$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5c9c65c-d4c9-33e4-a2d0-1b76c1e7e0c2.roa File: d5c9c65c-d4c9-33e4-a2d0-1b76c1e7e0c2.roa (raw, json) Hash identifier: S1mYwp1U3v4VjYe8Fw1khTUwfCRgjaNKk2BI2dHq1l0= Subject key identifier: 50:13:D1:8F:83:90:40:67:70:0C:20:EA:62:3E:21:4B:C0:45:50:C2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A43DB14C99E7D148D511A9788 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5c9c65c-d4c9-33e4-a2d0-1b76c1e7e0c2.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.53.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:14:c9:9e:7d:14:8d:51:1a:97:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=9332b7ee-1bfa-403d-b8f0-dd1425d23042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:08:0d:32:8f:71:3f:0e:28:22:b4:7e:ab:88: 3a:fd:01:62:a5:3d:16:ff:fc:e2:14:93:f2:f6:d8: c3:67:f9:63:05:e1:ae:09:35:b7:c6:e6:ec:a7:75: f6:dc:36:d4:52:49:d9:61:ac:2e:db:c5:8f:a9:21: 4d:7e:f9:8b:04:b3:40:34:ba:69:13:be:7d:02:3e: 39:32:2e:9e:9d:8f:af:ef:05:48:17:2f:6e:00:e0: 83:5a:61:a9:18:01:aa:38:1f:00:2e:f3:a1:11:9a: 22:6c:e4:14:5d:e7:18:69:1c:49:92:bd:5e:85:69: 00:3d:77:3d:02:66:6c:0d:7c:76:69:3b:98:a0:1a: 2a:fb:a0:a9:41:c5:92:5c:8e:c6:ca:77:0a:b3:2b: 51:40:53:a9:ca:85:d0:2a:80:ab:48:15:07:42:16: ee:7f:b8:1a:fd:93:80:b1:87:25:aa:a2:44:c1:48: 50:6a:0c:7f:35:55:ee:21:83:4b:ff:19:94:01:dd: cf:12:55:79:d3:a2:47:10:5c:dc:1c:9e:b1:3d:6e: 0a:50:e5:74:15:91:06:63:cc:68:a6:0c:1d:cc:33: c7:11:8e:ab:28:d3:70:cf:63:5b:2e:75:f1:35:e8: 43:51:db:75:89:95:f7:0a:fc:24:4b:d6:d1:c5:ce: 55:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:13:D1:8F:83:90:40:67:70:0C:20:EA:62:3E:21:4B:C0:45:50:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5c9c65c-d4c9-33e4-a2d0-1b76c1e7e0c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:f9:64:95:24:a8:a5:f2:b6:45:21:09:91:f1:e4:b8:31:06: a6:59:1a:12:24:59:73:c1:12:f4:5f:ec:37:71:26:46:40:4e: 34:4f:d5:02:03:48:98:35:e6:1f:e0:e4:3a:f6:1a:c2:a4:68: 78:0f:7f:22:5d:41:32:76:4f:c9:8f:df:89:b5:52:a6:2b:76: a4:91:52:02:62:e4:d5:4a:05:15:91:64:9b:5c:d7:1e:62:ee: 82:b3:8d:bd:79:f0:bb:17:72:3e:06:05:c1:ed:cf:de:72:16: 5b:11:da:60:58:80:bf:37:27:fa:ed:a8:9b:e5:5e:bd:01:36: 10:80:b0:ad:f4:4d:3b:81:4f:d1:b6:b4:cc:80:75:8b:16:86: 57:59:30:35:89:e9:dc:fc:f1:73:01:06:f1:c0:51:15:1c:05: 87:42:84:bd:e3:23:92:c3:68:d3:90:55:e0:7c:55:1c:1f:c1: 9c:64:41:87:ed:4e:f6:a2:d8:28:e6:da:ab:68:5d:87:98:20: 23:61:e9:95:af:d7:73:32:f0:a9:ec:7e:8d:80:4f:ac:05:e8: e1:d4:56:49:46:57:ff:9c:37:e9:88:5a:7f:fb:8a:d0:07:e1: e5:20:24:33:37:db:cd:65:6a:49:05:85:02:0a:cd:41:6e:97: aa:bd:07:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2xTJnn0UjVEal4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk OTMzMmI3ZWUtMWJmYS00MDNkLWI4ZjAtZGQxNDI1ZDIzMDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAgNMo9xPw4oIrR+q4g6/QFipT0W//ziFJPy 9tjDZ/ljBeGuCTW3xubsp3X23DbUUknZYawu28WPqSFNfvmLBLNANLppE759Aj45 Mi6enY+v7wVIFy9uAOCDWmGpGAGqOB8ALvOhEZoibOQUXecYaRxJkr1ehWkAPXc9 AmZsDXx2aTuYoBoq+6CpQcWSXI7GyncKsytRQFOpyoXQKoCrSBUHQhbuf7ga/ZOA sYclqqJEwUhQagx/NVXuIYNL/xmUAd3PElV506JHEFzcHJ6xPW4KUOV0FZEGY8xo pgwdzDPHEY6rKNNwz2NbLnXxNehDUdt1iZX3CvwkS9bRxc5V6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAT0Y+DkEBncAwg6mI+IUvARVDCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDVjOWM2NWMtZDRjOS0z M2U0LWEyZDAtMWI3NmMxZTdlMGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzUjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIf5ZJUkqKXytkUhCZHx5LgxBqZZGhIkWXPBEvRf7DdxJkZATjRP1QID SJg15h/g5Dr2GsKkaHgPfyJdQTJ2T8mP34m1UqYrdqSRUgJi5NVKBRWRZJtc1x5i 7oKzjb158LsXcj4GBcHtz95yFlsR2mBYgL83J/rtqJvlXr0BNhCAsK30TTuBT9G2 tMyAdYsWhldZMDWJ6dz88XMBBvHAURUcBYdChL3jI5LDaNOQVeB8VRwfwZxkQYft Tvai2Cjm2qtoXYeYICNh6ZWv13My8Knsfo2AT6wF6OHUVklGV/+cN+mIWn/7itAH 4eUgJDM3281lakkFhQIKzUFul6q9By0= -----END CERTIFICATE-----Generated at Sun Jun 29 12:21:38 2025 by rpki-client