$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5ace393-802f-3ffb-a49c-237f78a65c04.roa File: d5ace393-802f-3ffb-a49c-237f78a65c04.roa (raw, json) Hash identifier: PwTI40nKLCX6KcsJGr+NKQX/KG+hgVU9vtR3cRcEYvg= Subject key identifier: 1E:06:11:36:EE:D8:37:60:50:9F:70:2F:14:47:51:71:BE:D6:70:87 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A159C3A7819E139CB14A840 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5ace393-802f-3ffb-a49c-237f78a65c04.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.42.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:9c:3a:78:19:e1:39:cb:14:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=66f648eb-b02a-4875-8c48-ca650fe32ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0c:07:7c:a9:5c:f6:cc:0c:bb:03:d3:0e:92: 65:eb:29:b4:61:10:09:d6:9e:6b:49:c5:4a:8c:7a: 0d:87:29:64:58:6b:df:65:ca:6d:97:53:a3:4b:12: 80:1c:f7:44:a3:c9:51:a8:bb:b7:24:92:0d:bf:29: 7f:83:78:0b:cb:fb:a9:de:cd:a8:c1:7c:57:67:53: d9:75:d3:fb:04:8a:fb:28:21:89:30:17:4a:01:47: cb:ef:b7:11:ba:ed:c4:04:d8:63:d9:92:9e:6e:51: 45:db:1d:65:fb:9d:e5:49:1c:37:4a:64:3e:6c:0b: 5c:b4:5b:31:80:f2:d7:7f:07:d2:cd:f4:f2:1d:e6: 47:f8:aa:5e:de:ce:5b:33:73:47:3c:f5:02:cc:3d: f2:23:46:c0:8f:9b:78:3d:5e:a2:b7:43:c6:4b:2d: 73:68:8d:ef:e9:36:84:67:42:09:aa:ea:7c:c2:1e: 9a:ae:4a:9a:97:4f:3b:91:bd:3e:bd:b7:85:d8:80: 4b:cd:71:ba:4b:b1:f1:69:76:07:1b:5c:30:7f:aa: 96:98:bf:4c:58:03:96:61:7e:0f:7b:a8:7c:fd:40: 39:3b:d5:72:8f:93:c1:4a:1a:60:2b:c1:c6:2f:bf: 06:9b:50:69:bc:e1:16:43:c0:06:2b:20:59:3d:c5: cb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:06:11:36:EE:D8:37:60:50:9F:70:2F:14:47:51:71:BE:D6:70:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5ace393-802f-3ffb-a49c-237f78a65c04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.42.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:aa:6b:11:a9:0b:55:35:6c:a7:1c:f5:68:e2:ec:43:6e:78: b8:e5:bc:b2:24:3a:d8:03:62:5e:d2:35:81:eb:07:eb:51:58: 62:7f:cc:a3:51:d0:cb:2f:2e:7b:bc:b6:71:62:ec:79:89:19: df:b7:5c:c9:1d:a1:f3:fc:b7:90:b2:4c:58:9d:9e:d3:8d:10: a1:d4:8b:56:45:f7:c3:76:51:f0:fc:4e:db:c7:13:3f:a1:40: ce:dc:a6:28:51:f4:52:b2:2c:0e:f2:b6:82:11:dd:ee:69:98: e2:bf:83:75:0c:38:86:9d:39:86:a4:dd:dc:02:04:06:6d:f1: 3e:da:f7:54:05:63:16:9a:90:51:73:2a:03:8b:54:ff:76:0d: 66:d4:5a:fe:44:78:35:fb:06:a2:16:8c:d6:5f:8e:35:6a:f5: f8:78:cb:47:7f:9a:b0:b1:1c:ed:f4:98:e6:45:f8:b5:f6:a9: 0d:66:86:cb:32:2e:44:42:52:8b:19:45:15:3c:9c:1f:5e:48: f5:b7:22:71:7e:be:a5:f6:9e:91:f8:3c:77:24:88:10:38:db: cd:48:f4:7a:64:c3:fd:3b:6d:c4:98:18:e2:7c:a1:4e:49:1d: 86:d8:53:59:79:9e:0c:c7:0f:c7:35:f0:05:59:bf:6f:e5:07: b8:96:b1:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZw6eBnhOcsUqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk NjZmNjQ4ZWItYjAyYS00ODc1LThjNDgtY2E2NTBmZTMyYWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwwHfKlc9swMuwPTDpJl6ym0YRAJ1p5rScVK jHoNhylkWGvfZcptl1OjSxKAHPdEo8lRqLu3JJINvyl/g3gLy/up3s2owXxXZ1PZ ddP7BIr7KCGJMBdKAUfL77cRuu3EBNhj2ZKeblFF2x1l+53lSRw3SmQ+bAtctFsx gPLXfwfSzfTyHeZH+Kpe3s5bM3NHPPUCzD3yI0bAj5t4PV6it0PGSy1zaI3v6TaE Z0IJqup8wh6arkqal087kb0+vbeF2IBLzXG6S7HxaXYHG1wwf6qWmL9MWAOWYX4P e6h8/UA5O9Vyj5PBShpgK8HGL78Gm1BpvOEWQ8AGKyBZPcXLYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4GETbu2DdgUJ9wLxRHUXG+1nCHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDVhY2UzOTMtODAyZi0z ZmZiLWE0OWMtMjM3Zjc4YTY1YzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2qaxGpC1U1bKcc9Wji7ENueLjlvLIkOtgDYl7SNYHrB+tRWGJ/zKNR 0MsvLnu8tnFi7HmJGd+3XMkdofP8t5CyTFidntONEKHUi1ZF98N2UfD8TtvHEz+h QM7cpihR9FKyLA7ytoIR3e5pmOK/g3UMOIadOYak3dwCBAZt8T7a91QFYxaakFFz KgOLVP92DWbUWv5EeDX7BqIWjNZfjjVq9fh4y0d/mrCxHO30mOZF+LX2qQ1mhssy LkRCUosZRRU8nB9eSPW3InF+vqX2npH4PHckiBA4281I9Hpkw/07bcSYGOJ8oU5J HYbYU1l5ngzHD8c18AVZv2/lB7iWsY8= -----END CERTIFICATE-----Generated at Sun Jun 29 12:45:51 2025 by rpki-client