$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/217acfa3-d4c4-3bd3-a39c-a2fad9b9fad5.roa File: 217acfa3-d4c4-3bd3-a39c-a2fad9b9fad5.roa (raw, json) Hash identifier: hrL7i6WfK6Jx7ElpfW8tz74Waw6oHtX4dsk5q2LXVP4= Subject key identifier: C7:5A:B0:24:6C:7B:A8:F1:7C:5E:33:46:4D:BB:4A:1F:67:25:5D:87 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A00DAF822EAF5AC0F05693500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/217acfa3-d4c4-3bd3-a39c-a2fad9b9fad5.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.45.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:f8:22:ea:f5:ac:0f:05:69:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=71dd2623-11af-46af-b3e8-3b57d462de47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:72:66:65:3d:ce:52:ef:9c:a8:4a:75:13:c6: 40:67:9f:62:93:47:41:0f:a5:8c:e9:58:e7:4b:ad: e6:67:1f:3b:f2:a3:5a:ce:9e:a0:27:2a:a4:c5:19: a9:79:40:aa:2c:76:0a:4a:3e:50:c6:9f:c9:18:ab: 26:17:f7:19:0d:23:67:27:ca:0a:93:b6:cb:fe:20: cd:fa:8f:7b:a2:e7:17:ab:b5:c3:af:14:51:92:52: 39:03:64:c3:ed:06:7a:84:e4:b0:13:64:be:dc:f7: ec:56:6a:f5:3a:bb:b0:d3:6b:78:95:dc:74:25:1f: 59:36:0f:ba:d6:d8:dd:db:b4:e1:c7:90:3b:61:bd: 0c:f8:be:28:18:38:65:00:a2:5c:99:3e:aa:0e:9a: d7:ed:a4:44:f1:59:01:16:6f:e0:41:67:77:af:e2: 50:02:95:cc:85:96:d9:d5:87:b8:ea:c3:ff:20:a3: db:ed:c7:4f:99:d8:cd:8d:eb:12:9a:67:aa:3c:49: 31:b5:8f:33:1c:65:59:b4:57:c6:26:df:c6:95:0b: 87:51:f0:cc:b9:3b:5f:b1:c5:32:b8:63:4c:47:a6: 36:4c:2e:21:ae:9d:b8:fc:dc:c5:61:8f:b4:a0:c2: 81:e9:5b:90:dc:42:c7:ff:f7:38:cd:e7:e9:72:e4: 0b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5A:B0:24:6C:7B:A8:F1:7C:5E:33:46:4D:BB:4A:1F:67:25:5D:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/217acfa3-d4c4-3bd3-a39c-a2fad9b9fad5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:32:aa:a4:48:a4:b8:ee:89:23:75:1f:f0:af:74:af:94:28: 34:6d:e4:14:89:ba:ff:71:10:0e:b4:62:d4:c8:d1:d8:2e:88: 93:cc:54:51:fe:f5:a0:f0:aa:83:a9:53:4a:d3:8d:75:17:53: 72:46:15:fe:ea:22:d7:ac:29:bf:34:d9:ee:80:44:71:ff:ca: cf:0e:f7:2c:3a:51:52:87:86:d3:33:ec:4b:4b:74:fb:df:91: c4:e2:89:63:84:31:3a:ee:d8:43:3d:78:80:fe:17:72:37:38: 22:ea:bd:c8:66:29:b6:1f:73:e5:9f:07:b7:f5:70:2c:d9:c3: fe:d2:b0:8f:aa:f3:93:46:0e:f6:9e:18:91:11:7b:a9:7e:f2: 79:74:a6:6f:76:cd:36:f6:71:e6:97:e3:8e:3e:b1:73:b3:1b: b3:aa:10:3a:14:72:27:8d:79:9e:f7:6d:5c:09:32:f3:3b:5d: 64:7a:1a:8e:88:38:63:c5:b3:ed:79:6e:c7:2e:34:ae:b3:cc: ea:90:a4:d9:53:98:f6:7c:18:25:30:7a:37:7f:1f:93:d6:42: 1b:7e:b9:bc:73:2f:4f:aa:c5:8a:fd:dc:1c:ff:18:5b:d4:6c: 06:5e:97:a0:73:ac:cf:b9:39:d3:45:af:9d:a0:e7:86:f2:20: 63:39:8a:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2vgi6vWsDwVpNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk NzFkZDI2MjMtMTFhZi00NmFmLWIzZTgtM2I1N2Q0NjJkZTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3JmZT3OUu+cqEp1E8ZAZ59ik0dBD6WM6Vjn S63mZx878qNazp6gJyqkxRmpeUCqLHYKSj5Qxp/JGKsmF/cZDSNnJ8oKk7bL/iDN +o97oucXq7XDrxRRklI5A2TD7QZ6hOSwE2S+3PfsVmr1Oruw02t4ldx0JR9ZNg+6 1tjd27Thx5A7Yb0M+L4oGDhlAKJcmT6qDprX7aRE8VkBFm/gQWd3r+JQApXMhZbZ 1Ye46sP/IKPb7cdPmdjNjesSmmeqPEkxtY8zHGVZtFfGJt/GlQuHUfDMuTtfscUy uGNMR6Y2TC4hrp24/NzFYY+0oMKB6VuQ3ELH//c4zefpcuQLiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdasCRse6jxfF4zRk27Sh9nJV2HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjE3YWNmYTMtZDRjNC0z YmQzLWEzOWMtYTJmYWQ5YjlmYWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwyqqRIpLjuiSN1H/CvdK+UKDRt5BSJuv9xEA60YtTI0dguiJPMVFH+ 9aDwqoOpU0rTjXUXU3JGFf7qItesKb802e6ARHH/ys8O9yw6UVKHhtMz7EtLdPvf kcTiiWOEMTru2EM9eID+F3I3OCLqvchmKbYfc+WfB7f1cCzZw/7SsI+q85NGDvae GJERe6l+8nl0pm92zTb2ceaX444+sXOzG7OqEDoUcieNeZ73bVwJMvM7XWR6Go6I OGPFs+15bscuNK6zzOqQpNlTmPZ8GCUwejd/H5PWQht+ubxzL0+qxYr93Bz/GFvU bAZel6BzrM+5OdNFr52g54byIGM5ipI= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:41 2025 by rpki-client