$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ccdc472-a688-30e8-8f8b-a5cf08be2a5f.roa File: 0ccdc472-a688-30e8-8f8b-a5cf08be2a5f.roa (raw, json) Hash identifier: JUChOsKvazZSPGtyFN1QL2aQsleZZPtws5LCBZTe3So= Subject key identifier: 9B:77:84:93:3B:EB:73:E8:4D:E7:C5:EE:C5:37:95:40:55:6D:3C:4A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A03A55F026BD822EFE289F190 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ccdc472-a688-30e8-8f8b-a5cf08be2a5f.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 16625 IP address blocks: 23.12.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:5f:02:6b:d8:22:ef:e2:89:f1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=70a9bf65-5d27-476d-a601-1d2c57bbe47e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:04:41:49:1d:ce:98:e5:48:4c:b8:cc:f1:cc: 90:6a:a7:47:1e:bd:c5:10:33:40:f4:81:62:e3:cd: 09:16:5f:d7:7c:2a:00:8e:9c:82:43:86:d3:42:ec: d8:f4:34:cc:d2:e8:a8:4b:3f:86:16:af:b2:69:d2: 0c:7b:2e:d5:58:e1:e5:6b:80:13:89:db:08:ab:81: 63:0c:29:f0:c4:d6:a4:96:a8:de:93:9e:37:e8:a0: 22:ed:7d:0e:2d:8a:8b:e1:ee:45:78:f9:10:e6:7e: 0c:42:37:d6:72:ed:54:4e:36:22:a8:f3:5d:c6:a0: 2a:e6:e9:9c:83:35:95:99:c1:64:76:6a:93:fd:50: 70:47:e4:ce:c7:00:17:70:70:30:34:b7:9b:eb:6b: ed:aa:ac:4a:d8:f8:b5:24:ae:7b:ab:1f:ac:86:57: 2f:f3:59:8d:a4:17:74:a2:99:a9:c0:91:d8:5f:34: fc:f3:83:df:b3:87:57:3c:42:65:6f:c4:d3:07:c6: d3:09:c8:70:46:19:51:60:cb:0b:c1:77:70:ce:39: 32:87:ce:ca:b1:f7:ef:f7:37:b8:00:be:dd:4f:d9: 5e:e2:92:be:c4:22:59:d5:48:45:a9:40:8a:f9:38: 36:c6:6a:ab:42:e0:7b:73:44:2d:15:a5:99:1b:14: ad:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:77:84:93:3B:EB:73:E8:4D:E7:C5:EE:C5:37:95:40:55:6D:3C:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ccdc472-a688-30e8-8f8b-a5cf08be2a5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.12.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:ee:1b:ce:41:d1:18:50:d2:11:08:51:e5:3b:90:f3:80:91: 3d:08:ca:f9:47:be:ce:2e:18:e6:86:7c:74:85:b0:46:eb:f1: 00:c4:12:f7:77:a7:10:94:be:a9:2b:e7:20:69:85:4f:72:de: d2:10:9b:2b:fb:77:97:95:94:fb:96:59:b4:aa:b7:4f:fe:c7: e6:de:4e:ac:52:c4:88:8a:2b:d6:f8:58:d8:48:fb:35:42:a1: da:4b:c4:f2:5a:5b:7d:93:75:ef:04:1e:83:97:d6:ed:55:12: 09:03:47:99:93:93:05:df:22:e4:fd:96:70:38:9f:5a:75:39: dd:6f:70:90:96:81:c8:b3:ba:cd:3b:7b:96:5e:e8:2c:cf:02: c4:19:e6:4f:1e:56:69:af:98:c5:0d:4c:db:a8:06:e1:ba:04: 3e:cd:e6:ed:ad:7b:26:0e:e5:34:93:89:07:df:24:16:8e:64: ac:bb:43:b9:c3:e0:16:7d:c4:ab:9a:73:5c:1a:6f:27:17:ac: a0:fb:38:1f:54:4d:56:b5:ec:5a:4a:47:2b:0a:51:3b:21:92: b3:af:ba:d7:24:cd:43:f4:3e:32:f8:90:ec:c7:60:30:4c:07: 02:2a:52:fa:08:b4:fe:d0:00:04:3e:71:7b:84:7b:e3:9f:89: bc:09:cc:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpV8Ca9gi7+KJ8ZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk NzBhOWJmNjUtNWQyNy00NzZkLWE2MDEtMWQyYzU3YmJlNDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwRBSR3OmOVITLjM8cyQaqdHHr3FEDNA9IFi 480JFl/XfCoAjpyCQ4bTQuzY9DTM0uioSz+GFq+yadIMey7VWOHla4ATidsIq4Fj DCnwxNaklqjek5436KAi7X0OLYqL4e5FePkQ5n4MQjfWcu1UTjYiqPNdxqAq5umc gzWVmcFkdmqT/VBwR+TOxwAXcHAwNLeb62vtqqxK2Pi1JK57qx+shlcv81mNpBd0 opmpwJHYXzT884Pfs4dXPEJlb8TTB8bTCchwRhlRYMsLwXdwzjkyh87Ksffv9ze4 AL7dT9le4pK+xCJZ1UhFqUCK+Tg2xmqrQuB7c0QtFaWZGxStQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJt3hJM763PoTefF7sU3lUBVbTxKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGNjZGM0NzItYTY4OC0z MGU4LThmOGItYTVjZjA4YmUyYTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFwygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPuG85B0RhQ0hEIUeU7kPOAkT0IyvlHvs4uGOaGfHSFsEbr8QDEEvd3 pxCUvqkr5yBphU9y3tIQmyv7d5eVlPuWWbSqt0/+x+beTqxSxIiKK9b4WNhI+zVC odpLxPJaW32Tde8EHoOX1u1VEgkDR5mTkwXfIuT9lnA4n1p1Od1vcJCWgcizus07 e5Ze6CzPAsQZ5k8eVmmvmMUNTNuoBuG6BD7N5u2teyYO5TSTiQffJBaOZKy7Q7nD 4BZ9xKuac1wabycXrKD7OB9UTVa17FpKRysKUTshkrOvutckzUP0PjL4kOzHYDBM BwIqUvoItP7QAAQ+cXuEe+OfibwJzM8= -----END CERTIFICATE-----Generated at Sat Jun 7 14:05:55 2025 by rpki-client