$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9e89375-e9e1-3964-9d84-0a887ebf94cb.roa File: a9e89375-e9e1-3964-9d84-0a887ebf94cb.roa (raw, json) Hash identifier: YFR0cLookn7n0P0acqAX5Ia6j816tA1G4rR0R+ytIR4= Subject key identifier: FF:F5:30:53:87:5F:6D:56:26:50:34:3B:20:E9:37:CC:0C:EB:89:DC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849FE1007FC0E71284D12022D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9e89375-e9e1-3964-9d84-0a887ebf94cb.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 20940 IP address blocks: 23.73.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:10:07:fc:0e:71:28:4d:12:02:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=beb7b8c4-54e0-4c90-ab68-a691cc9cf3a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:52:95:ce:05:46:a0:85:ec:d6:8a:bd:80:c9: ff:0b:40:1a:e0:86:e6:15:b3:82:1d:0b:ba:e7:cc: 2b:19:5b:26:2e:e4:4f:6a:a8:63:17:f0:0b:8d:e4: 48:4e:de:0f:83:90:be:8d:6c:66:65:2f:83:74:bc: db:64:5b:81:2f:ef:ff:51:3b:7f:d2:1a:be:28:5c: bd:5f:b5:df:78:73:85:27:1c:52:0f:67:d8:c9:8e: 0c:8b:3f:27:7b:6f:c9:5a:0f:0e:4b:22:39:01:72: d0:12:20:63:54:79:17:d7:f0:f6:51:c5:8e:6f:ea: 1b:59:2a:88:39:3a:69:e0:59:42:d0:aa:73:1f:72: 28:19:87:00:b4:ff:63:db:79:34:d1:e7:d5:ec:95: d0:3d:2f:48:36:66:93:9f:0a:3a:e5:9b:38:ca:fb: fd:b2:7d:88:63:c6:96:7f:75:a8:b7:da:17:68:e4: 52:cc:42:c2:d5:cb:6a:ee:51:76:4e:4a:59:4f:48: d7:19:5f:0a:c9:9f:2a:dd:d0:9f:89:55:7c:45:84: 00:41:41:94:1c:16:5f:84:6a:de:22:d0:65:d6:ac: 90:e4:7c:61:f9:86:5a:be:91:49:d4:06:9f:61:b3: 12:b7:6f:a9:4a:da:09:19:0b:a1:e2:59:c5:ee:d7: 06:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F5:30:53:87:5F:6D:56:26:50:34:3B:20:E9:37:CC:0C:EB:89:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9e89375-e9e1-3964-9d84-0a887ebf94cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.73.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:90:c3:ac:bb:f4:c1:17:bf:85:f3:d1:ef:e0:78:1f:64:ba: 24:a9:c1:15:9b:c5:fc:db:a2:43:7b:f9:5c:6b:2a:3f:86:69: d8:21:4b:b2:0c:0e:f1:db:fe:c4:49:04:5f:5b:f3:1d:d6:6f: 8e:84:8a:1a:34:d3:4f:ef:ed:d6:a8:d9:0e:e5:2d:51:bd:38: 52:2a:6d:cc:9e:90:b5:f2:68:f3:b5:a7:8f:0f:63:af:a9:a4: e6:f4:1d:da:e0:91:db:56:db:23:ac:b6:d7:27:bb:e5:b7:de: 4b:2e:c6:45:e0:c3:06:ee:3c:51:73:d1:0d:42:44:59:f1:d2: f8:9b:3e:e1:18:cd:0e:50:7d:a5:ec:59:5d:50:39:d2:6f:9e: 2b:c0:45:df:52:da:28:1c:8a:fc:69:28:4a:54:19:72:28:bb: 37:85:31:42:28:4d:4e:3b:6c:44:47:d5:43:6b:9a:91:46:c4: 00:56:37:56:ff:e0:00:84:95:ba:56:bc:4f:bb:22:80:4c:a7: c4:1d:f2:58:d4:0c:8c:cd:51:87:63:32:8a:0c:c0:0c:1f:6e: c7:b9:13:40:3d:8b:9a:49:87:3e:1d:8c:9c:85:5d:bc:83:59: 37:23:fa:1f:ea:32:6b:d4:9b:73:51:44:19:8a:75:24:98:f5: ef:6c:fe:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+EAf8DnEoTRICLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk YmViN2I4YzQtNTRlMC00YzkwLWFiNjgtYTY5MWNjOWNmM2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlKVzgVGoIXs1oq9gMn/C0Aa4IbmFbOCHQu6 58wrGVsmLuRPaqhjF/ALjeRITt4Pg5C+jWxmZS+DdLzbZFuBL+//UTt/0hq+KFy9 X7XfeHOFJxxSD2fYyY4Miz8ne2/JWg8OSyI5AXLQEiBjVHkX1/D2UcWOb+obWSqI OTpp4FlC0KpzH3IoGYcAtP9j23k00efV7JXQPS9INmaTnwo65Zs4yvv9sn2IY8aW f3Wot9oXaORSzELC1ctq7lF2TkpZT0jXGV8KyZ8q3dCfiVV8RYQAQUGUHBZfhGre ItBl1qyQ5Hxh+YZavpFJ1AafYbMSt2+pStoJGQuh4lnF7tcGxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/1MFOHX21WJlA0OyDpN8wM64ncMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTllODkzNzUtZTllMS0z OTY0LTlkODQtMGE4ODdlYmY5NGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0nQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGQw6y79MEXv4Xz0e/geB9kuiSpwRWbxfzbokN7+VxrKj+GadghS7IM DvHb/sRJBF9b8x3Wb46Eiho000/v7dao2Q7lLVG9OFIqbcyekLXyaPO1p48PY6+p pOb0HdrgkdtW2yOsttcnu+W33ksuxkXgwwbuPFFz0Q1CRFnx0vibPuEYzQ5QfaXs WV1QOdJvnivARd9S2igcivxpKEpUGXIouzeFMUIoTU47bERH1UNrmpFGxABWN1b/ 4ACElbpWvE+7IoBMp8Qd8ljUDIzNUYdjMooMwAwfbse5E0A9i5pJhz4djJyFXbyD WTcj+h/qMmvUm3NRRBmKdSSY9e9s/l4= -----END CERTIFICATE-----Generated at Thu Jun 5 18:40:10 2025 by rpki-client