$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43df64f3-db22-3339-86ed-4c41a39fb6ce.roa File: 43df64f3-db22-3339-86ed-4c41a39fb6ce.roa (raw, json) Hash identifier: ODloRlneknMx9AZXVJ8Xd3zvEeZOl+4WuDRd55u8vX8= Subject key identifier: 7F:79:81:5F:18:D2:DE:66:55:8A:B6:E4:44:CC:AF:5E:B1:2D:4A:F1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A6290B6D94CDB4DF2CA1EAD00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43df64f3-db22-3339-86ed-4c41a39fb6ce.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16625 IP address blocks: 23.194.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:b6:d9:4c:db:4d:f2:ca:1e:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=ada42a94-11f4-48c4-88a6-b091363cf91e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3d:8e:97:06:d9:2b:7c:a7:b9:72:ff:13:4d: 5b:f4:5f:af:57:7d:28:ff:9f:e0:0c:ef:95:7b:fb: 95:4e:10:1d:df:af:d5:0f:51:ac:ab:38:b5:f5:48: 1e:4d:b7:fa:dc:37:f8:99:41:23:26:58:4d:45:c0: 7d:72:3c:42:13:9d:78:64:29:cd:31:2e:17:f9:fe: ce:d8:a0:98:a5:de:06:f3:63:c4:b9:63:8c:f0:95: 00:7d:9b:da:e4:82:49:77:e9:40:9d:ad:06:cc:2e: 02:9a:b4:25:a6:16:c9:75:ba:68:b4:4e:dc:22:05: 92:be:7a:7d:ad:7d:94:a6:2b:a1:30:d2:32:a4:db: c5:61:2e:5b:06:52:e1:b1:17:fc:da:8f:38:c3:87: 7f:1c:81:c6:aa:19:e6:12:06:f6:f7:cd:ab:6d:83: 01:19:20:63:48:73:89:e6:a8:2f:6b:1f:ad:14:d2: ac:1f:26:9a:ed:7a:8a:93:4e:81:09:0a:b3:99:86: 1d:cd:7f:76:61:67:a1:06:b4:0a:e4:54:29:66:84: 1f:25:24:6c:c1:b4:49:1d:de:69:eb:04:89:f7:9b: da:6f:f5:33:ff:8e:23:84:92:59:ca:24:25:28:1b: da:f5:b0:11:dd:2e:11:a4:37:e7:c4:c6:9e:e1:53: 78:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:79:81:5F:18:D2:DE:66:55:8A:B6:E4:44:CC:AF:5E:B1:2D:4A:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43df64f3-db22-3339-86ed-4c41a39fb6ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.194.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:66:7f:0b:b3:a0:dc:24:63:c6:58:38:5b:23:10:1c:d1:aa: 28:eb:57:a8:0a:99:8a:12:b0:d5:30:1f:38:15:54:38:03:2b: 68:c1:fa:b7:81:ad:8e:18:29:0f:74:cd:9b:8a:1a:30:10:11: 0b:7b:34:33:36:75:78:6e:e6:10:9c:ab:be:e9:77:2d:04:40: ba:12:e1:32:07:b2:a3:f7:e1:74:5b:a0:f7:78:8f:33:ec:32: 15:29:ba:70:51:71:96:6b:42:41:cc:ea:83:9d:32:b8:ad:67: 12:b8:55:52:0b:b0:7c:a3:40:88:01:d8:bd:6e:8b:85:ff:87: cc:c0:de:c1:3e:5a:17:c6:62:56:a3:2e:ce:77:f6:68:63:af: de:32:ff:31:84:2c:44:ae:39:eb:ec:38:35:8c:a3:b9:29:56: 0d:db:7d:cb:be:f5:03:e0:53:a6:a4:e5:17:f3:ee:96:f2:f5: a4:5c:98:d5:72:f6:8d:2b:82:b7:81:93:13:54:b1:dc:19:41: 5a:34:b7:73:ce:6d:b0:38:b5:c5:a6:c0:dc:c7:a5:44:7e:1f: 7c:46:4c:5d:73:4d:59:1b:7c:65:95:6d:b8:d6:66:e6:66:eb: 44:b3:bc:a5:47:ca:e0:f0:7c:1a:3e:6b:a2:a3:ec:33:99:3e: 90:ec:bf:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikLbZTNtN8soerQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk YWRhNDJhOTQtMTFmNC00OGM0LTg4YTYtYjA5MTM2M2NmOTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6j2OlwbZK3ynuXL/E01b9F+vV30o/5/gDO+V e/uVThAd36/VD1Gsqzi19UgeTbf63Df4mUEjJlhNRcB9cjxCE514ZCnNMS4X+f7O 2KCYpd4G82PEuWOM8JUAfZva5IJJd+lAna0GzC4CmrQlphbJdbpotE7cIgWSvnp9 rX2UpiuhMNIypNvFYS5bBlLhsRf82o84w4d/HIHGqhnmEgb2982rbYMBGSBjSHOJ 5qgvax+tFNKsHyaa7XqKk06BCQqzmYYdzX92YWehBrQK5FQpZoQfJSRswbRJHd5p 6wSJ95vab/Uz/44jhJJZyiQlKBva9bAR3S4RpDfnxMae4VN4JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH95gV8Y0t5mVYq25ETMr16xLUrxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDNkZjY0ZjMtZGIyMi0z MzM5LTg2ZWQtNGM0MWEzOWZiNmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF8IQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClmfwuzoNwkY8ZYOFsjEBzRqijrV6gKmYoSsNUwHzgVVDgDK2jB+reB rY4YKQ90zZuKGjAQEQt7NDM2dXhu5hCcq77pdy0EQLoS4TIHsqP34XRboPd4jzPs MhUpunBRcZZrQkHM6oOdMritZxK4VVILsHyjQIgB2L1ui4X/h8zA3sE+WhfGYlaj Ls539mhjr94y/zGELESuOevsODWMo7kpVg3bfcu+9QPgU6ak5Rfz7pby9aRcmNVy 9o0rgreBkxNUsdwZQVo0t3PObbA4tcWmwNzHpUR+H3xGTF1zTVkbfGWVbbjWZuZm 60SzvKVHyuDwfBo+a6Kj7DOZPpDsv/4= -----END CERTIFICATE-----Generated at Tue Jul 22 19:33:40 2025 by rpki-client