$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd4dc9aa-47d6-320f-8155-5ee01af414ad.roa File: fd4dc9aa-47d6-320f-8155-5ee01af414ad.roa (raw, json) Hash identifier: I2uEkI2Zo6mbqt3lOTOHhMz0AEoEjMbrxbPRza3a3ZE= Subject key identifier: B9:A1:CD:F3:D5:00:B1:6F:3F:53:B3:04:70:C0:1A:C8:84:9B:D4:26 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3B7B0F547CFBD9BDD55F6E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd4dc9aa-47d6-320f-8155-5ee01af414ad.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 20940 IP address blocks: 23.43.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:0f:54:7c:fb:d9:bd:d5:5f:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=fb97ec99-f402-40ec-be92-1f38b98eee26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ae:0b:15:b3:5c:72:99:33:b1:33:88:03:99: 14:9c:2c:67:90:60:3b:6a:6d:3a:04:9b:8c:9c:d7: a3:c1:9a:c5:b2:d2:f2:57:83:5b:50:bd:e9:ed:8f: 9c:4f:5d:b0:0d:b2:d7:ce:a4:53:d1:49:9c:2e:78: ca:6d:18:89:36:e2:11:c5:8c:37:97:29:6d:5c:cb: 42:9a:7b:c3:85:ee:df:27:59:90:6a:b7:38:55:ba: e0:fd:59:70:06:7b:d1:02:f5:60:18:73:90:c3:e9: 34:d9:b9:4d:1b:56:8a:10:1a:bc:50:83:2a:42:f1: ca:05:82:27:2a:38:11:0c:3f:3a:98:58:65:ab:09: 30:1c:0b:cb:26:22:6a:73:8a:a2:53:71:0b:cf:10: 90:2d:bf:ab:f2:64:97:ac:e9:82:15:ef:b7:e4:9e: f7:f9:aa:20:7d:98:0b:dd:cd:2a:c3:0d:61:b1:22: 5f:c3:db:86:bd:dc:4c:59:45:4a:70:98:1f:a2:1d: 26:ee:1f:79:6f:0f:26:96:ae:b9:67:00:81:bc:01: 62:92:a2:ca:05:22:d6:25:25:18:4b:79:19:76:12: 33:9e:5b:dc:f7:5c:70:fe:f1:9f:da:84:ec:40:5b: ec:8e:43:9b:45:b8:94:dc:19:ea:a9:4b:10:71:b6: d2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A1:CD:F3:D5:00:B1:6F:3F:53:B3:04:70:C0:1A:C8:84:9B:D4:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd4dc9aa-47d6-320f-8155-5ee01af414ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:16:3c:aa:c5:1b:8c:c2:9f:71:60:b9:51:fd:c2:ae:67:61: 6a:59:1b:94:ea:c0:6c:0c:e8:e1:52:27:bd:13:39:b1:41:ec: 7e:ca:d7:03:42:43:47:a0:cc:11:e5:34:b5:8d:25:82:87:16: be:c8:a2:2f:dd:00:0c:c9:21:5f:0b:92:f3:9f:fa:af:32:a0: 05:19:80:ce:3b:91:d9:ba:d1:c5:ad:31:a5:f3:7c:d8:5d:84: 98:de:bd:e7:6c:34:f7:d3:0b:e0:68:65:7e:14:93:cc:c1:7f: 25:a7:46:ed:61:99:11:7e:85:76:14:4b:8e:c3:7d:41:26:70: 47:ad:ac:fb:f3:24:9d:a4:0c:c8:c3:52:ee:e2:ca:5a:bd:96: 81:ae:e9:a0:92:5b:e7:6e:52:84:86:d6:e6:ee:c1:46:e6:b1: 3e:75:96:15:92:5f:91:ce:22:5b:6c:c7:c6:d2:3b:c7:b9:bd: 31:1c:bd:2f:74:bc:5d:f1:35:e4:d8:4b:6b:17:95:10:7a:fd: 52:c3:e1:03:dd:26:3e:60:72:44:9f:43:49:40:c9:19:c6:e2: 39:b5:3f:49:e0:28:d9:cc:ad:9b:50:60:57:0e:a2:03:cc:67: 0f:e7:66:ba:8d:ae:cd:6f:48:db:e3:14:7e:a5:81:72:93:2b: 1f:fd:d4:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ew9UfPvZvdVfboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk ZmI5N2VjOTktZjQwMi00MGVjLWJlOTItMWYzOGI5OGVlZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK4LFbNccpkzsTOIA5kUnCxnkGA7am06BJuM nNejwZrFstLyV4NbUL3p7Y+cT12wDbLXzqRT0UmcLnjKbRiJNuIRxYw3lyltXMtC mnvDhe7fJ1mQarc4Vbrg/VlwBnvRAvVgGHOQw+k02blNG1aKEBq8UIMqQvHKBYIn KjgRDD86mFhlqwkwHAvLJiJqc4qiU3ELzxCQLb+r8mSXrOmCFe+35J73+aogfZgL 3c0qww1hsSJfw9uGvdxMWUVKcJgfoh0m7h95bw8mlq65ZwCBvAFikqLKBSLWJSUY S3kZdhIznlvc91xw/vGf2oTsQFvsjkObRbiU3BnqqUsQcbbScwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmhzfPVALFvP1OzBHDAGsiEm9QmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmQ0ZGM5YWEtNDdkNi0z MjBmLTgxNTUtNWVlMDFhZjQxNGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyt6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgWPKrFG4zCn3FguVH9wq5nYWpZG5TqwGwM6OFSJ70TObFB7H7K1wNC Q0egzBHlNLWNJYKHFr7Ioi/dAAzJIV8LkvOf+q8yoAUZgM47kdm60cWtMaXzfNhd hJjevedsNPfTC+BoZX4Uk8zBfyWnRu1hmRF+hXYUS47DfUEmcEetrPvzJJ2kDMjD Uu7iylq9loGu6aCSW+duUoSG1ubuwUbmsT51lhWSX5HOIltsx8bSO8e5vTEcvS90 vF3xNeTYS2sXlRB6/VLD4QPdJj5gckSfQ0lAyRnG4jm1P0ngKNnMrZtQYFcOogPM Zw/nZrqNrs1vSNvjFH6lgXKTKx/91Hk= -----END CERTIFICATE-----Generated at Sun Jun 29 13:57:14 2025 by rpki-client