$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01f177ed-7d34-313d-99c2-608e9fbe6cf5.roa File: 01f177ed-7d34-313d-99c2-608e9fbe6cf5.roa (raw, json) Hash identifier: t+Qgf5AavvOjPfRjY7tIG6xiVxBwmraxR1GmqRu1+DQ= Subject key identifier: 1E:21:68:80:16:69:73:FB:FD:16:73:66:29:C8:57:77:CF:E0:BF:8E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A682639F5A935F5AD29521C08 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01f177ed-7d34-313d-99c2-608e9fbe6cf5.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 20940 IP address blocks: 23.202.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:39:f5:a9:35:f5:ad:29:52:1c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=da4cd066-05bb-4db6-b931-91edb3bc3bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3f:8f:8a:4f:d0:2d:1a:38:d8:c8:e0:f3:5c: 36:d5:8b:fb:83:f0:03:99:62:2e:81:46:65:81:59: 61:0a:c3:f0:06:6e:61:6f:23:5e:27:c6:6f:6d:03: fa:bc:b8:12:1c:6a:f3:4d:12:29:3d:05:fb:a6:5b: 4f:b3:34:dd:00:7c:50:80:54:66:3a:7c:63:f4:7d: c6:2c:76:6f:4e:6e:26:ba:96:bb:1d:e2:95:96:5a: ce:3a:ae:ab:59:31:8c:bf:49:59:7c:c1:32:ca:fd: 0b:b0:d4:99:fe:dd:00:a8:cc:41:fa:49:df:13:8a: 4c:c5:82:09:a7:59:f5:13:ad:d1:c9:67:f4:00:d0: b1:b6:0d:16:6d:ed:c1:bf:66:0a:35:35:a7:a6:ec: f6:08:d5:e6:f9:ba:41:81:3c:bd:77:79:6f:65:6a: f4:58:0e:f5:4b:7a:8b:c1:12:45:e9:71:f8:e2:88: 4c:30:f6:13:42:e9:87:78:c8:c9:01:46:0f:85:2d: 7b:f7:80:37:eb:d9:1f:e8:69:28:02:82:03:8a:d2: d4:11:3b:21:d6:d0:40:d6:90:3d:3c:d4:cc:17:79: 51:55:e3:da:18:3e:d1:b6:37:70:0c:9d:e6:71:5c: 4d:41:07:13:c2:93:34:22:0a:45:4a:b8:be:08:b1: 47:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:21:68:80:16:69:73:FB:FD:16:73:66:29:C8:57:77:CF:E0:BF:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01f177ed-7d34-313d-99c2-608e9fbe6cf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:2f:71:aa:a0:d5:c2:46:80:12:1a:05:eb:5c:2f:d2:7d:56: 5e:a4:c6:8c:69:2c:2c:b9:3f:1e:4a:d6:8d:d3:e2:b8:90:aa: b9:2a:2f:44:31:92:17:03:27:77:71:24:4b:a6:ff:7c:cd:24: fa:7e:d9:85:87:cf:25:c5:91:fe:ed:32:98:56:56:72:d6:20: 45:e7:94:aa:8d:7d:4c:03:8b:e2:12:76:53:37:9d:51:2f:66: 20:13:b8:e1:85:1d:b5:92:0d:8c:38:06:95:b5:85:c4:f9:6f: ab:1f:b5:6a:9e:f1:6d:09:01:e8:0c:ed:25:5a:40:bc:5a:ce: d3:fc:9f:7a:7c:4b:8e:2d:b7:d1:bc:69:cc:06:bc:e9:3d:a5: 27:30:ba:20:e1:a9:51:f8:63:de:27:81:dc:37:15:99:38:9e: d4:d1:40:29:44:f1:cc:c4:5c:98:6c:a7:49:d1:79:20:7a:5d: 0d:9f:1a:ca:bf:d8:57:2b:0c:d0:7f:57:48:05:6f:14:12:7c: 41:b0:d6:3c:9d:e9:5d:fa:c8:fe:c4:11:af:78:7f:19:64:35: 27:a7:c6:9e:35:02:c2:64:b9:6e:35:87:00:0a:48:e8:3d:51: 45:7c:68:b7:26:ad:c4:a3:bb:7d:42:c9:c1:06:eb:e2:e7:bb: 93:b2:59:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJjn1qTX1rSlSHAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk ZGE0Y2QwNjYtMDViYi00ZGI2LWI5MzEtOTFlZGIzYmMzYmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz+Pik/QLRo42Mjg81w21Yv7g/ADmWIugUZl gVlhCsPwBm5hbyNeJ8ZvbQP6vLgSHGrzTRIpPQX7pltPszTdAHxQgFRmOnxj9H3G LHZvTm4mupa7HeKVllrOOq6rWTGMv0lZfMEyyv0LsNSZ/t0AqMxB+knfE4pMxYIJ p1n1E63RyWf0ANCxtg0Wbe3Bv2YKNTWnpuz2CNXm+bpBgTy9d3lvZWr0WA71S3qL wRJF6XH44ohMMPYTQumHeMjJAUYPhS1794A369kf6GkoAoIDitLUETsh1tBA1pA9 PNTMF3lRVePaGD7RtjdwDJ3mcVxNQQcTwpM0IgpFSri+CLFHjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4haIAWaXP7/RZzZinIV3fP4L+OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDFmMTc3ZWQtN2QzNC0z MTNkLTk5YzItNjA4ZTlmYmU2Y2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8pbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8vcaqg1cJGgBIaBetcL9J9Vl6kxoxpLCy5Px5K1o3T4riQqrkqL0Qx khcDJ3dxJEum/3zNJPp+2YWHzyXFkf7tMphWVnLWIEXnlKqNfUwDi+ISdlM3nVEv ZiATuOGFHbWSDYw4BpW1hcT5b6sftWqe8W0JAegM7SVaQLxaztP8n3p8S44tt9G8 acwGvOk9pScwuiDhqVH4Y94ngdw3FZk4ntTRQClE8czEXJhsp0nReSB6XQ2fGsq/ 2FcrDNB/V0gFbxQSfEGw1jyd6V36yP7EEa94fxlkNSenxp41AsJkuW41hwAKSOg9 UUV8aLcmrcSju31CycEG6+Lnu5OyWbo= -----END CERTIFICATE-----Generated at Wed Jul 23 01:38:57 2025 by rpki-client