$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d19001fe-5ffc-3979-8f87-e4a3310d72ff.roa File: d19001fe-5ffc-3979-8f87-e4a3310d72ff.roa (raw, json) Hash identifier: g0XJF6x6t08yo164Zcjx6vnr5lI2+CRzW23VCCeQTp4= Subject key identifier: 10:A5:7A:BF:17:8E:11:06:58:CC:E5:C1:BB:33:E5:28:C3:EA:D0:D8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3B7B3FA0C05E8683B47E5C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d19001fe-5ffc-3979-8f87-e4a3310d72ff.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 20940 IP address blocks: 23.45.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:3f:a0:c0:5e:86:83:b4:7e:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=659ea073-9695-41aa-9e21-fc4e1aae8223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:26:72:6b:ee:d4:a1:9a:11:dc:38:82:a4:cf: 51:0b:09:34:bc:4c:bf:88:d6:5f:35:10:14:c4:14: 99:fd:f3:de:57:f6:ee:4f:98:3f:59:fe:81:6f:03: 91:6b:12:6d:d2:d5:52:42:ac:ec:40:5d:aa:7e:ca: f0:c4:6f:14:9c:aa:25:1a:f7:67:8a:d3:35:7a:a3: f0:e9:ce:b6:ca:49:3f:11:39:ae:2a:61:8f:82:5c: e4:3f:5b:98:d1:8d:63:00:fd:34:ca:50:97:6e:3d: 3d:bf:1c:a6:91:79:15:68:c1:d6:9c:60:b9:65:17: 60:2f:ff:df:d9:a6:3d:d9:dc:34:40:5c:e1:eb:77: 6d:1f:00:c1:ab:5b:9b:59:d5:79:34:2b:03:0c:50: 75:18:2f:8f:d8:12:6a:74:93:13:e9:0b:0e:7c:83: 63:b2:8f:c3:d8:f6:1a:2c:b4:fc:61:09:ab:2b:9c: af:b5:d9:c9:7f:a6:17:65:b2:73:cc:70:dc:4a:13: a9:6a:3a:b2:64:74:fb:2b:75:df:8a:09:3c:ad:cb: 96:96:93:3d:d1:67:a4:43:0f:0a:bc:59:80:77:b1: 5e:1c:82:61:b1:21:d0:d0:9d:f8:2c:63:b3:dd:6b: 4d:26:31:62:7e:ee:2b:25:2b:4b:81:ae:09:83:b8: f1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A5:7A:BF:17:8E:11:06:58:CC:E5:C1:BB:33:E5:28:C3:EA:D0:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d19001fe-5ffc-3979-8f87-e4a3310d72ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:3a:68:4b:f6:fc:82:73:29:5c:f6:dd:97:09:e1:67:03:7d: 32:34:21:6b:65:40:54:37:6c:01:2a:dc:fe:91:51:38:7b:0a: f4:d2:64:e9:cc:6c:ab:a7:2a:e0:43:8c:16:d4:63:37:bc:25: 52:fc:53:56:dd:f6:61:ce:b3:d7:e1:85:fe:80:7f:bb:89:9c: a5:fd:85:f6:bc:47:cf:86:24:6f:d6:05:7e:6e:ae:ed:0a:21: c4:ee:49:21:74:83:9b:63:20:f2:d0:19:e9:f4:89:07:4d:ad: 36:f2:03:ad:e0:d0:8c:24:55:61:19:15:8b:a1:fa:17:e3:44: ce:c4:e4:b5:84:f2:d5:d3:9c:86:fc:97:4b:76:69:bc:50:41: 7c:80:4d:14:93:04:f1:8b:5f:2e:92:c8:17:01:22:55:81:69: ee:b3:b0:de:f0:d8:e9:46:00:8a:00:72:8f:3b:5f:2b:b5:a6: 4c:a7:15:5a:8e:dc:80:61:b5:ce:e2:22:ca:08:7c:68:02:fb: 45:3d:8b:8e:1f:d9:56:1a:41:e6:8d:ef:c4:33:2a:30:b3:69: c3:48:66:a6:90:9c:fb:97:31:c3:be:1d:f3:17:96:34:2f:49: 3f:17:d3:1c:93:94:ac:14:5d:5c:15:96:21:63:e6:34:09:97: 0f:34:28:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ez+gwF6Gg7R+XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk NjU5ZWEwNzMtOTY5NS00MWFhLTllMjEtZmM0ZTFhYWU4MjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyZya+7UoZoR3DiCpM9RCwk0vEy/iNZfNRAU xBSZ/fPeV/buT5g/Wf6BbwORaxJt0tVSQqzsQF2qfsrwxG8UnKolGvdnitM1eqPw 6c62ykk/ETmuKmGPglzkP1uY0Y1jAP00ylCXbj09vxymkXkVaMHWnGC5ZRdgL//f 2aY92dw0QFzh63dtHwDBq1ubWdV5NCsDDFB1GC+P2BJqdJMT6QsOfINjso/D2PYa LLT8YQmrK5yvtdnJf6YXZbJzzHDcShOpajqyZHT7K3Xfigk8rcuWlpM90WekQw8K vFmAd7FeHIJhsSHQ0J34LGOz3WtNJjFifu4rJStLga4Jg7jxEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCler8XjhEGWMzlwbsz5SjD6tDYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDE5MDAxZmUtNWZmYy0z OTc5LThmODctZTRhMzMxMGQ3MmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy1DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQ6aEv2/IJzKVz23ZcJ4WcDfTI0IWtlQFQ3bAEq3P6RUTh7CvTSZOnM bKunKuBDjBbUYze8JVL8U1bd9mHOs9fhhf6Af7uJnKX9hfa8R8+GJG/WBX5uru0K IcTuSSF0g5tjIPLQGen0iQdNrTbyA63g0IwkVWEZFYuh+hfjRM7E5LWE8tXTnIb8 l0t2abxQQXyATRSTBPGLXy6SyBcBIlWBae6zsN7w2OlGAIoAco87Xyu1pkynFVqO 3IBhtc7iIsoIfGgC+0U9i44f2VYaQeaN78QzKjCzacNIZqaQnPuXMcO+HfMXljQv ST8X0xyTlKwUXVwVliFj5jQJlw80KPs= -----END CERTIFICATE-----Generated at Sun Jun 29 13:47:28 2025 by rpki-client