$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89c520a2-27d2-314a-a944-9323e5ff3824.roa File: 89c520a2-27d2-314a-a944-9323e5ff3824.roa (raw, json) Hash identifier: z5TSa60hULRQ8sY5rpb2YMh1be8w0l7Rm8UgjyWGh3s= Subject key identifier: 44:A2:9A:22:20:EF:9A:87:7D:04:A9:D1:E4:A9:06:D3:F6:3A:6A:AE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CD34BDAA3D080523F6A16FC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89c520a2-27d2-314a-a944-9323e5ff3824.roa Signing time: Sat 10 May 2025 01:00:47 +0000 ROA not before: Sat 10 May 2025 01:00:47 +0000 ROA not after: Fri 08 Aug 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.49.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cd:34:bd:aa:3d:08:05:23:f6:a1:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 01:00:47 2025 GMT Not After : Aug 8 01:00:47 2025 GMT Subject: CN=432b2bfb-e0e8-4758-8195-71cd05728390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ef:77:ba:e6:c7:af:9a:af:ea:d4:5a:5e:63: e1:ab:64:d4:2f:df:e5:17:cb:b2:3b:88:64:f0:3c: ee:3a:75:3e:96:68:9e:93:64:8a:52:21:63:a9:b3: b2:c6:ea:7c:db:13:ac:99:44:4a:5a:26:d9:48:57: a0:b3:6b:e3:ee:0b:40:28:a2:14:b0:1d:38:fc:14: 46:59:e4:c2:a0:14:17:6d:ba:87:2a:bd:74:2e:14: ba:e3:f4:16:1f:63:98:a0:c0:f6:79:ba:1a:0a:76: b4:88:fd:62:f1:30:41:db:17:6b:25:14:e7:55:d1: 2b:4e:6f:e8:b9:84:03:7d:dc:50:18:86:9b:e7:f9: 74:19:db:6e:cf:7d:bd:c8:72:c9:1e:cc:d6:a3:59: 1e:71:b5:e2:f9:72:e0:ca:bb:8f:c1:6f:9d:75:5b: 42:56:12:c3:b2:96:75:74:58:ca:48:32:d6:45:68: ea:3d:f0:5a:87:f3:18:78:72:d1:92:fe:8f:57:94: f3:00:2d:6a:72:40:7f:22:b5:c3:52:82:dd:b0:3d: 9c:76:25:88:a2:de:f4:ef:d0:6b:37:cd:c9:26:4a: d3:30:11:5f:b0:8c:68:cc:f0:19:11:e8:f0:9d:84: e8:a4:11:ed:c5:56:b2:81:e8:be:32:fb:c4:51:5b: 35:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A2:9A:22:20:EF:9A:87:7D:04:A9:D1:E4:A9:06:D3:F6:3A:6A:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89c520a2-27d2-314a-a944-9323e5ff3824.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.49.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:d6:46:62:f3:81:e3:ad:0b:d9:b1:88:db:2b:ff:cd:aa:2d: 7c:df:b0:45:39:30:5a:0e:db:5b:f8:ae:10:0b:fb:27:5a:26: ca:34:92:96:4c:1e:51:64:50:97:13:69:20:77:e6:d2:ea:8c: 13:fe:26:7b:3f:a9:96:84:bc:09:e4:2f:7f:98:fb:43:fd:0e: 43:35:a5:d1:1c:0d:77:37:48:9c:b8:1f:16:f1:19:62:e9:06: e2:2d:2f:7c:83:32:5c:94:21:6a:03:ec:06:71:3c:ea:02:29: 3e:18:b3:58:87:93:a4:d3:13:d0:7b:4f:b9:b2:3d:0e:91:d3: fe:34:40:b5:4e:c9:8e:7c:c9:49:05:c9:74:a2:3f:ba:a9:30: a1:68:88:45:55:b0:58:e5:81:10:ec:6c:02:5b:23:ea:f2:27: bf:7b:0d:ab:70:c4:8b:b7:86:e1:18:ff:e5:56:6c:4f:39:48: 3a:43:c6:d1:bd:83:1b:6e:bd:9f:02:fd:9f:1f:1a:80:46:d6: 7c:95:2c:a1:02:db:d9:9b:27:af:8b:5f:86:bd:f3:83:b2:3c: b4:db:d1:52:f5:43:12:50:9c:f7:58:fe:0b:7a:c2:df:29:4f: 9e:a2:99:d5:48:00:9c:46:c1:d9:d9:f9:41:56:36:50:be:61: 6c:4c:43:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnNNL2qPQgFI/ahb8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDAxMDA0N1oXDTI1MDgwODAxMDA0N1owLzEtMCsGA1UEAxMk NDMyYjJiZmItZTBlOC00NzU4LTgxOTUtNzFjZDA1NzI4MzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO93uubHr5qv6tRaXmPhq2TUL9/lF8uyO4hk 8DzuOnU+lmiek2SKUiFjqbOyxup82xOsmURKWibZSFegs2vj7gtAKKIUsB04/BRG WeTCoBQXbbqHKr10LhS64/QWH2OYoMD2eboaCna0iP1i8TBB2xdrJRTnVdErTm/o uYQDfdxQGIab5/l0Gdtuz329yHLJHszWo1kecbXi+XLgyruPwW+ddVtCVhLDspZ1 dFjKSDLWRWjqPfBah/MYeHLRkv6PV5TzAC1qckB/IrXDUoLdsD2cdiWIot7079Br N83JJkrTMBFfsIxozPAZEejwnYTopBHtxVaygei+MvvEUVs15QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESimiIg75qHfQSp0eSpBtP2OmquMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODljNTIwYTItMjdkMi0z MTRhLWE5NDQtOTMyM2U1ZmYzODI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/WRmLzgeOtC9mxiNsr/82qLXzfsEU5MFoO21v4rhAL+ydaJso0kpZM HlFkUJcTaSB35tLqjBP+Jns/qZaEvAnkL3+Y+0P9DkM1pdEcDXc3SJy4HxbxGWLp BuItL3yDMlyUIWoD7AZxPOoCKT4Ys1iHk6TTE9B7T7myPQ6R0/40QLVOyY58yUkF yXSiP7qpMKFoiEVVsFjlgRDsbAJbI+ryJ797DatwxIu3huEY/+VWbE85SDpDxtG9 gxtuvZ8C/Z8fGoBG1nyVLKEC29mbJ6+LX4a984OyPLTb0VL1QxJQnPdY/gt6wt8p T56imdVIAJxGwdnZ+UFWNlC+YWxMQzM= -----END CERTIFICATE-----Generated at Sat Jun 7 23:13:52 2025 by rpki-client