$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6db7d794-a7c6-38ad-935d-5abaa18d8002.roa File: 6db7d794-a7c6-38ad-935d-5abaa18d8002.roa (raw, json) Hash identifier: 7pApbNDn8cXHyP3GVG1un42iRIqlckKpvEEa9ofryBo= Subject key identifier: 15:B1:3E:8E:C9:1C:E5:E5:4E:C8:C2:56:57:73:DC:89:7F:A3:11:C0 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584A3CE02B83774F815FA916CA00 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6db7d794-a7c6-38ad-935d-5abaa18d8002.roa Signing time: Thu 19 Jun 2025 01:00:50 +0000 ROA not before: Thu 19 Jun 2025 01:00:50 +0000 ROA not after: Wed 17 Sep 2025 01:00:50 +0000 asID: 31898 IP address blocks: 23.239.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:e0:2b:83:77:4f:81:5f:a9:16:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jun 19 01:00:50 2025 GMT Not After : Sep 17 01:00:50 2025 GMT Subject: CN=8ff6a999-3d34-455f-a9fa-366ccd2af966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:be:1e:d1:2b:5c:ff:e2:82:f3:9a:50:ef:a3: 85:bb:83:1b:e3:b1:7d:8d:cb:78:30:ac:8b:d2:6a: 47:97:be:b8:28:a9:af:96:c9:fd:35:ee:57:10:10: e5:09:28:d0:e6:64:fb:fe:99:a5:18:70:bb:78:4b: 8a:36:94:36:0f:41:b2:be:35:ac:6f:fa:d0:15:60: d2:c1:c9:a6:ec:29:9d:42:d1:b4:0f:19:2d:fc:81: ec:3a:be:6a:57:0e:e0:ab:b1:a2:ec:e0:78:d1:de: 37:90:36:d9:cb:fe:08:7f:31:b5:4f:b7:d0:55:80: 7e:fd:62:55:86:f7:7c:8c:7e:0d:8c:3a:72:53:f7: 45:f1:86:d5:26:c4:6c:12:b5:ff:d5:c1:1a:bb:0c: b0:ce:5a:6b:fc:67:e4:f2:c7:d7:b5:e1:5c:f3:46: 20:35:65:99:78:cf:74:e7:ee:35:35:1f:aa:da:f5: a0:f9:15:f7:3e:6f:70:b7:62:fb:e8:ba:95:ba:05: 8e:64:e7:86:4e:d9:87:ec:fe:8a:cd:8b:6e:26:4b: fc:55:c3:68:b9:98:a6:8a:66:09:40:8d:39:97:18: b8:71:57:e1:99:ad:28:7a:46:d8:5e:99:db:78:e9: 1b:1a:b1:26:f9:30:46:3e:cb:43:11:c9:42:74:f7: c6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B1:3E:8E:C9:1C:E5:E5:4E:C8:C2:56:57:73:DC:89:7F:A3:11:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6db7d794-a7c6-38ad-935d-5abaa18d8002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:96:ca:75:c1:4f:4d:b7:01:ac:05:8e:22:1f:2b:4e:f8:c6: cb:8f:4d:28:c2:5f:5e:59:2c:13:a0:f6:da:6c:74:41:5f:8e: 39:80:fd:90:b7:b1:2e:c3:d4:cd:48:16:67:ab:ed:2c:1f:b1: 5c:3d:bf:b1:82:00:ff:e6:30:6b:19:9f:fe:8c:6f:74:a6:1b: 6e:eb:94:f4:22:86:d5:ae:29:20:aa:52:bd:10:d6:85:0b:dd: 2e:e7:54:d0:55:80:eb:8b:49:47:13:9f:7e:8b:82:79:57:2a: 47:cb:5f:85:1a:3c:20:2d:53:fb:db:7d:e3:89:ef:c3:34:9d: 5f:7c:d7:06:6a:d1:8a:64:a3:56:86:01:bf:93:39:76:c9:a4: 8e:d8:46:16:48:17:4d:68:66:d0:53:69:9d:47:fa:2a:f2:5b: 7d:94:d6:bc:05:61:85:c7:46:5c:be:c9:66:88:3a:5d:85:b3: 85:cf:17:b5:63:a6:29:43:6e:3f:38:69:f2:59:ec:93:18:ce: f9:24:61:70:6f:f3:76:d9:db:98:83:54:10:59:7f:5b:cf:15: 5e:a8:78:b3:fd:32:ca:cb:46:38:86:8a:15:83:c0:a1:65:2e: c4:4d:43:af:7a:e4:8f:fa:e0:1c:a4:7c:b1:2e:00:63:09:13: 45:62:53:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo84CuDd0+BX6kWygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk OGZmNmE5OTktM2QzNC00NTVmLWE5ZmEtMzY2Y2NkMmFmOTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr4e0Stc/+KC85pQ76OFu4Mb47F9jct4MKyL 0mpHl764KKmvlsn9Ne5XEBDlCSjQ5mT7/pmlGHC7eEuKNpQ2D0GyvjWsb/rQFWDS wcmm7CmdQtG0Dxkt/IHsOr5qVw7gq7Gi7OB40d43kDbZy/4IfzG1T7fQVYB+/WJV hvd8jH4NjDpyU/dF8YbVJsRsErX/1cEauwywzlpr/Gfk8sfXteFc80YgNWWZeM90 5+41NR+q2vWg+RX3Pm9wt2L76LqVugWOZOeGTtmH7P6KzYtuJkv8VcNouZimimYJ QI05lxi4cVfhma0oekbYXpnbeOkbGrEm+TBGPstDEclCdPfG8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWxPo7JHOXlTsjCVldz3Il/oxHAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNmRiN2Q3OTQtYTdjNi0z OGFkLTkzNWQtNWFiYWExOGQ4MDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+/uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOWynXBT023AawFjiIfK074xsuPTSjCX15ZLBOg9tpsdEFfjjmA/ZC3 sS7D1M1IFmer7SwfsVw9v7GCAP/mMGsZn/6Mb3SmG27rlPQihtWuKSCqUr0Q1oUL 3S7nVNBVgOuLSUcTn36LgnlXKkfLX4UaPCAtU/vbfeOJ78M0nV981wZq0Ypko1aG Ab+TOXbJpI7YRhZIF01oZtBTaZ1H+iryW32U1rwFYYXHRly+yWaIOl2Fs4XPF7Vj pilDbj84afJZ7JMYzvkkYXBv83bZ25iDVBBZf1vPFV6oeLP9MsrLRjiGihWDwKFl LsRNQ6965I/64BykfLEuAGMJE0ViU8A= -----END CERTIFICATE-----Generated at Thu Jul 10 13:29:18 2025 by rpki-client