$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df7618c4-a67a-3f97-a105-2e8136fb0dad.roa File: df7618c4-a67a-3f97-a105-2e8136fb0dad.roa (raw, json) Hash identifier: EaLcO8Rb/00otUbfAQ+hxaJXrF9IWoXEE4bY3ALY8cg= Subject key identifier: 2A:70:B2:04:EA:C6:BC:50:6F:A5:E5:75:AF:D2:4A:56:A4:4A:0E:92 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A43DB2FF6FDD22970EB094680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df7618c4-a67a-3f97-a105-2e8136fb0dad.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 45899 IP address blocks: 23.53.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:2f:f6:fd:d2:29:70:eb:09:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=b125592e-a63a-4688-8f1a-c514f6725339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a6:47:3e:db:c2:45:c4:3e:3d:e9:ef:d8:70: e9:e3:ab:35:6d:dd:85:51:70:60:c6:8b:07:de:a8: 6f:f4:56:61:38:1d:70:b3:13:52:0b:b0:a7:93:81: 8f:e1:c3:46:14:db:70:73:2c:75:7a:86:c0:45:c3: c1:48:8d:b7:d0:d0:82:9a:c6:e8:e6:e0:4f:f3:10: 0f:56:13:5b:f3:ba:c9:ec:b3:fc:ac:ec:3a:e8:60: b4:ce:51:3a:e0:8e:b5:26:c9:25:cb:08:66:92:cf: 13:18:1b:bb:87:12:30:35:14:56:fa:ab:94:ae:2f: 11:64:61:b3:2b:f2:d7:c3:fd:b2:12:b4:1b:f4:94: 82:ab:9b:9e:12:a7:c3:95:88:91:53:99:00:f2:7d: 20:cb:82:8a:ba:47:9e:05:b1:eb:a8:b1:38:4b:0f: e5:c7:30:c2:62:8f:e9:f0:8f:5b:60:23:bc:14:65: bd:f0:1d:e4:09:9e:87:b6:ca:d3:e2:ea:ef:9b:32: 8a:c6:d4:6e:d1:b7:4d:f5:d0:21:12:31:ea:fa:a1: e4:ee:14:77:9e:6b:d0:1b:b4:59:d7:52:9a:81:c6: 47:4a:8e:ad:f9:19:0c:a4:21:e4:25:a4:82:20:51: 7f:28:fa:5b:8a:47:19:3a:3b:eb:ef:6e:58:92:89: cb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:70:B2:04:EA:C6:BC:50:6F:A5:E5:75:AF:D2:4A:56:A4:4A:0E:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df7618c4-a67a-3f97-a105-2e8136fb0dad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:fa:a7:58:18:61:a4:02:8a:cf:2c:b6:12:fd:7a:d6:16:bf: cd:13:b3:34:53:74:fe:db:2f:6b:e4:68:d9:43:c9:ef:88:9e: cd:36:c9:06:37:a1:a0:54:70:77:93:40:90:b0:74:0d:9d:5c: ce:e7:c5:9e:cd:09:6b:71:f2:ab:15:64:82:40:44:7b:b1:97: 94:f9:d0:1f:c9:50:e4:f7:0d:88:ba:20:09:24:bd:58:87:4c: e4:0d:da:e8:5a:e4:ae:1e:18:20:59:b7:dd:7d:1f:c0:fb:42: d1:38:c2:80:db:7c:00:07:2c:96:82:14:9b:26:7a:94:8e:48: 71:e7:a7:e7:c0:f9:3d:ef:7b:df:6e:94:c9:43:57:34:01:09: 26:ad:90:73:24:0b:16:d7:c5:3f:4f:c8:85:99:3f:db:02:b1: c7:b7:06:f1:f9:e9:11:31:a5:49:98:d4:19:fa:ca:46:ce:b7: f8:f9:b5:63:9d:69:74:86:0b:54:3d:0a:99:93:34:e1:e0:31: 9e:38:77:5e:ea:ae:f5:c3:ee:68:e4:81:ab:0c:a8:ae:6a:5f: 6b:84:0b:1f:2d:e1:fe:18:c4:2e:4c:e0:ec:e4:a8:03:41:36: 01:4a:3a:0e:7e:68:ef:f1:5e:e8:ec:20:26:e4:80:9c:66:47: ab:f2:54:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2y/2/dIpcOsJRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk YjEyNTU5MmUtYTYzYS00Njg4LThmMWEtYzUxNGY2NzI1MzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKZHPtvCRcQ+Penv2HDp46s1bd2FUXBgxosH 3qhv9FZhOB1wsxNSC7Cnk4GP4cNGFNtwcyx1eobARcPBSI230NCCmsbo5uBP8xAP VhNb87rJ7LP8rOw66GC0zlE64I61Jsklywhmks8TGBu7hxIwNRRW+quUri8RZGGz K/LXw/2yErQb9JSCq5ueEqfDlYiRU5kA8n0gy4KKukeeBbHrqLE4Sw/lxzDCYo/p 8I9bYCO8FGW98B3kCZ6HtsrT4urvmzKKxtRu0bdN9dAhEjHq+qHk7hR3nmvQG7RZ 11KagcZHSo6t+RkMpCHkJaSCIFF/KPpbikcZOjvr725YkonL4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpwsgTqxrxQb6Xlda/SSlakSg6SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGY3NjE4YzQtYTY3YS0z Zjk3LWExMDUtMmU4MTM2ZmIwZGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJf6p1gYYaQCis8sthL9etYWv80TszRTdP7bL2vkaNlDye+Ins02yQY3 oaBUcHeTQJCwdA2dXM7nxZ7NCWtx8qsVZIJARHuxl5T50B/JUOT3DYi6IAkkvViH TOQN2uha5K4eGCBZt919H8D7QtE4woDbfAAHLJaCFJsmepSOSHHnp+fA+T3ve99u lMlDVzQBCSatkHMkCxbXxT9PyIWZP9sCsce3BvH56RExpUmY1Bn6ykbOt/j5tWOd aXSGC1Q9CpmTNOHgMZ44d17qrvXD7mjkgasMqK5qX2uECx8t4f4YxC5M4OzkqANB NgFKOg5+aO/xXujsICbkgJxmR6vyVII= -----END CERTIFICATE-----Generated at Sun Jun 29 14:05:47 2025 by rpki-client