$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f72485a7-156e-3e25-88a5-4641584bf53f.roa File: f72485a7-156e-3e25-88a5-4641584bf53f.roa (raw, json) Hash identifier: A9ohLQ1GOf2AUw9GoV9OEn6haxoBoZ7feBEhAxqghwo= Subject key identifier: 0B:6F:BE:47:DB:6E:29:B9:89:3B:08:AD:5E:47:F4:4C:58:6A:31:CC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4F05E20A44701796597D7CC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f72485a7-156e-3e25-88a5-4641584bf53f.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.197.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:e2:0a:44:70:17:96:59:7d:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=4e9efab9-cff3-4301-a8d9-04d6cd6f0352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:71:07:da:4d:ee:e0:d7:f8:17:a3:bf:b3:79: 8c:1e:99:d8:69:c8:1e:a8:60:18:5b:3b:01:56:0d: 13:e6:ce:20:9a:45:cf:8b:74:05:4f:dd:49:07:11: 7c:d0:25:8c:3b:42:18:4e:d9:64:1f:50:a0:b6:11: c7:1a:45:39:f3:ab:10:fa:8b:78:54:f1:08:1f:73: b8:21:ce:cb:e9:2f:87:7b:c2:4a:e7:63:49:bd:67: 98:3d:54:44:a9:d3:56:f8:0f:8e:d4:9b:8b:f5:51: 61:dc:89:c7:9a:88:e9:48:1d:f6:2e:b5:a2:c1:b0: d0:78:15:f3:0a:3d:20:e1:42:96:3e:1f:ef:73:07: e0:c8:d3:c3:d6:7a:c0:99:fe:6a:f3:f0:eb:1a:8f: fc:e8:71:38:b7:48:97:62:ba:13:1d:64:7f:a1:b6: 47:76:a4:72:26:38:7a:66:c3:39:4d:9c:27:0b:78: 34:74:bc:b3:f6:5f:f9:af:9e:a6:5c:00:39:04:5e: aa:fa:c0:58:e2:ec:c2:f8:01:16:1b:e5:66:78:9f: cb:23:c5:92:79:ce:6b:32:e7:9f:e3:3b:30:4d:d0: ad:9d:42:74:22:54:94:5a:ef:04:ff:e2:85:fd:fb: 0a:84:f0:6e:fd:df:f6:af:a1:87:9c:d9:af:80:1a: d8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6F:BE:47:DB:6E:29:B9:89:3B:08:AD:5E:47:F4:4C:58:6A:31:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f72485a7-156e-3e25-88a5-4641584bf53f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:9d:b1:ae:21:89:91:98:b8:51:08:9f:b9:a7:cd:08:5d:fb: 5d:c5:c4:1a:33:3b:e7:4d:81:f3:4e:77:e0:ac:d5:56:67:a5: bd:67:b5:91:6b:4c:5d:41:44:ef:63:3b:f4:bc:9e:ef:db:bd: b5:9c:74:72:64:9e:33:6b:e7:df:6c:05:f6:e4:e6:05:f6:40: 8b:98:ad:88:14:d6:04:52:88:19:bc:cd:f7:fe:18:fc:fa:31: 6b:71:e8:4d:ae:2b:ca:12:a2:99:c5:4b:3b:18:04:6f:06:4f: 4a:64:3a:a1:99:23:3e:49:e8:db:57:d0:a1:79:20:52:0d:a7: 3b:bd:f3:15:59:71:e8:90:da:36:39:21:56:47:e7:ba:4a:24: 74:6c:82:e3:31:31:05:4d:36:8a:07:89:59:ba:8b:e5:88:b4: 78:1d:29:72:d8:d5:9d:c9:c2:cb:4a:f8:3c:49:bf:4e:5c:c8: e2:b6:2b:b7:e9:85:05:c1:e9:aa:a5:8f:09:4e:e2:cc:4d:d5: 67:27:99:56:97:5c:c9:d1:93:a1:4a:cd:4f:f1:ab:79:83:4a: 09:62:3b:91:5e:aa:8a:ef:c8:d9:f1:1b:84:4b:fb:5a:b2:ae: e4:c3:bf:9f:0e:db:d5:4f:a6:a0:75:93:46:2f:50:d5:8d:78: 09:ac:3f:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBeIKRHAXlll9fMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk NGU5ZWZhYjktY2ZmMy00MzAxLWE4ZDktMDRkNmNkNmYwMzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXEH2k3u4Nf4F6O/s3mMHpnYacgeqGAYWzsB Vg0T5s4gmkXPi3QFT91JBxF80CWMO0IYTtlkH1CgthHHGkU586sQ+ot4VPEIH3O4 Ic7L6S+He8JK52NJvWeYPVREqdNW+A+O1JuL9VFh3InHmojpSB32LrWiwbDQeBXz Cj0g4UKWPh/vcwfgyNPD1nrAmf5q8/DrGo/86HE4t0iXYroTHWR/obZHdqRyJjh6 ZsM5TZwnC3g0dLyz9l/5r56mXAA5BF6q+sBY4uzC+AEWG+VmeJ/LI8WSec5rMuef 4zswTdCtnUJ0IlSUWu8E/+KF/fsKhPBu/d/2r6GHnNmvgBrYswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtvvkfbbim5iTsIrV5H9ExYajHMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjcyNDg1YTctMTU2ZS0z ZTI1LTg4YTUtNDY0MTU4NGJmNTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8VDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWdsa4hiZGYuFEIn7mnzQhd+13FxBozO+dNgfNOd+Cs1VZnpb1ntZFr TF1BRO9jO/S8nu/bvbWcdHJknjNr599sBfbk5gX2QIuYrYgU1gRSiBm8zff+GPz6 MWtx6E2uK8oSopnFSzsYBG8GT0pkOqGZIz5J6NtX0KF5IFINpzu98xVZceiQ2jY5 IVZH57pKJHRsguMxMQVNNooHiVm6i+WItHgdKXLY1Z3JwstK+DxJv05cyOK2K7fp hQXB6aqljwlO4sxN1WcnmVaXXMnRk6FKzU/xq3mDSgliO5FeqorvyNnxG4RL+1qy ruTDv58O29VPpqB1k0YvUNWNeAmsP9A= -----END CERTIFICATE-----Generated at Sun Jun 29 14:23:51 2025 by rpki-client