$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce0aa800-0332-31ba-b4b0-fc0954cd6e6e.roa File: ce0aa800-0332-31ba-b4b0-fc0954cd6e6e.roa (raw, json) Hash identifier: UznupeHBSbsaV6v+e4U4FKbTBoWlXLBO6mTP7ebfdVA= Subject key identifier: E4:EE:BC:54:DB:3A:A4:99:FD:E8:3B:2A:0D:D5:80:31:3F:C2:EC:0A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3B7B0F4551D69E1EF1E2B300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce0aa800-0332-31ba-b4b0-fc0954cd6e6e.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 20940 IP address blocks: 23.43.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:0f:45:51:d6:9e:1e:f1:e2:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=035d1ef7-a696-4b91-bee2-a15be252854c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b1:10:2f:f7:f6:e3:5f:4b:5e:7f:99:1a:dc: 22:66:a6:15:4f:d3:43:1c:d1:ee:66:5a:83:9a:58: 5d:4c:89:c5:f9:ef:44:60:e6:de:55:4f:ba:72:c2: 95:1b:b1:16:a4:f8:59:af:2a:61:66:1d:f8:53:d3: cc:44:d8:24:cb:47:8a:9c:90:a0:67:6a:93:98:ab: 40:c2:1d:15:19:f9:fe:20:c6:06:a2:18:71:df:aa: 90:6f:c3:c9:65:95:b0:5e:90:7c:af:40:c3:3a:3d: c6:00:3a:1c:13:28:dc:d2:64:1e:b7:ee:7d:c3:3a: fa:f9:25:8f:17:26:17:53:04:ed:0e:8a:f6:7c:1b: 25:2a:d3:d5:ab:f8:ea:1a:fc:d6:1e:db:36:55:1d: a0:4b:a2:7b:93:7a:00:8a:a7:c7:c3:90:f4:7b:37: 13:6c:60:49:9b:dd:18:14:0f:a4:ca:57:c3:9c:90: f3:3a:05:44:26:39:9c:fb:2b:e5:0a:b6:57:85:97: a3:8e:ba:db:47:da:92:42:b4:c8:76:94:a1:10:e3: 71:b4:eb:a6:04:90:4c:09:77:27:df:12:24:61:eb: 5a:eb:75:11:da:60:6c:b6:0e:6a:8f:39:1c:9d:7b: 91:fa:f8:28:ac:22:1f:1b:f7:fb:fa:e2:53:9c:03: 21:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:EE:BC:54:DB:3A:A4:99:FD:E8:3B:2A:0D:D5:80:31:3F:C2:EC:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce0aa800-0332-31ba-b4b0-fc0954cd6e6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:6e:dd:aa:65:bf:46:d7:74:8d:e9:6d:99:b4:99:99:7c:ba: 43:e6:fb:4a:a3:71:42:8a:11:58:d0:d4:ac:eb:41:ad:52:60: e5:42:7c:bc:15:c7:8c:23:36:13:48:f5:62:e6:87:3a:5f:bc: b7:4c:67:e3:2f:82:6f:fe:a1:b9:5a:e6:13:24:ea:e9:97:b2: 9f:57:38:e8:28:3f:fe:57:4c:1f:f6:b4:3a:43:89:c8:b6:21: fc:d8:53:e7:7f:14:68:f4:d7:25:fd:90:86:c7:4d:f1:bc:e3: de:0c:a3:c4:da:b8:cf:14:fd:9a:e2:63:65:a8:a4:9b:ec:34: df:1f:c1:4f:57:7e:5f:75:8b:d5:6b:06:63:b2:7a:64:08:50: 36:04:d5:05:31:af:5f:d2:a1:b7:7a:79:aa:7b:c3:b5:01:0b: ab:7f:4e:8b:5c:70:23:2a:f6:86:f1:43:53:a6:54:c9:9b:d3: 33:fb:c0:2d:a6:16:85:25:e3:86:42:3d:cb:87:30:ba:0f:d5: 9d:65:62:5f:63:93:9d:24:d1:92:ca:a4:f0:79:33:91:bc:9d: 15:84:2e:63:53:60:42:11:e4:9c:8d:0f:18:52:a2:84:00:c5: 36:2d:e5:31:c2:1b:fc:34:ab:45:11:2c:5e:51:93:10:f9:c4: 3b:ed:02:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ew9FUdaeHvHiswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk MDM1ZDFlZjctYTY5Ni00YjkxLWJlZTItYTE1YmUyNTI4NTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLEQL/f2419LXn+ZGtwiZqYVT9NDHNHuZlqD mlhdTInF+e9EYObeVU+6csKVG7EWpPhZryphZh34U9PMRNgky0eKnJCgZ2qTmKtA wh0VGfn+IMYGohhx36qQb8PJZZWwXpB8r0DDOj3GADocEyjc0mQet+59wzr6+SWP FyYXUwTtDor2fBslKtPVq/jqGvzWHts2VR2gS6J7k3oAiqfHw5D0ezcTbGBJm90Y FA+kylfDnJDzOgVEJjmc+yvlCrZXhZejjrrbR9qSQrTIdpShEONxtOumBJBMCXcn 3xIkYeta63UR2mBstg5qjzkcnXuR+vgorCIfG/f7+uJTnAMhvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTuvFTbOqSZ/eg7Kg3VgDE/wuwKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2UwYWE4MDAtMDMzMi0z MWJhLWI0YjAtZmMwOTU0Y2Q2ZTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyt5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZu3aplv0bXdI3pbZm0mZl8ukPm+0qjcUKKEVjQ1KzrQa1SYOVCfLwV x4wjNhNI9WLmhzpfvLdMZ+Mvgm/+obla5hMk6umXsp9XOOgoP/5XTB/2tDpDici2 IfzYU+d/FGj01yX9kIbHTfG8494Mo8TauM8U/ZriY2WopJvsNN8fwU9Xfl91i9Vr BmOyemQIUDYE1QUxr1/Sobd6eap7w7UBC6t/TotccCMq9obxQ1OmVMmb0zP7wC2m FoUl44ZCPcuHMLoP1Z1lYl9jk50k0ZLKpPB5M5G8nRWELmNTYEIR5JyNDxhSooQA xTYt5THCG/w0q0URLF5RkxD5xDvtAh0= -----END CERTIFICATE-----Generated at Sun Jun 29 14:13:34 2025 by rpki-client