:08:bc:32:22:8d:1d:28:62:4d: 03:af:a0:e4:d9:69:e8:33:3a:a5:01:80:0d:50:1a:2c:51:dc: f1:73:57:fe:4c:b5:9f:aa:5a:fa:c0:b2:ed:3c:4d:2a:ee:ef: 7d:0d:47:e5:08:d4:1e:af:8c:2b:65:ff:c0:ba:8c:7e:89:dc: 4f:18:1c:de:19:85:da:87:bc:7e:76:27:71:0e:8f:a6:f3:d7: 13:ec:40:33:9a:20:83:51:35:01:58:64:7b:04:b8:65:d4:e9: 73:5f:64:98:91:d4:39:9b:d6:36:47:1e:e7:b6:ca:ef:1b:10: 53:c4:3d:82:2a:79:17:40:69:75:1f:ca:e1:cd:9a:b0:43:bd: b0:75:05:95:e1:ee:00:e3:0d:3e:c3:7b:bb:2a:a1:2f:b8:b8: c4:c0:7d:4a:1b:0e:1d:57:c0:12:e5:f9:e0:d9:0a:7d:d8:17: 72:2b:df:54:31:6d:07:62:30:bc:23:ab:32:13:2e:16:f5:92: b5:e8:2c:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBeGeap3Kfb4/MgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk ZTczN2ZkZTAtZTYxNC00MzQ3LTkxOTUtZmEwMDA4ZDYzYzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghcaI6tN4xnthKjQxl00g8L1YSS2dh5oLjuE z1POzTccJdUQw2u/PICzWRdfZmZ0SppLjKRCvEJ620GH629oOkjVy52vdP21qa81 Uk/3CTVKXHfMLr4XI4cA3ZmlwysCqbvPbqMukoK3h2dDftU/cVkkkm7Y/RfLSkAx uQGOGgytZt++8p686D+iq0K0bvejJ+2QCi2wWBTsXwLmFi5KU5t/MtM5BVJW06hm VlFwyq6Hu+tDchNrKfGa/kuzUT5DNh/UYDy98Lo9/f+sYTH05hDRITV9edb3bBy9 NaZ/s0kjDDpc4ZXimYgUfedBMTa5DndXFm/K7ZS1MBXSTYAvewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGUFzVxRvuWa/S2ecBgiJyDQgnJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWE4NzQ3NmUtNjU4Ny0z MmY4LTllMjUtZmY2NzFmNWM5NDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8N8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAkoeMDsXT80Lrr1ha1vSYFKQS7OH9g8Ygx9q8DV16CxXC54mouKseo VCD+0qmXqrtk+SxTzJrus9SFa+r7sAi8MiKNHShiTQOvoOTZaegzOqUBgA1QGixR 3PFzV/5MtZ+qWvrAsu08TSru730NR+UI1B6vjCtl/8C6jH6J3E8YHN4ZhdqHvH52 J3EOj6bz1xPsQDOaIINRNQFYZHsEuGXU6XNfZJiR1Dmb1jZHHue2yu8bEFPEPYIq eRdAaXUfyuHNmrBDvbB1BZXh7gDjDT7De7sqoS+4uMTAfUobDh1XwBLl+eDZCn3Y F3Ir31QxbQdiMLwjqzITLhb1krXoLP0= -----END CERTIFICATE-----Generated at Sun Jun 29 14:48:59 2025 by rpki-client