$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bfa53bc-cfbe-30d3-ba27-24fd90b159a6.roa File: 4bfa53bc-cfbe-30d3-ba27-24fd90b159a6.roa (raw, json) Hash identifier: mDq01Tp0osqAUMM/DuMc+LYZRe/3v4obPxaEthDkuhE= Subject key identifier: CA:00:71:2C:38:D7:9F:4A:34:87:EF:C1:24:95:0E:54:29:CB:32:92 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858499AF49A0CD736C289EC098340 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bfa53bc-cfbe-30d3-ba27-24fd90b159a6.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.209.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:9a:0c:d7:36:c2:89:ec:09:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=72bb5ede-b91e-4442-a537-ca80b89b42ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b0:ab:e1:65:19:5f:1b:4a:bf:11:36:26:df: c5:8b:90:05:5c:3d:94:1e:9d:3e:44:4f:a5:68:07: 12:ef:46:3a:6f:12:ce:cc:60:8b:ea:0f:7e:5c:83: 4f:d7:3d:31:f6:be:d6:80:4d:7a:09:bc:37:a9:f7: c7:e7:95:21:95:5b:ba:2d:47:6b:2b:cc:55:45:51: 47:c7:0c:11:1d:7e:dc:79:24:85:87:b6:95:4d:28: 54:f8:3f:42:3b:25:c4:a4:07:7a:79:59:4a:32:38: 04:fa:85:3c:63:31:9f:6c:67:91:42:9d:54:ec:85: 1c:f2:47:59:55:9a:54:16:46:e4:fa:db:61:24:65: f5:b6:c3:c6:1f:0f:28:49:86:9a:21:b2:04:d6:a3: a0:86:46:84:e1:9f:b1:5c:f0:00:6d:83:d3:65:40: db:4e:31:04:70:ab:14:87:ae:bf:2c:a9:0f:b5:81: 94:e8:79:0e:ff:57:1c:3f:82:73:d1:e0:11:4e:1a: 17:2b:1c:f0:af:06:e4:bf:1b:2e:8c:7d:53:70:d9: ce:97:11:6b:15:2b:e7:34:d7:c7:f2:2a:3f:ba:55: 31:6f:bd:91:26:4d:93:3e:f9:50:03:a7:fd:ed:9d: bb:85:5a:c7:05:6c:3d:58:2d:c8:10:a8:ef:c8:93: b5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:00:71:2C:38:D7:9F:4A:34:87:EF:C1:24:95:0E:54:29:CB:32:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bfa53bc-cfbe-30d3-ba27-24fd90b159a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:2f:0a:a2:25:89:f6:54:06:89:a4:c2:59:ea:d6:45:8a:aa: da:b6:76:ad:80:51:ba:91:df:38:b2:99:f3:cf:ef:f5:eb:8b: 43:c7:ed:14:de:8c:86:a2:95:6d:46:ab:e5:ff:48:3a:20:e7: 53:20:be:1f:db:ba:70:44:9d:a1:86:44:68:2c:4d:8c:25:f3: fe:3c:f3:9a:51:46:a3:fb:44:86:e1:e2:da:16:76:56:17:1d: 52:85:6c:63:f9:24:be:7d:64:ea:f0:a1:46:7a:3b:47:1b:34: 1e:98:d1:1d:d0:bd:a0:5d:a2:a9:9b:0d:ec:ea:27:a6:ef:bf: 83:17:59:52:f0:b1:73:b0:34:a0:fa:60:80:32:1d:bf:5a:e5: 02:2e:db:d4:02:91:c9:bc:60:be:a0:5d:ec:c7:8d:dc:12:70: f4:02:f5:84:0d:5e:61:9d:6c:ad:01:94:38:a6:ca:7a:5b:1b: cd:a2:8c:2a:33:8c:83:6f:3b:ad:32:67:fe:c3:88:f7:f8:65: 7f:6d:f9:15:8e:bb:55:13:04:a7:ab:f6:bc:f6:f0:89:dc:57: 5b:5c:bf:c9:94:ed:dd:df:38:cb:c8:a1:2d:b9:b1:66:38:d9: 3f:50:8c:8a:9e:d3:33:96:32:be:4f:50:80:13:db:76:a3:a5: 7f:c4:34:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9JoM1zbCiewJg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NzJiYjVlZGUtYjkxZS00NDQyLWE1MzctY2E4MGI4OWI0MmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbCr4WUZXxtKvxE2Jt/Fi5AFXD2UHp0+RE+l aAcS70Y6bxLOzGCL6g9+XINP1z0x9r7WgE16Cbw3qffH55UhlVu6LUdrK8xVRVFH xwwRHX7ceSSFh7aVTShU+D9COyXEpAd6eVlKMjgE+oU8YzGfbGeRQp1U7IUc8kdZ VZpUFkbk+tthJGX1tsPGHw8oSYaaIbIE1qOghkaE4Z+xXPAAbYPTZUDbTjEEcKsU h66/LKkPtYGU6HkO/1ccP4Jz0eARThoXKxzwrwbkvxsujH1TcNnOlxFrFSvnNNfH 8io/ulUxb72RJk2TPvlQA6f97Z27hVrHBWw9WC3IEKjvyJO1BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoAcSw4159KNIfvwSSVDlQpyzKSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGJmYTUzYmMtY2ZiZS0z MGQzLWJhMjctMjRmZDkwYjE1OWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9EwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIvCqIlifZUBomkwlnq1kWKqtq2dq2AUbqR3ziymfPP7/Xri0PH7RTe jIailW1Gq+X/SDog51Mgvh/bunBEnaGGRGgsTYwl8/4885pRRqP7RIbh4toWdlYX HVKFbGP5JL59ZOrwoUZ6O0cbNB6Y0R3QvaBdoqmbDezqJ6bvv4MXWVLwsXOwNKD6 YIAyHb9a5QIu29QCkcm8YL6gXezHjdwScPQC9YQNXmGdbK0BlDimynpbG82ijCoz jINvO60yZ/7DiPf4ZX9t+RWOu1UTBKer9rz28IncV1tcv8mU7d3fOMvIoS25sWY4 2T9QjIqe0zOWMr5PUIAT23ajpX/ENFY= -----END CERTIFICATE-----Generated at Sat Jun 7 23:23:09 2025 by rpki-client