$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e908a01d-5b97-39cb-8e3e-bcd369d72f1a.roa File: e908a01d-5b97-39cb-8e3e-bcd369d72f1a.roa (raw, json) Hash identifier: aM5rWnYccbawD9Io0xQ4JwqCGEQpP/lBFx6/kYk40as= Subject key identifier: B7:48:08:F7:85:C6:BA:A4:79:A4:9E:0B:83:A0:75:82:70:7E:3B:6F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3E4594F017FC979025B83800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e908a01d-5b97-39cb-8e3e-bcd369d72f1a.roa Signing time: Thu 19 Jun 2025 13:01:02 +0000 ROA not before: Thu 19 Jun 2025 13:01:02 +0000 ROA not after: Wed 17 Sep 2025 13:01:02 +0000 asID: 20940 IP address blocks: 23.209.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:45:94:f0:17:fc:97:90:25:b8:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 19 13:01:02 2025 GMT Not After : Sep 17 13:01:02 2025 GMT Subject: CN=18fbfa42-cab7-4658-befa-7bb5a2229eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7e:4a:2b:b5:d2:63:ec:45:cf:6d:22:1c:1e: 67:43:d0:25:11:07:61:e9:ca:c2:ca:6b:bf:7b:d7: ce:1d:cd:e7:f8:08:04:1f:8a:d0:11:dd:be:4e:72: cf:46:57:03:65:ef:e7:df:5e:a9:82:5b:cb:07:7e: 43:9a:55:38:63:b4:83:69:79:91:1b:2a:42:3c:63: 63:b5:85:da:35:77:41:9a:e0:9d:e7:b3:b7:b9:68: 7d:b7:1c:ff:b0:f3:b4:a7:4b:9e:b8:71:2a:58:dc: e5:92:31:71:3f:99:42:d1:30:6e:a4:a4:34:b2:c2: e0:a7:98:c5:b3:ce:1b:76:21:f8:ce:05:31:c0:57: 82:0b:18:a0:50:bf:06:2f:28:3c:fa:51:75:b4:ac: 1c:42:cd:07:95:a5:a8:f8:49:9d:19:88:2f:56:89: a4:a0:07:4b:e0:ef:0e:cf:cb:48:7d:e8:29:fe:42: f4:bf:e2:cd:65:31:27:bb:cb:dc:e9:cf:bf:ee:76: a3:e8:99:d1:f1:4d:af:e1:8e:de:8b:81:8e:c1:71: af:60:b8:be:8f:ef:94:cd:c4:94:81:15:c5:e5:e9: 3d:36:d3:c6:98:9d:bd:85:4a:b5:36:4d:ac:a7:b6: c3:b9:59:13:32:9d:e2:35:fe:47:f3:46:7c:82:42: 25:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:48:08:F7:85:C6:BA:A4:79:A4:9E:0B:83:A0:75:82:70:7E:3B:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e908a01d-5b97-39cb-8e3e-bcd369d72f1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:e9:da:39:ef:ac:ef:34:d6:3a:a0:7f:7e:49:a4:8b:8f:7f: ba:7d:1f:d3:1d:9b:7c:01:cf:39:46:a3:4b:80:19:90:b1:1b: 94:62:68:74:bf:61:6f:b3:5f:af:aa:bb:0b:f8:7b:6a:dc:94: dc:19:57:79:c5:02:27:3c:b8:56:95:a1:c7:e1:ee:56:72:ec: 52:3a:ef:c0:d7:a1:df:e9:02:85:d8:81:b8:d3:8d:77:9a:7b: 02:45:dd:44:50:b1:d7:06:3f:c4:9f:cf:e4:ab:fb:26:c5:24: b7:19:59:38:fc:7d:bf:0e:31:d3:0d:9b:0b:75:74:ba:0e:ab: af:53:3a:10:59:52:7b:7e:f2:10:6f:0f:71:31:1f:08:63:41: a1:8a:0b:aa:96:b5:bf:00:db:df:ad:66:67:ef:46:46:23:a1: 6a:f7:a5:c6:87:b7:f3:49:03:ad:af:08:dc:55:77:41:14:40: 19:86:cb:69:42:b8:7a:8f:c3:42:c2:a3:63:4a:de:37:46:d8: 8b:98:2b:28:cf:bc:f2:10:bc:1b:c5:b8:ef:9a:d0:16:b0:e4: 7d:d3:87:df:44:c8:48:5a:3d:f5:fa:bc:64:16:c3:b0:4e:96: fc:63:c9:1d:8c:6a:51:6a:57:9f:2f:5d:1e:51:91:3c:6a:6f: 5b:d4:13:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+RZTwF/yXkCW4OAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk MThmYmZhNDItY2FiNy00NjU4LWJlZmEtN2JiNWEyMjI5ZWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh35KK7XSY+xFz20iHB5nQ9AlEQdh6crCymu/ e9fOHc3n+AgEH4rQEd2+TnLPRlcDZe/n316pglvLB35DmlU4Y7SDaXmRGypCPGNj tYXaNXdBmuCd57O3uWh9txz/sPO0p0ueuHEqWNzlkjFxP5lC0TBupKQ0ssLgp5jF s84bdiH4zgUxwFeCCxigUL8GLyg8+lF1tKwcQs0HlaWo+EmdGYgvVomkoAdL4O8O z8tIfegp/kL0v+LNZTEnu8vc6c+/7naj6JnR8U2v4Y7ei4GOwXGvYLi+j++UzcSU gRXF5ek9NtPGmJ29hUq1Nk2sp7bDuVkTMp3iNf5H80Z8gkIlywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdICPeFxrqkeaSeC4OgdYJwfjtvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTkwOGEwMWQtNWI5Ny0z OWNiLThlM2UtYmNkMzY5ZDcyZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9FeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrp2jnvrO801jqgf35JpIuPf7p9H9Mdm3wBzzlGo0uAGZCxG5RiaHS/ YW+zX6+quwv4e2rclNwZV3nFAic8uFaVocfh7lZy7FI678DXod/pAoXYgbjTjXea ewJF3URQsdcGP8Sfz+Sr+ybFJLcZWTj8fb8OMdMNmwt1dLoOq69TOhBZUnt+8hBv D3ExHwhjQaGKC6qWtb8A29+tZmfvRkYjoWr3pcaHt/NJA62vCNxVd0EUQBmGy2lC uHqPw0LCo2NK3jdG2IuYKyjPvPIQvBvFuO+a0Baw5H3Th99EyEhaPfX6vGQWw7BO lvxjyR2MalFqV58vXR5RkTxqb1vUE0w= -----END CERTIFICATE-----Generated at Sun Jun 29 13:36:25 2025 by rpki-client