$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa49b883-794d-3e13-88ce-dafc08d50090.roa File: aa49b883-794d-3e13-88ce-dafc08d50090.roa (raw, json) Hash identifier: gTtPU4bVcqlFNPWzHkUGGkniZetm/F2ru9VwcE0I+a8= Subject key identifier: E4:F4:30:09:61:40:F6:08:96:50:C4:D4:AB:F9:B1:37:47:15:BB:CC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849860474B61E62460DE71AFA30 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa49b883-794d-3e13-88ce-dafc08d50090.roa Signing time: Mon 14 Apr 2025 13:00:59 +0000 ROA not before: Mon 14 Apr 2025 13:00:59 +0000 ROA not after: Sun 13 Jul 2025 13:00:59 +0000 asID: 16625 IP address blocks: 23.199.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:04:74:b6:1e:62:46:0d:e7:1a:fa:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 14 13:00:59 2025 GMT Not After : Jul 13 13:00:59 2025 GMT Subject: CN=280bbf12-671d-4498-b020-1b17026bf9e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cb:55:fb:57:6c:52:6d:7c:01:54:08:79:48: c8:17:70:77:e5:ec:ef:56:91:a6:b3:d1:00:17:54: da:58:ce:c3:fc:aa:7e:50:2f:c2:e9:53:96:d5:6e: 9e:e4:c3:56:1c:21:a2:c8:30:e5:c0:60:91:d8:ba: a6:6a:46:5a:db:9a:c5:58:e7:51:ad:27:78:bf:e3: c5:68:a5:8f:36:3d:04:89:87:9c:ed:87:4c:a4:79: d2:94:3c:7d:d2:94:23:cf:db:22:07:69:2e:be:d2: 1d:2c:26:9c:6d:61:9b:99:1c:dc:93:f7:07:33:14: 00:87:53:1e:bc:e2:72:a1:65:49:0e:e2:cb:e7:78: 6d:87:ed:67:0c:ef:b5:50:9b:85:60:9b:32:7d:68: 51:14:86:cc:e2:22:1b:fa:ef:d0:0f:e1:84:c1:a7: 7a:d8:2d:45:21:58:0c:7f:b7:e8:0a:9e:21:3f:18: 32:ea:16:81:e1:0a:50:ce:c5:8e:27:55:a8:4d:77: 6a:b9:67:8b:8d:da:af:16:59:e4:41:60:42:fd:ed: a7:47:4b:d9:6c:96:bb:4d:c1:38:d8:9d:e4:d3:95: 5a:f7:d0:3e:0f:75:e6:05:97:53:09:10:1d:f9:fa: d8:c8:b8:19:3e:13:5d:16:d4:a4:60:32:90:59:48: 15:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F4:30:09:61:40:F6:08:96:50:C4:D4:AB:F9:B1:37:47:15:BB:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa49b883-794d-3e13-88ce-dafc08d50090.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:22:25:d8:b9:3e:6b:13:f3:2b:e6:ec:31:29:87:37:a0:a2: 4c:34:2f:4d:9c:8b:4c:d6:b2:36:d7:8b:f2:b2:c7:a1:6f:c4: 35:46:c1:5f:07:2a:61:16:94:e4:64:0f:cc:ec:67:34:9a:68: 9c:7b:31:51:54:b3:c0:fd:33:22:01:0f:61:03:e7:19:b1:d6: 0e:6f:dc:72:3a:7c:03:2a:53:d5:2f:5b:22:b5:1c:d7:49:75: 57:e8:75:aa:30:12:94:f8:f2:70:90:cc:16:83:46:22:55:b3: 01:aa:8f:e1:fe:c3:db:2e:4c:7a:19:d7:36:3a:e6:17:21:89: bb:75:d5:0d:e8:05:eb:8e:89:cc:70:a1:c7:c1:14:cd:10:63: fe:1a:ac:f0:15:68:0a:1e:f4:36:5c:c6:a5:f6:1f:55:78:c1: 56:c2:be:d1:0a:6e:82:b0:57:a6:bc:8c:6b:db:72:ff:5a:d2: 66:5c:8d:4c:85:19:e9:bd:e3:89:4c:ad:b3:5e:44:31:bc:96: 7d:32:c0:a3:93:5c:40:4e:dd:dc:c6:0c:3e:d0:e5:be:4e:21: d2:6d:fa:ec:a3:ca:be:b9:e2:18:7e:f4:d1:ad:79:bd:e7:05: 63:26:b0:8d:63:d8:68:c8:0f:40:ef:7a:94:a3:e2:52:50:8b: f9:9c:0e:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmGBHS2HmJGDeca+jAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNDEzMDA1OVoXDTI1MDcxMzEzMDA1OVowLzEtMCsGA1UEAxMk MjgwYmJmMTItNjcxZC00NDk4LWIwMjAtMWIxNzAyNmJmOWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMtV+1dsUm18AVQIeUjIF3B35ezvVpGms9EA F1TaWM7D/Kp+UC/C6VOW1W6e5MNWHCGiyDDlwGCR2LqmakZa25rFWOdRrSd4v+PF aKWPNj0EiYec7YdMpHnSlDx90pQjz9siB2kuvtIdLCacbWGbmRzck/cHMxQAh1Me vOJyoWVJDuLL53hth+1nDO+1UJuFYJsyfWhRFIbM4iIb+u/QD+GEwad62C1FIVgM f7foCp4hPxgy6haB4QpQzsWOJ1WoTXdquWeLjdqvFlnkQWBC/e2nR0vZbJa7TcE4 2J3k05Va99A+D3XmBZdTCRAd+frYyLgZPhNdFtSkYDKQWUgV8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOT0MAlhQPYIllDE1Kv5sTdHFbvMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWE0OWI4ODMtNzk0ZC0z ZTEzLTg4Y2UtZGFmYzA4ZDUwMDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8ckMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAiJdi5PmsT8yvm7DEphzegokw0L02ci0zWsjbXi/Kyx6FvxDVGwV8H KmEWlORkD8zsZzSaaJx7MVFUs8D9MyIBD2ED5xmx1g5v3HI6fAMqU9UvWyK1HNdJ dVfodaowEpT48nCQzBaDRiJVswGqj+H+w9suTHoZ1zY65hchibt11Q3oBeuOicxw ocfBFM0QY/4arPAVaAoe9DZcxqX2H1V4wVbCvtEKboKwV6a8jGvbcv9a0mZcjUyF Gem944lMrbNeRDG8ln0ywKOTXEBO3dzGDD7Q5b5OIdJt+uyjyr654hh+9NGteb3n BWMmsI1j2GjID0DvepSj4lJQi/mcDrU= -----END CERTIFICATE-----Generated at Sat Jun 7 13:57:28 2025 by rpki-client