$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0e58316-9aa6-3d45-9f5f-9f570c571c38.roa File: c0e58316-9aa6-3d45-9f5f-9f570c571c38.roa (raw, json) Hash identifier: +nPfchvl+mqseiXh7Gry22wjMfrBF3yqftaedmC1c9U= Subject key identifier: C1:D8:9A:AE:92:D2:F0:FE:DF:6B:D6:E4:41:98:0B:F7:CC:0B:77:03 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3B7B12341D68253EAE311A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0e58316-9aa6-3d45-9f5f-9f570c571c38.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 20940 IP address blocks: 23.45.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:12:34:1d:68:25:3e:ae:31:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=6acddea3-6032-4347-b843-fdad0f1e9b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1e:d7:15:7f:f8:d1:e3:28:dd:79:9d:2b:3b: 88:6d:7b:8f:3d:c3:89:c4:6c:58:51:a2:40:96:42: 7a:f1:32:23:a4:76:2a:99:75:47:23:51:5e:74:54: 74:db:12:77:46:4a:98:0a:ff:ca:94:ef:30:e5:5b: 88:76:3a:34:87:5a:16:25:61:1b:90:76:00:04:64: ac:8b:3e:24:1b:49:33:3b:ba:e9:f9:02:c3:09:fe: 34:b6:2b:7c:81:16:a4:14:a1:b1:88:53:84:4b:cc: 72:f6:f4:f8:5f:cd:75:13:92:59:54:ae:79:ca:d2: 47:09:53:3b:cb:18:f1:0c:ce:9e:51:f8:91:fa:2c: e4:0a:60:38:91:76:fc:1d:a3:1d:55:0e:a7:4d:0a: 78:c0:ae:fa:04:e3:8d:0c:8a:7e:86:2a:3e:6c:13: 04:be:63:23:0d:8d:4e:f1:3d:f6:e0:79:11:40:eb: 64:82:e2:62:e1:58:85:5c:88:f1:0e:10:3f:74:ed: 2e:b3:fd:30:93:9d:b7:f4:11:37:3e:b1:73:95:0c: 4a:fb:96:ab:26:92:0d:5e:a5:16:2a:41:f6:12:7c: f3:64:05:c1:9d:8f:6c:5c:d7:47:78:0b:23:ef:6d: 89:4f:c0:da:aa:07:68:80:20:89:e1:d6:71:7a:d2: 08:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D8:9A:AE:92:D2:F0:FE:DF:6B:D6:E4:41:98:0B:F7:CC:0B:77:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0e58316-9aa6-3d45-9f5f-9f570c571c38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:3f:fd:83:c3:3b:81:4f:21:b1:5c:08:c6:44:be:49:d4:7c: b9:55:46:5d:98:68:d4:80:a5:8b:39:82:35:0c:0d:eb:3e:30: 34:43:d1:42:ec:7e:b6:2e:be:4c:64:d2:f4:43:96:60:8d:a4: 61:ed:d3:d5:51:9a:c8:bb:ae:0f:7e:d2:5e:65:e1:ea:e6:18: 0f:fc:83:05:78:cc:b8:82:3b:2b:e3:e2:ed:7c:9d:1b:87:d8: a1:3c:72:d8:33:2c:57:94:4b:3c:1b:1d:27:5b:f6:75:99:8d: bd:5f:e1:ec:eb:22:8f:e3:f1:16:91:f8:15:5b:af:66:c3:59: be:ad:b9:71:10:71:51:47:ca:41:8c:89:ea:c9:9d:df:75:74: 2a:fa:14:1b:fa:da:70:7b:59:35:d1:ac:13:be:1f:69:54:51: 64:1d:36:75:0a:39:07:6d:30:7d:a6:5d:35:28:f4:45:0d:18: 6d:7d:dd:c5:a1:53:e6:64:01:4e:15:6e:14:a1:61:52:ab:73: e7:6a:3e:2b:bb:96:b4:8e:6a:0f:5d:19:d7:7d:90:15:cd:80: 6d:c2:8c:c2:c8:7b:73:01:82:1c:1d:47:4a:48:a1:73:fc:59: 95:5b:bc:47:c4:02:0c:13:08:dc:50:13:c7:51:58:25:a5:8a: 56:50:af:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7exI0HWglPq4xGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk NmFjZGRlYTMtNjAzMi00MzQ3LWI4NDMtZmRhZDBmMWU5Yjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB7XFX/40eMo3XmdKzuIbXuPPcOJxGxYUaJA lkJ68TIjpHYqmXVHI1FedFR02xJ3RkqYCv/KlO8w5VuIdjo0h1oWJWEbkHYABGSs iz4kG0kzO7rp+QLDCf40tit8gRakFKGxiFOES8xy9vT4X811E5JZVK55ytJHCVM7 yxjxDM6eUfiR+izkCmA4kXb8HaMdVQ6nTQp4wK76BOONDIp+hio+bBMEvmMjDY1O 8T324HkRQOtkguJi4ViFXIjxDhA/dO0us/0wk5239BE3PrFzlQxK+5arJpINXqUW KkH2EnzzZAXBnY9sXNdHeAsj722JT8DaqgdogCCJ4dZxetIIZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHYmq6S0vD+32vW5EGYC/fMC3cDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzBlNTgzMTYtOWFhNi0z ZDQ1LTlmNWYtOWY1NzBjNTcxYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy15MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEs//YPDO4FPIbFcCMZEvknUfLlVRl2YaNSApYs5gjUMDes+MDRD0ULs frYuvkxk0vRDlmCNpGHt09VRmsi7rg9+0l5l4ermGA/8gwV4zLiCOyvj4u18nRuH 2KE8ctgzLFeUSzwbHSdb9nWZjb1f4ezrIo/j8RaR+BVbr2bDWb6tuXEQcVFHykGM ierJnd91dCr6FBv62nB7WTXRrBO+H2lUUWQdNnUKOQdtMH2mXTUo9EUNGG193cWh U+ZkAU4VbhShYVKrc+dqPiu7lrSOag9dGdd9kBXNgG3CjMLIe3MBghwdR0pIoXP8 WZVbvEfEAgwTCNxQE8dRWCWlilZQr2E= -----END CERTIFICATE-----Generated at Sun Jun 29 13:40:02 2025 by rpki-client