$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84e2dd3a-e422-3dca-8c4e-9d59cf26206d.roa File: 84e2dd3a-e422-3dca-8c4e-9d59cf26206d.roa (raw, json) Hash identifier: gyC75BqClB+E1dg5BKrDW/IIGnr3ZmW5z8JGF0DfvWg= Subject key identifier: DD:8E:1C:94:82:45:07:1E:29:EF:E1:8A:00:D3:F6:F2:AB:29:04:BC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A00DAF82FE7E29AC08A5707A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84e2dd3a-e422-3dca-8c4e-9d59cf26206d.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.205.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:f8:2f:e7:e2:9a:c0:8a:57:07:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=00c34a43-9357-4b30-a85c-7b1ef4ad219a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5b:ac:bb:d2:db:9f:59:8a:ca:f8:3a:a2:56: cc:44:b7:65:c6:7f:11:6a:8c:18:87:f7:25:ac:4a: 7b:89:8f:7c:93:66:32:3e:a7:29:99:3a:39:24:93: bd:e7:02:3e:03:da:62:bb:dc:50:0e:62:1a:27:fb: 46:74:13:a1:7f:36:a7:8d:e1:29:34:43:13:89:3c: 1e:25:b1:4b:d5:b2:d5:bf:d6:b6:3e:a8:e4:43:0b: 39:1e:b5:43:a4:48:de:33:28:37:76:4c:08:75:f2: 32:4f:74:45:a4:41:ee:8a:72:ae:d8:26:07:15:5d: f6:1a:a7:ef:5b:da:94:29:a2:51:97:57:83:ea:58: ff:7e:d2:97:15:8e:d4:18:b1:59:a3:40:cd:54:3a: 62:c9:46:b1:66:68:b2:e6:a9:0d:90:f1:38:d2:6b: 17:21:38:2a:72:02:e6:67:6c:1b:0a:0f:eb:e2:57: 23:8e:43:ac:94:8f:9f:ff:bb:0b:f4:83:83:d6:28: 66:53:6a:4f:54:d2:11:eb:b3:d5:8a:95:95:3f:3e: 1e:c6:82:45:e9:b7:5c:86:2e:65:da:50:5a:30:98: c8:6e:12:35:67:f3:a1:1e:50:13:f1:66:3b:d1:de: 33:79:7a:53:0a:d3:2c:ae:24:8c:65:71:4a:13:0d: 7d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8E:1C:94:82:45:07:1E:29:EF:E1:8A:00:D3:F6:F2:AB:29:04:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84e2dd3a-e422-3dca-8c4e-9d59cf26206d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:08:f8:dc:a0:64:88:1a:36:4b:92:b3:d0:65:00:1e:a6:be: 09:ef:5c:e9:97:25:3e:28:5c:88:c3:75:9d:ed:45:4c:bb:db: a9:77:4f:6d:6a:2e:97:08:2e:19:90:e8:23:61:bd:a9:0a:b0: d7:3a:19:6f:85:18:2f:61:14:38:8b:f2:fd:da:9c:b3:b7:f3: a5:47:94:ae:d5:ac:29:ce:c8:de:b8:b6:88:d8:43:25:48:20: 85:c7:73:22:6c:56:0f:bf:0f:14:4c:6b:7b:0e:82:12:c1:6d: f6:6c:3b:ac:e6:c9:64:7e:bc:2a:fa:87:06:a8:3f:be:f9:51: e3:5d:43:d5:34:df:e8:74:6f:03:69:4d:7b:a0:8e:ff:94:27: e2:66:b9:b3:62:a1:d7:87:a6:46:e9:12:b0:6e:51:3f:c5:24: b1:d2:4f:e9:56:5d:40:96:72:56:45:3c:c8:2b:a4:05:ad:80: 1d:4e:dd:c1:b3:63:3c:c9:e3:a6:77:7d:64:72:ce:d0:11:da: 6e:78:2b:62:02:4f:ee:5b:73:bf:9f:21:21:6b:ac:b5:bb:ef: 66:bf:6e:4a:20:1c:56:7c:79:f0:17:46:11:17:79:71:76:30: 6a:90:00:0d:25:a3:fd:55:49:71:19:ca:4a:94:12:66:b4:77: 61:5f:d1:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2vgv5+KawIpXB6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk MDBjMzRhNDMtOTM1Ny00YjMwLWE4NWMtN2IxZWY0YWQyMTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVusu9Lbn1mKyvg6olbMRLdlxn8RaowYh/cl rEp7iY98k2YyPqcpmTo5JJO95wI+A9piu9xQDmIaJ/tGdBOhfzanjeEpNEMTiTwe JbFL1bLVv9a2PqjkQws5HrVDpEjeMyg3dkwIdfIyT3RFpEHuinKu2CYHFV32Gqfv W9qUKaJRl1eD6lj/ftKXFY7UGLFZo0DNVDpiyUaxZmiy5qkNkPE40msXITgqcgLm Z2wbCg/r4lcjjkOslI+f/7sL9IOD1ihmU2pPVNIR67PVipWVPz4exoJF6bdchi5l 2lBaMJjIbhI1Z/OhHlAT8WY70d4zeXpTCtMsriSMZXFKEw19GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2OHJSCRQceKe/higDT9vKrKQS8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODRlMmRkM2EtZTQyMi0z ZGNhLThjNGUtOWQ1OWNmMjYyMDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF82XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQI+NygZIgaNkuSs9BlAB6mvgnvXOmXJT4oXIjDdZ3tRUy726l3T21q LpcILhmQ6CNhvakKsNc6GW+FGC9hFDiL8v3anLO386VHlK7VrCnOyN64tojYQyVI IIXHcyJsVg+/DxRMa3sOghLBbfZsO6zmyWR+vCr6hwaoP775UeNdQ9U03+h0bwNp TXugjv+UJ+JmubNiodeHpkbpErBuUT/FJLHST+lWXUCWclZFPMgrpAWtgB1O3cGz YzzJ46Z3fWRyztAR2m54K2ICT+5bc7+fISFrrLW772a/bkogHFZ8efAXRhEXeXF2 MGqQAA0lo/1VSXEZykqUEma0d2Ff0YU= -----END CERTIFICATE-----Generated at Thu Jun 5 18:38:43 2025 by rpki-client