$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d89b5b40-79a8-3ffa-acc4-24480d48e0c3.roa File: d89b5b40-79a8-3ffa-acc4-24480d48e0c3.roa (raw, json) Hash identifier: G/o/nzekmG7COzOn5UX/n99G+vAWuwn5+7rjWjyPQqM= Subject key identifier: 21:46:76:F3:71:A4:F1:C7:E5:39:9C:F2:DF:29:FE:69:56:75:05:60 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4C3B32D266188C547B122940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d89b5b40-79a8-3ffa-acc4-24480d48e0c3.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 16625 IP address blocks: 23.56.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:32:d2:66:18:8c:54:7b:12:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=1bc33325-fe57-4ee0-a4cf-5512cadc5469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:17:84:33:47:b0:8a:ff:a7:df:78:4e:e4:b3: 14:bf:9f:33:e2:f8:a3:c3:00:36:16:8f:f8:8d:6c: 39:39:fc:b2:ce:7b:97:ae:c0:e7:0c:c2:52:f0:77: 25:66:fe:71:ec:7c:6b:d0:55:ca:29:6a:e5:c3:54: d9:2b:7f:b8:af:f9:b7:48:40:70:0b:59:48:70:2f: dd:c8:91:24:8b:67:7b:c7:86:56:a8:59:9a:0c:28: b3:26:3a:9f:5a:14:9c:ba:8d:84:0a:f3:00:68:f2: 71:40:f5:d7:22:4d:e3:1b:89:0a:b3:04:96:37:55: e4:7b:85:38:b6:b9:be:d4:20:e9:9b:ec:0b:4a:50: 17:c7:a0:6a:e5:76:fe:ff:ee:e5:d5:a3:08:3d:85: 78:07:23:77:3a:ed:5b:ac:58:f0:ac:2c:e6:15:f2: 2e:d6:2a:08:99:06:21:84:ff:75:c3:c9:7a:6a:12: 54:62:8f:19:4d:4c:d8:0c:01:ea:74:88:2f:64:e7: 8c:17:af:07:33:29:8e:85:aa:88:c0:3d:ee:e6:12: 5a:23:69:d8:63:fa:07:90:ba:09:1d:fb:46:9e:61: b3:b0:c6:4b:76:75:f5:c3:0b:1e:02:f2:71:ea:79: ea:e2:15:56:12:69:21:62:af:55:23:dc:72:a0:7d: 2d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:46:76:F3:71:A4:F1:C7:E5:39:9C:F2:DF:29:FE:69:56:75:05:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d89b5b40-79a8-3ffa-acc4-24480d48e0c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.56.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:c7:14:3d:f7:f0:17:ea:07:92:cd:89:58:7c:65:d6:23:90: 35:a1:72:4e:a3:6e:75:41:1f:dc:f1:56:6b:77:fe:f5:70:db: 34:91:93:49:97:92:d0:a7:49:65:90:ac:ff:9d:83:d0:67:e0: bc:a0:15:44:65:64:d4:57:3d:57:a5:0a:af:13:23:12:c6:e1: 6a:b2:7e:f8:25:fb:ea:67:fd:6d:58:81:8d:26:31:d6:68:1f: 1c:65:10:4e:bd:8f:6c:06:34:70:7d:9d:b7:59:8b:b7:97:31: 86:9d:79:cf:7c:e5:31:4d:03:18:6b:13:78:ff:a5:61:34:67: da:ec:c1:ee:f6:86:b2:ea:97:e2:6e:c4:2a:dc:93:0a:46:ca: fc:77:39:a4:43:2e:c1:c8:c7:cc:a9:1a:01:0c:f4:9d:d2:f1: 0d:c5:ce:42:42:d2:89:73:96:f3:1a:28:c4:36:47:f2:31:88: 84:d4:f1:a4:0e:1d:af:78:4a:7d:be:11:f0:d6:72:17:e1:99: 3a:5e:3f:14:52:a7:58:36:01:c7:b5:41:18:09:a2:9f:e9:32: a9:a2:98:24:65:4b:35:97:85:39:31:d9:36:54:c9:68:15:c0: 82:f2:6d:54:ac:a6:11:2a:a2:29:90:ca:07:1e:7f:ca:47:f5: ef:59:0e:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOzLSZhiMVHsSKUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk MWJjMzMzMjUtZmU1Ny00ZWUwLWE0Y2YtNTUxMmNhZGM1NDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxeEM0ewiv+n33hO5LMUv58z4vijwwA2Fo/4 jWw5OfyyznuXrsDnDMJS8HclZv5x7Hxr0FXKKWrlw1TZK3+4r/m3SEBwC1lIcC/d yJEki2d7x4ZWqFmaDCizJjqfWhScuo2ECvMAaPJxQPXXIk3jG4kKswSWN1Xke4U4 trm+1CDpm+wLSlAXx6Bq5Xb+/+7l1aMIPYV4ByN3Ou1brFjwrCzmFfIu1ioImQYh hP91w8l6ahJUYo8ZTUzYDAHqdIgvZOeMF68HMymOhaqIwD3u5hJaI2nYY/oHkLoJ HftGnmGzsMZLdnX1wwseAvJx6nnq4hVWEmkhYq9VI9xyoH0tSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFGdvNxpPHH5Tmc8t8p/mlWdQVgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDg5YjViNDAtNzlhOC0z ZmZhLWFjYzQtMjQ0ODBkNDhlMGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPHFD338BfqB5LNiVh8ZdYjkDWhck6jbnVBH9zxVmt3/vVw2zSRk0mX ktCnSWWQrP+dg9Bn4LygFURlZNRXPVelCq8TIxLG4Wqyfvgl++pn/W1YgY0mMdZo HxxlEE69j2wGNHB9nbdZi7eXMYadec985TFNAxhrE3j/pWE0Z9rswe72hrLql+Ju xCrckwpGyvx3OaRDLsHIx8ypGgEM9J3S8Q3FzkJC0olzlvMaKMQ2R/IxiITU8aQO Ha94Sn2+EfDWchfhmTpePxRSp1g2Ace1QRgJop/pMqmimCRlSzWXhTkx2TZUyWgV wILybVSsphEqoimQygcef8pH9e9ZDuM= -----END CERTIFICATE-----Generated at Sun Jun 29 14:13:22 2025 by rpki-client