$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a02b2597-7ba1-3b9c-b78e-c4848f474572.roa File: a02b2597-7ba1-3b9c-b78e-c4848f474572.roa (raw, json) Hash identifier: ikyhCgKbj2bHB/p8TFMdAIU6fDB1LJediJWKkRKd3+o= Subject key identifier: F1:8C:41:AD:3A:04:5B:51:3F:9E:75:BB:78:38:E8:56:18:92:26:68 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849A8E9EA580E7862BE39D3B780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a02b2597-7ba1-3b9c-b78e-c4848f474572.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 16625 IP address blocks: 23.218.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:ea:58:0e:78:62:be:39:d3:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=5aad1d53-899f-4455-b65b-7d77bd8bf50a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:89:28:47:e8:ed:bb:11:c9:bd:74:95:14:cd: 0c:66:18:3b:70:43:a5:fe:f5:33:8d:81:9b:91:cd: 7b:dc:63:72:36:7e:d0:61:da:4b:d2:80:f8:f9:7e: 0a:25:e6:f5:53:42:aa:73:c2:b4:af:d5:95:d9:7f: d5:c2:95:84:b6:79:07:7a:ba:68:f1:51:76:ef:f4: 0e:77:08:9b:e7:8a:77:7e:c0:9d:87:ed:9a:05:ec: 94:5c:7c:91:6c:e2:1e:db:15:37:57:a6:8a:7b:58: 7a:44:97:b2:01:10:72:5e:33:df:65:94:dc:20:c7: b0:71:c5:76:71:cf:45:7e:d2:ed:86:36:84:01:f9: f3:18:89:b8:22:06:c8:a3:31:f2:22:2f:5a:cc:0b: 6c:43:1b:0f:a8:bf:c1:9d:db:42:f5:e5:4b:96:c9: 47:6f:8a:e9:25:c0:69:d3:4e:28:ce:5d:d3:ec:8d: 19:37:65:dc:84:12:aa:b7:9c:f9:3a:8a:0b:d8:51: 2e:fa:14:de:d0:05:26:3e:11:a2:d0:24:ec:f3:0a: b7:2f:65:55:a6:ae:46:c2:fa:f7:c3:f8:bb:4e:ce: d0:aa:f3:70:0f:69:3a:8c:19:5b:d3:a4:af:b1:da: 10:d7:b0:af:14:0a:86:cf:7a:eb:e9:29:07:8c:c0: 0a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:8C:41:AD:3A:04:5B:51:3F:9E:75:BB:78:38:E8:56:18:92:26:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a02b2597-7ba1-3b9c-b78e-c4848f474572.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:4a:5f:02:0f:b6:21:2c:3c:d5:93:af:a2:7c:8f:93:34:9a: cd:97:4f:b8:31:d3:b6:2d:fe:f4:1e:75:4d:5f:9d:bd:7e:f4: e1:28:3d:37:a2:8c:f1:60:80:fa:0a:d6:0f:d4:57:12:1a:5e: 19:5e:00:b6:62:68:c1:a3:75:a9:fb:68:d1:66:21:c2:8e:f0: 72:9a:6a:54:7a:03:f0:ab:04:7c:00:9a:27:2e:8d:93:46:e0: 02:01:ee:a6:61:a6:84:cb:fa:f9:71:e4:7b:9f:c4:1f:4f:9d: 1a:42:4a:a4:49:94:3b:3c:38:be:1b:eb:cf:ad:71:46:09:ea: 20:38:43:77:71:34:bc:57:37:7e:a2:91:86:d3:c9:28:4d:6a: 84:ba:09:56:b2:43:23:f8:24:42:bd:57:e9:f7:42:76:40:02: 8b:81:6f:40:79:98:a2:ea:d9:9d:42:f8:81:03:6c:e5:25:5b: a5:b1:97:43:93:a8:6e:6e:5f:78:0d:96:c1:e3:56:17:52:99: 07:1c:79:cc:bd:20:73:80:ed:c7:b1:89:d1:21:0d:03:0b:81: 0d:12:d7:ef:73:37:c3:e5:a9:f0:fc:c2:ef:19:69:2e:e2:0e: ba:c2:0d:d5:6e:74:2f:9b:5c:95:34:4d:95:89:65:32:8c:c7: e3:d5:6b:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6epYDnhivjnTt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk NWFhZDFkNTMtODk5Zi00NDU1LWI2NWItN2Q3N2JkOGJmNTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIkoR+jtuxHJvXSVFM0MZhg7cEOl/vUzjYGb kc173GNyNn7QYdpL0oD4+X4KJeb1U0Kqc8K0r9WV2X/VwpWEtnkHerpo8VF27/QO dwib54p3fsCdh+2aBeyUXHyRbOIe2xU3V6aKe1h6RJeyARByXjPfZZTcIMewccV2 cc9FftLthjaEAfnzGIm4IgbIozHyIi9azAtsQxsPqL/BndtC9eVLlslHb4rpJcBp 004ozl3T7I0ZN2XchBKqt5z5OooL2FEu+hTe0AUmPhGi0CTs8wq3L2VVpq5Gwvr3 w/i7Ts7QqvNwD2k6jBlb06SvsdoQ17CvFAqGz3rr6SkHjMAKFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGMQa06BFtRP551u3g46FYYkiZoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTAyYjI1OTctN2JhMS0z YjljLWI3OGUtYzQ4NDhmNDc0NTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9rQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVKXwIPtiEsPNWTr6J8j5M0ms2XT7gx07Yt/vQedU1fnb1+9OEoPTei jPFggPoK1g/UVxIaXhleALZiaMGjdan7aNFmIcKO8HKaalR6A/CrBHwAmicujZNG 4AIB7qZhpoTL+vlx5HufxB9PnRpCSqRJlDs8OL4b68+tcUYJ6iA4Q3dxNLxXN36i kYbTyShNaoS6CVayQyP4JEK9V+n3QnZAAouBb0B5mKLq2Z1C+IEDbOUlW6Wxl0OT qG5uX3gNlsHjVhdSmQccecy9IHOA7cexidEhDQMLgQ0S1+9zN8PlqfD8wu8ZaS7i DrrCDdVudC+bXJU0TZWJZTKMx+PVa3o= -----END CERTIFICATE-----Generated at Sat Jun 7 13:58:32 2025 by rpki-client