$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4f92e90-40b1-3185-9602-d30ebebb5b91.roa File: d4f92e90-40b1-3185-9602-d30ebebb5b91.roa (raw, json) Hash identifier: TA33S9UuGeG0ie2AnDaL8tmLLox31aLVBKSe2y19a4k= Subject key identifier: 54:DA:B2:F7:9F:48:BD:B9:4C:5A:54:F8:83:79:34:80:10:7B:48:44 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A03A56EAE8180BC1F25C4F26C Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4f92e90-40b1-3185-9602-d30ebebb5b91.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 16625 IP address blocks: 23.12.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:6e:ae:81:80:bc:1f:25:c4:f2:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=aabf8002-911b-4e44-90ab-277b5c5b85a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e5:03:e2:36:59:81:1e:e1:65:93:1c:cc:57: de:a0:81:a6:3f:f3:73:51:bf:e4:fc:cc:1f:ee:01: ca:df:9a:96:70:50:82:63:6f:65:7b:63:67:36:7f: ab:64:04:3d:c4:43:64:93:de:18:ad:0d:5f:d5:a0: ab:c8:6d:26:6d:e7:a8:84:33:85:3f:6d:12:7a:65: 24:28:71:53:28:3b:ce:fc:12:d6:25:7f:70:74:18: a2:12:63:e7:aa:77:a8:c5:54:20:26:a1:27:b5:c8: e2:e6:f5:5d:04:fa:49:f1:57:0a:50:2e:da:a7:91: b6:d8:e0:c8:1b:ae:e6:14:66:62:60:b2:2c:66:f5: a6:82:a9:6a:7d:a9:99:25:8b:a2:75:4a:e2:4c:a0: f7:0f:39:61:15:b0:7f:ac:05:7c:72:51:ca:ac:69: 4e:e7:06:b8:16:0e:77:33:68:85:b4:15:72:3e:51: 5f:8d:00:3b:24:2f:3c:0f:86:20:78:ef:58:b9:7c: 60:be:70:47:1f:8b:aa:83:e8:1c:8b:65:9b:6a:dc: db:de:95:b4:66:19:61:c0:0b:b4:1a:39:ea:18:fe: b8:6e:83:26:e6:7c:f3:80:d1:27:37:7c:37:76:f6: 71:d4:64:10:71:8d:42:ee:da:3e:36:bf:04:e8:ec: 19:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DA:B2:F7:9F:48:BD:B9:4C:5A:54:F8:83:79:34:80:10:7B:48:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4f92e90-40b1-3185-9602-d30ebebb5b91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.12.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:f2:b3:27:a4:1e:ee:63:63:c7:81:ad:cf:05:d6:d8:a8:c9: a5:4b:e8:1b:87:53:9e:1b:51:59:00:21:db:0a:d4:e4:9f:89: 0a:f9:29:66:0c:92:2d:74:4d:2d:57:ba:aa:f7:c0:8d:c2:47: db:48:c3:8b:5f:d4:60:07:ef:61:24:51:56:de:a9:f3:ac:e2: a2:0e:52:ed:fc:2a:19:a2:b6:55:fc:90:18:f0:ba:b3:01:2c: de:15:93:c3:83:a5:2e:39:4b:af:06:1e:7b:c9:2e:63:0c:86: 9a:19:37:d2:78:c0:bb:bf:65:4c:0f:86:fb:c8:9a:64:72:d4: d2:75:68:6f:14:47:00:f8:fa:1a:f9:2c:d3:3c:b6:1a:32:05: 3a:e6:63:74:bb:eb:b9:16:9c:f2:b0:bc:3d:e9:21:2f:1d:ba: 9a:cc:4e:8b:a5:b8:c0:92:1c:1d:1d:b5:48:88:af:43:0f:7b: 8b:7e:a1:35:4f:c4:19:41:3f:63:20:db:fd:22:fc:73:55:1b: 73:19:c0:57:75:2a:fe:8f:ca:7f:3e:c8:6a:d1:c0:bb:72:a1: ea:f4:c5:f2:09:6e:7d:a8:85:f5:b5:16:29:c5:e2:72:2b:13: 4f:46:af:62:39:b3:af:6c:7c:d4:35:79:41:36:cb:90:7c:97: 91:af:d2:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpW6ugYC8HyXE8mwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk YWFiZjgwMDItOTExYi00ZTQ0LTkwYWItMjc3YjVjNWI4NWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeUD4jZZgR7hZZMczFfeoIGmP/NzUb/k/Mwf 7gHK35qWcFCCY29le2NnNn+rZAQ9xENkk94YrQ1f1aCryG0mbeeohDOFP20SemUk KHFTKDvO/BLWJX9wdBiiEmPnqneoxVQgJqEntcji5vVdBPpJ8VcKUC7ap5G22ODI G67mFGZiYLIsZvWmgqlqfamZJYuidUriTKD3DzlhFbB/rAV8clHKrGlO5wa4Fg53 M2iFtBVyPlFfjQA7JC88D4YgeO9YuXxgvnBHH4uqg+gci2Wbatzb3pW0ZhlhwAu0 GjnqGP64boMm5nzzgNEnN3w3dvZx1GQQcY1C7to+Nr8E6OwZXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTasvefSL25TFpU+IN5NIAQe0hEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDRmOTJlOTAtNDBiMS0z MTg1LTk2MDItZDMwZWJlYmI1YjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDysyekHu5jY8eBrc8F1tioyaVL6BuHU54bUVkAIdsK1OSfiQr5KWYM ki10TS1Xuqr3wI3CR9tIw4tf1GAH72EkUVbeqfOs4qIOUu38KhmitlX8kBjwurMB LN4Vk8ODpS45S68GHnvJLmMMhpoZN9J4wLu/ZUwPhvvImmRy1NJ1aG8URwD4+hr5 LNM8thoyBTrmY3S767kWnPKwvD3pIS8duprMTouluMCSHB0dtUiIr0MPe4t+oTVP xBlBP2Mg2/0i/HNVG3MZwFd1Kv6Pyn8+yGrRwLtyoer0xfIJbn2ohfW1FinF4nIr E09Gr2I5s69sfNQ1eUE2y5B8l5Gv0kM= -----END CERTIFICATE-----Generated at Sat Jun 7 18:57:13 2025 by rpki-client