$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56d5ffda-3e68-3ecc-9c7b-37121b2d0ce9.roa File: 56d5ffda-3e68-3ecc-9c7b-37121b2d0ce9.roa (raw, json) Hash identifier: kx2Czt4dyuAtWCPn2RMyoFEfOYoyTwTEPDT/nttQzyM= Subject key identifier: E8:B2:14:EC:9B:9A:DC:04:94:68:61:2F:7C:AF:5C:4C:B0:A3:71:F5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849FE10094DCB2037BB8C765280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56d5ffda-3e68-3ecc-9c7b-37121b2d0ce9.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 16625 IP address blocks: 23.77.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:10:09:4d:cb:20:37:bb:8c:76:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=71ead260-0710-4e37-871e-8ef19dab9f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0d:77:1a:46:4a:33:8e:7e:03:0b:eb:61:ab: 81:07:71:e7:2a:75:6e:b7:72:9c:7b:ea:7b:92:92: 1f:4d:34:7e:3b:a2:32:00:76:8f:b5:8d:57:69:25: 44:0b:d2:f0:93:43:ab:f1:0f:63:05:f0:9f:9e:cf: 54:b6:4b:92:26:7a:73:92:30:70:88:e3:28:31:b1: 43:00:1a:e4:2c:0c:5b:ae:9c:ba:84:9d:28:19:5b: 7e:b7:7a:08:7e:e7:d0:1c:ac:76:98:9f:15:cb:4c: 00:2d:bf:1a:cb:81:fd:4e:c7:ec:49:b3:38:45:90: eb:2d:2c:f9:82:bf:a2:37:0b:fe:17:18:b1:8e:20: cc:0b:b7:10:f7:70:75:32:f2:60:6e:5b:2c:58:15: a3:0f:82:1d:4f:c1:0d:d5:24:34:6e:46:90:40:6b: ed:42:e5:20:bb:7a:97:d9:8c:14:8d:4b:58:45:1a: 1d:61:5a:e7:5f:3c:9c:eb:ab:3c:1b:d1:25:44:79: ef:87:e3:94:1e:55:51:4d:f4:ed:cf:02:8a:6d:d4: a5:f8:5b:87:3a:a7:6e:44:fe:93:8d:40:ee:4f:c1: 4f:69:04:23:0e:8e:f2:ac:6f:20:60:95:37:8a:58: d7:39:d7:1d:0d:c1:cc:93:6d:05:07:4b:59:37:10: e7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B2:14:EC:9B:9A:DC:04:94:68:61:2F:7C:AF:5C:4C:B0:A3:71:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56d5ffda-3e68-3ecc-9c7b-37121b2d0ce9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.77.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:a3:d2:f3:2f:fc:b1:f5:09:28:d6:36:67:bb:b1:fe:86:75: 20:89:09:88:14:02:92:f1:1b:33:43:8e:36:e1:8b:46:c9:e0: ad:5e:83:98:51:c5:04:8d:d3:b1:31:13:7a:b4:84:86:ff:52: e7:fe:43:9d:7c:64:63:a3:fc:ce:4d:6b:0a:70:d7:44:98:80: d2:e5:5d:90:27:01:85:dd:bc:6d:29:f2:5f:07:ba:be:8c:25: ae:75:7c:18:2b:f1:8e:10:c9:a7:02:ed:54:3a:2a:85:84:54: eb:75:be:f2:54:fa:ab:bb:1d:d7:bb:b8:61:c9:80:92:43:4c: 44:ac:95:10:ac:f1:31:74:53:c4:06:b6:68:55:8b:d5:75:5f: d7:b9:c9:2b:60:dd:da:ae:81:ea:f7:7e:ca:3c:39:2c:39:c4: cb:67:21:5a:eb:30:5e:b0:70:3d:d1:7f:41:08:d6:90:4e:79: ff:3e:f8:16:8c:59:1a:96:0b:13:ab:41:87:6b:82:82:07:84: 92:13:19:62:1d:c5:a7:e4:39:4a:21:e2:95:01:9d:d8:f7:81: 51:c4:99:2c:88:78:a7:80:e2:81:a4:64:39:23:84:71:93:7c: 32:9b:9a:23:ce:5e:9e:60:c7:96:85:76:9b:66:44:6b:83:cd: ff:80:eb:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+EAlNyyA3u4x2UoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk NzFlYWQyNjAtMDcxMC00ZTM3LTg3MWUtOGVmMTlkYWI5ZjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg13GkZKM45+AwvrYauBB3HnKnVut3Kce+p7 kpIfTTR+O6IyAHaPtY1XaSVEC9Lwk0Or8Q9jBfCfns9UtkuSJnpzkjBwiOMoMbFD ABrkLAxbrpy6hJ0oGVt+t3oIfufQHKx2mJ8Vy0wALb8ay4H9TsfsSbM4RZDrLSz5 gr+iNwv+FxixjiDMC7cQ93B1MvJgblssWBWjD4IdT8EN1SQ0bkaQQGvtQuUgu3qX 2YwUjUtYRRodYVrnXzyc66s8G9ElRHnvh+OUHlVRTfTtzwKKbdSl+FuHOqduRP6T jUDuT8FPaQQjDo7yrG8gYJU3iljXOdcdDcHMk20FB0tZNxDnSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiyFOybmtwElGhhL3yvXEywo3H1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTZkNWZmZGEtM2U2OC0z ZWNjLTljN2ItMzcxMjFiMmQwY2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF034MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2j0vMv/LH1CSjWNme7sf6GdSCJCYgUApLxGzNDjjbhi0bJ4K1eg5hR xQSN07ExE3q0hIb/Uuf+Q518ZGOj/M5Nawpw10SYgNLlXZAnAYXdvG0p8l8Hur6M Ja51fBgr8Y4QyacC7VQ6KoWEVOt1vvJU+qu7Hde7uGHJgJJDTESslRCs8TF0U8QG tmhVi9V1X9e5yStg3dquger3fso8OSw5xMtnIVrrMF6wcD3Rf0EI1pBOef8++BaM WRqWCxOrQYdrgoIHhJITGWIdxafkOUoh4pUBndj3gVHEmSyIeKeA4oGkZDkjhHGT fDKbmiPOXp5gx5aFdptmRGuDzf+A69I= -----END CERTIFICATE-----Generated at Sat Jun 7 22:55:17 2025 by rpki-client