$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e8914d3-5b3d-3b3d-8867-09211ff51bf6.roa File: 3e8914d3-5b3d-3b3d-8867-09211ff51bf6.roa (raw, json) Hash identifier: lCL2xP663DH45fj9IRUzDg0tDnvw2dZzaH/KC0W1MNg= Subject key identifier: C7:EB:A4:AE:7D:98:65:0F:8A:66:12:F4:A0:8A:28:7F:2B:6A:C2:DB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A1B601450241F6D6F78535D40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e8914d3-5b3d-3b3d-8867-09211ff51bf6.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.48.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:14:50:24:1f:6d:6f:78:53:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=86da858a-75a2-4a48-ac81-90087a8fc7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:07:87:63:70:21:ae:ea:67:70:df:f1:f7:2b: 94:97:89:b2:3f:80:e6:02:e0:04:f4:c2:fd:4f:05: f7:df:59:14:38:3b:58:32:e7:90:43:13:b0:83:19: 95:ce:45:e9:fe:b7:92:c4:ee:3e:b3:bb:0b:06:06: 98:8d:06:f5:f3:16:78:92:18:93:53:ec:c3:a9:54: 97:f5:ec:0c:bb:7c:33:96:a6:62:3c:e2:e0:f8:1c: d6:d7:79:54:83:33:91:83:fa:a7:c8:69:e9:c3:94: 0b:7b:ac:fb:67:93:1a:ae:bd:30:26:6f:26:15:7b: 45:12:f3:e4:2b:b7:38:01:cf:8f:eb:b7:a6:05:e7: 6b:33:e7:0d:91:3e:30:31:31:cd:73:60:30:c4:5b: 94:e2:e8:a3:fb:0b:18:c7:8a:22:5d:22:b3:e5:ad: 44:38:80:3b:d9:de:bd:bc:34:2d:81:18:05:9e:75: 33:37:5d:80:3c:ff:55:72:7f:2d:cd:52:80:2e:8a: 74:d6:26:fa:89:a8:55:35:5f:cf:9d:c7:27:58:25: 66:5f:b4:81:e3:df:52:59:6a:43:27:0a:9f:49:1d: dd:a6:15:1a:72:a8:ae:ad:a4:51:37:1c:fb:50:51: 27:a9:e0:be:12:e4:e1:36:4d:b4:5c:62:b5:49:6c: c7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:EB:A4:AE:7D:98:65:0F:8A:66:12:F4:A0:8A:28:7F:2B:6A:C2:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e8914d3-5b3d-3b3d-8867-09211ff51bf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:d1:0b:44:25:10:c4:01:41:36:e0:19:bc:7b:a0:b9:fb:a0: cb:ae:30:12:c5:6c:40:5d:35:de:b1:cc:12:79:6e:ed:0f:3f: 58:3e:af:99:fc:f2:d8:6f:1b:47:b3:00:ca:60:b1:08:59:23: 87:92:17:6a:59:17:68:22:30:3e:af:57:8d:38:c3:a7:27:09: 48:ff:73:c8:8e:5c:3f:70:95:56:e5:7a:25:f7:4a:ef:2c:1b: 09:c6:80:79:a5:c1:35:de:53:30:00:1d:67:8a:1b:80:f4:1e: db:28:c5:6c:03:2e:cd:10:5e:54:25:c9:66:70:b0:b7:dc:ce: 79:a5:a8:f3:31:57:68:93:fe:fb:89:89:39:29:e4:72:d8:36: d8:9e:cf:26:88:7d:76:db:a2:0a:0a:d2:fc:4e:d0:e3:11:14: a1:95:83:5b:b8:84:0f:b5:47:7a:e5:77:6b:dc:7e:3f:06:94: 6d:18:d5:47:ff:e5:e6:6f:09:08:05:09:79:20:e4:80:45:03: c2:c0:77:f9:5b:f9:23:08:84:6f:27:d4:85:c6:2b:65:c5:c2: 8c:55:90:83:82:1b:8e:d2:fc:a0:d7:ab:19:45:4d:16:f0:3a: df:06:be:ee:9e:0b:ec:36:09:d5:55:02:46:6e:d0:06:66:7b: 3e:88:36:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYBRQJB9tb3hTXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk ODZkYTg1OGEtNzVhMi00YTQ4LWFjODEtOTAwODdhOGZjN2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4geHY3AhrupncN/x9yuUl4myP4DmAuAE9ML9 TwX331kUODtYMueQQxOwgxmVzkXp/reSxO4+s7sLBgaYjQb18xZ4khiTU+zDqVSX 9ewMu3wzlqZiPOLg+BzW13lUgzORg/qnyGnpw5QLe6z7Z5Marr0wJm8mFXtFEvPk K7c4Ac+P67emBedrM+cNkT4wMTHNc2AwxFuU4uij+wsYx4oiXSKz5a1EOIA72d69 vDQtgRgFnnUzN12APP9Vcn8tzVKALop01ib6iahVNV/PnccnWCVmX7SB499SWWpD JwqfSR3dphUacqiuraRRNxz7UFEnqeC+EuThNk20XGK1SWzHLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfrpK59mGUPimYS9KCKKH8rasLbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2U4OTE0ZDMtNWIzZC0z YjNkLTg4NjctMDkyMTFmZjUxYmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPRC0QlEMQBQTbgGbx7oLn7oMuuMBLFbEBdNd6xzBJ5bu0PP1g+r5n8 8thvG0ezAMpgsQhZI4eSF2pZF2giMD6vV404w6cnCUj/c8iOXD9wlVbleiX3Su8s GwnGgHmlwTXeUzAAHWeKG4D0HtsoxWwDLs0QXlQlyWZwsLfcznmlqPMxV2iT/vuJ iTkp5HLYNtiezyaIfXbbogoK0vxO0OMRFKGVg1u4hA+1R3rld2vcfj8GlG0Y1Uf/ 5eZvCQgFCXkg5IBFA8LAd/lb+SMIhG8n1IXGK2XFwoxVkIOCG47S/KDXqxlFTRbw Ot8Gvu6eC+w2CdVVAkZu0AZmez6INmU= -----END CERTIFICATE-----Generated at Sat Jun 7 13:52:35 2025 by rpki-client