$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a27557e-9606-38fd-8348-3cf3b45b41c4.roa File: 2a27557e-9606-38fd-8348-3cf3b45b41c4.roa (raw, json) Hash identifier: SDvOe3uaf+DovDo93mGeCJC8GeWf6K8hypuCVE7tBac= Subject key identifier: 24:52:3D:3D:A9:E2:B0:13:26:52:37:C1:A8:72:D7:2A:A9:D7:2E:F7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A1B601A0EDB6FFCFAE0BCF9C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a27557e-9606-38fd-8348-3cf3b45b41c4.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.49.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:1a:0e:db:6f:fc:fa:e0:bc:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=810d78b2-294d-42f2-bf9b-7cc295da1aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a6:c5:65:6f:01:8e:75:82:a8:ea:bc:08:ce: 5b:4b:05:89:30:54:e5:f4:6c:bc:27:96:27:4f:b3: 92:b2:5c:da:82:4e:18:62:66:f7:07:7c:7b:eb:8d: 69:b9:2a:6e:1a:d7:2e:a2:cc:62:2c:e2:df:f1:4b: 45:44:6f:8f:71:ff:c8:3a:1a:af:48:a2:f4:af:8f: e4:b1:eb:62:f4:e6:2e:76:36:9e:c6:99:f8:5e:6d: 2c:f6:1b:4f:9b:93:ef:a9:04:af:29:de:3f:cb:8f: ee:7f:f7:5c:29:c0:54:72:86:1e:14:a9:58:ee:ea: 3c:58:0f:12:04:33:39:6c:e0:d8:78:02:9c:4a:8c: d5:b3:36:47:da:62:99:23:2a:2e:07:da:01:2f:da: 7c:c3:61:7d:81:08:5b:7b:fe:de:40:f2:a0:c3:64: 08:2f:69:a9:84:81:5e:60:0f:4e:d0:0c:7c:4d:ee: d1:8c:f7:37:e6:e1:c4:e3:90:89:e4:7a:a8:f8:46: 7f:19:8e:1e:62:89:64:a6:7d:f4:68:d4:56:ab:4e: 40:b2:ae:25:d2:94:9a:c9:ba:1b:93:a8:47:11:16: da:8d:c0:02:83:9a:fd:f4:9d:f7:82:f7:4b:98:bf: d7:c0:47:68:e4:d3:83:53:79:18:25:72:ee:41:08: 5c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:52:3D:3D:A9:E2:B0:13:26:52:37:C1:A8:72:D7:2A:A9:D7:2E:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a27557e-9606-38fd-8348-3cf3b45b41c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.49.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:05:5f:c3:2b:6f:5e:c7:99:86:c7:3a:b7:13:4e:23:75:96: 4f:5b:b0:a6:6f:1f:8a:93:da:04:d8:a5:5b:fe:2e:93:37:de: b5:34:b5:eb:49:65:b1:40:f0:b5:56:18:28:ba:8a:bb:ce:47: 1f:ea:13:37:e8:31:55:7c:44:e9:b0:9c:03:50:61:ee:85:ce: 87:6e:06:24:62:be:62:39:61:93:1d:50:62:b3:15:b6:24:f8: b7:99:c2:41:19:be:81:b8:fc:7a:70:63:ca:21:81:60:07:22: 1a:2d:b3:56:56:8c:be:a0:59:45:07:17:13:12:3c:c8:c2:af: 7f:e9:94:1a:d7:8b:51:e7:a8:14:3a:fd:31:1c:f4:80:22:90: 43:06:ce:3c:6b:ce:20:3a:bf:3e:a4:ad:bd:2a:cd:28:9f:52: fe:da:29:f0:bd:bc:43:df:6d:ed:41:1a:28:1d:5f:c1:1f:2c: 30:20:cb:73:c2:f1:34:21:4a:94:73:bb:3a:53:f9:e2:93:46: 99:f6:4d:42:92:0b:2a:79:b7:87:66:29:14:fe:51:fd:07:42: cd:fb:41:68:71:d1:1a:40:5b:40:1b:fe:c8:2a:86:e3:ea:0a: 36:ff:5c:98:54:c1:15:eb:3b:cf:dd:27:5f:08:56:29:18:49: bc:8f:8b:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYBoO22/8+uC8+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk ODEwZDc4YjItMjk0ZC00MmYyLWJmOWItN2NjMjk1ZGExYWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqbFZW8BjnWCqOq8CM5bSwWJMFTl9Gy8J5Yn T7OSslzagk4YYmb3B3x7641puSpuGtcuosxiLOLf8UtFRG+Pcf/IOhqvSKL0r4/k seti9OYudjaexpn4Xm0s9htPm5PvqQSvKd4/y4/uf/dcKcBUcoYeFKlY7uo8WA8S BDM5bODYeAKcSozVszZH2mKZIyouB9oBL9p8w2F9gQhbe/7eQPKgw2QIL2mphIFe YA9O0Ax8Te7RjPc35uHE45CJ5Hqo+EZ/GY4eYolkpn30aNRWq05Asq4l0pSaybob k6hHERbajcACg5r99J33gvdLmL/XwEdo5NODU3kYJXLuQQhcuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRSPT2p4rATJlI3wahy1yqp1y73MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmEyNzU1N2UtOTYwNi0z OGZkLTgzNDgtM2NmM2I0NWI0MWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4FX8Mrb17HmYbHOrcTTiN1lk9bsKZvH4qT2gTYpVv+LpM33rU0tetJ ZbFA8LVWGCi6irvORx/qEzfoMVV8ROmwnANQYe6FzoduBiRivmI5YZMdUGKzFbYk +LeZwkEZvoG4/HpwY8ohgWAHIhots1ZWjL6gWUUHFxMSPMjCr3/plBrXi1HnqBQ6 /TEc9IAikEMGzjxrziA6vz6krb0qzSifUv7aKfC9vEPfbe1BGigdX8EfLDAgy3PC 8TQhSpRzuzpT+eKTRpn2TUKSCyp5t4dmKRT+Uf0HQs37QWhx0RpAW0Ab/sgqhuPq Cjb/XJhUwRXrO8/dJ18IVikYSbyPi9g= -----END CERTIFICATE-----Generated at Sat Jun 7 23:02:35 2025 by rpki-client