$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f201b605-14f1-3782-8f1d-9dc28b453cf6.roa File: f201b605-14f1-3782-8f1d-9dc28b453cf6.roa (raw, json) Hash identifier: 8tTMYSJBBOCN5J5Eu1OHlAgdhjA7RvR/AskCbClq7NI= Subject key identifier: DE:04:A8:7C:D3:41:7A:02:6D:FD:EB:5F:0E:A1:13:72:C4:CD:FA:AF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A03A55E8F7DFDAA7C61CD1800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f201b605-14f1-3782-8f1d-9dc28b453cf6.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 16625 IP address blocks: 23.11.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:5e:8f:7d:fd:aa:7c:61:cd:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=90470757-f6e6-420e-8b21-3453a04a59ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c1:74:8c:05:82:82:89:92:cb:2c:b6:16:56: ae:d7:f6:1a:3d:85:bd:64:e6:d2:7b:3b:96:df:79: 28:46:9e:d6:f4:9d:71:95:fd:b0:c3:ec:1c:8e:94: 28:1a:ba:49:6e:4a:4e:0e:be:ab:f8:0c:fe:19:92: 95:b6:e7:11:c0:bd:89:77:5d:cb:1a:a0:17:e9:f1: 5f:2e:06:a9:83:0d:5f:d7:e5:46:5b:57:be:20:bf: ae:d6:d3:49:6d:33:3b:ed:0d:3b:de:c7:4f:a7:51: 5e:8c:d3:8c:84:45:c5:a2:73:18:63:cc:a9:ae:ae: a8:c1:96:d7:33:b1:39:a8:41:20:43:2d:9e:91:61: 19:d7:a5:61:bc:43:a8:17:70:e2:81:d7:19:99:3c: 35:8a:49:03:55:57:91:07:3d:68:63:de:d1:e6:47: 31:e5:bb:ca:2a:fd:95:d1:7c:dd:e5:5e:42:21:ce: d0:71:38:2a:45:69:81:ae:a5:27:b0:b5:e5:8b:61: 7a:e0:6a:4e:24:fd:20:7f:56:fd:f5:e6:8c:5b:84: 1a:bd:eb:e0:2b:fa:d4:df:57:25:08:9b:96:66:e7: 16:86:41:31:b5:d9:57:ea:8c:27:4b:6e:38:34:c5: ac:27:b0:36:00:cf:73:db:3c:85:d4:65:38:9c:ab: 72:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:04:A8:7C:D3:41:7A:02:6D:FD:EB:5F:0E:A1:13:72:C4:CD:FA:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f201b605-14f1-3782-8f1d-9dc28b453cf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.11.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:c3:c9:ff:3e:ba:80:0b:62:95:4f:7b:44:2f:93:cd:18:99: 4c:31:a9:0b:bf:a2:fb:2c:75:c3:8a:fc:10:b0:0e:4c:9b:b4: 02:5d:45:44:79:0b:ca:90:59:41:0c:d9:9e:71:ad:f2:1f:a6: c1:5b:78:8f:da:dd:0d:3b:e8:be:3a:54:c7:08:5b:2a:07:d5: f0:64:66:2b:ab:8b:57:c6:02:62:eb:d9:91:58:d1:9b:a4:33: 77:8e:1c:93:24:f2:b6:c0:3a:3c:2a:d2:87:c4:7b:4b:1b:25: 3f:cc:11:45:d7:6d:ef:15:73:b5:e5:64:ba:05:85:a2:c6:80: 77:c2:53:bd:5b:d5:e2:a8:e3:8c:f0:76:8a:37:ad:5b:cd:93: 72:d2:fe:e5:8e:af:7b:a1:8d:ed:56:22:89:09:99:14:88:4e: 49:b4:27:d6:60:3b:c4:61:33:95:95:04:3f:f8:07:bf:4e:0f: 88:bb:6c:73:b7:aa:04:5b:27:32:13:e8:a8:7f:3e:d0:10:1c: 96:9d:63:b6:93:b6:81:b8:98:27:d2:3a:fa:7f:0a:82:74:19: 9b:f1:23:1c:c3:9d:71:de:93:d5:36:73:98:22:e7:07:0d:be: b8:b2:58:0f:14:94:63:f5:75:af:11:58:62:0d:82:cd:1c:2f: 09:4b:b4:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpV6Pff2qfGHNGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk OTA0NzA3NTctZjZlNi00MjBlLThiMjEtMzQ1M2EwNGE1OWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18F0jAWCgomSyyy2Flau1/YaPYW9ZObSezuW 33koRp7W9J1xlf2ww+wcjpQoGrpJbkpODr6r+Az+GZKVtucRwL2Jd13LGqAX6fFf Lgapgw1f1+VGW1e+IL+u1tNJbTM77Q073sdPp1FejNOMhEXFonMYY8yprq6owZbX M7E5qEEgQy2ekWEZ16VhvEOoF3DigdcZmTw1ikkDVVeRBz1oY97R5kcx5bvKKv2V 0Xzd5V5CIc7QcTgqRWmBrqUnsLXli2F64GpOJP0gf1b99eaMW4QavevgK/rU31cl CJuWZucWhkExtdlX6ownS244NMWsJ7A2AM9z2zyF1GU4nKtyBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4EqHzTQXoCbf3rXw6hE3LEzfqvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjIwMWI2MDUtMTRmMS0z NzgyLThmMWQtOWRjMjhiNDUzY2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/Dyf8+uoALYpVPe0Qvk80YmUwxqQu/ovssdcOK/BCwDkybtAJdRUR5 C8qQWUEM2Z5xrfIfpsFbeI/a3Q076L46VMcIWyoH1fBkZiuri1fGAmLr2ZFY0Zuk M3eOHJMk8rbAOjwq0ofEe0sbJT/MEUXXbe8Vc7XlZLoFhaLGgHfCU71b1eKo44zw doo3rVvNk3LS/uWOr3uhje1WIokJmRSITkm0J9ZgO8RhM5WVBD/4B79OD4i7bHO3 qgRbJzIT6Kh/PtAQHJadY7aTtoG4mCfSOvp/CoJ0GZvxIxzDnXHek9U2c5gi5wcN vriyWA8UlGP1da8RWGINgs0cLwlLtJA= -----END CERTIFICATE-----Generated at Sat Jun 7 14:49:58 2025 by rpki-client