$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9bec768c-da8a-394a-9c6f-2cee7025dd7a.roa File: 9bec768c-da8a-394a-9c6f-2cee7025dd7a.roa (raw, json) Hash identifier: oiGlGCl9+tvDEGk1Nn38r/ALmNty6/mdq3ZjIOgfAGo= Subject key identifier: 79:D4:08:09:F3:DC:73:1A:7B:6B:6F:B4:54:9F:DD:47:89:8E:14:C8 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285849F2E5308F2BF6E0544AE7B900 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9bec768c-da8a-394a-9c6f-2cee7025dd7a.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 209 IP address blocks: 64.213.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:30:8f:2b:f6:e0:54:4a:e7:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=39673f2a-7df2-448b-b8cb-1f5aa51f5c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c4:08:da:1a:f0:6e:82:0c:d6:dd:1b:44:a5: 98:43:5c:73:e4:ed:e5:c7:9c:02:6b:a9:fe:05:d2: 47:b9:fd:16:ea:d3:ae:e2:51:51:56:b6:6f:80:9b: 8c:4c:5c:4b:fa:4b:da:5e:4d:b9:75:0e:df:b9:aa: d3:3b:de:91:02:42:3e:d3:9b:bc:62:00:07:76:76: e7:ae:f1:9c:d4:2e:86:eb:11:b2:94:5b:ce:40:b9: e2:b9:61:21:04:87:be:84:1b:82:0e:3d:3c:d1:04: 17:dc:93:7d:cb:dd:f8:43:1b:e9:29:3d:58:cb:54: e8:7f:51:54:5a:69:0d:f2:27:f7:5d:26:e0:b3:91: 7c:54:9f:fe:9b:f5:ef:af:bb:e8:7b:95:62:02:0d: 05:29:bc:12:f6:28:3a:17:3a:81:03:01:49:af:23: 25:e4:4c:f2:1e:4b:87:a6:fa:08:fa:31:98:65:47: d5:d1:47:e0:b5:97:91:df:f4:b9:78:de:86:f8:4f: e1:bd:27:65:60:c2:71:f3:47:47:02:b2:fa:a2:45: 33:ee:ba:dc:65:89:65:10:35:02:2c:e0:66:d2:e2: cc:7e:a8:13:ca:18:6d:6a:e2:6a:c1:79:93:4f:c2: c6:97:21:36:81:7a:7a:32:e9:73:2f:55:4b:93:d7: cf:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D4:08:09:F3:DC:73:1A:7B:6B:6F:B4:54:9F:DD:47:89:8E:14:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9bec768c-da8a-394a-9c6f-2cee7025dd7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.213.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:57:53:2c:66:ca:c9:bc:92:68:45:e9:53:23:27:64:76:c8: d2:aa:1f:8e:5a:1d:f9:77:f6:13:f6:3a:ec:22:3a:92:75:8f: f1:28:01:72:af:87:82:12:fe:e1:a7:43:9d:d5:bd:03:70:11: 4f:eb:68:57:ab:29:dd:f9:dd:4a:b9:a0:fc:8d:d1:f7:cc:e3: 90:bd:19:d2:11:ec:e5:ae:bf:31:5e:da:04:cc:14:c7:9c:c3: 5e:9e:be:8d:56:cd:00:b8:af:0a:7f:4e:d2:a6:eb:fe:5f:4b: 73:23:ec:c9:7e:b9:04:6f:4d:da:8b:e2:ec:08:9c:e3:4c:ae: 7a:07:6c:6b:47:1e:bb:7f:18:99:7c:a0:48:dd:ad:68:be:54: a0:17:52:80:cb:b3:36:5b:62:52:33:50:e6:7e:61:20:12:d6: 5f:8d:82:99:af:85:9d:62:b8:45:04:72:df:aa:54:05:10:da: 05:f6:db:d9:6b:61:bc:b0:38:47:12:8d:fc:fc:ba:56:48:af: 6a:f8:e9:cb:0f:76:55:1a:b1:ec:5d:b2:45:bd:c2:16:20:44: 25:59:30:36:8d:1e:1f:2a:aa:72:b3:d4:41:a0:1f:73:7e:5c: 52:f2:6d:0d:2c:4b:d8:a0:f5:d1:44:2f:d7:ee:0f:e8:97:5e: 4c:35:83:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5TCPK/bgVErnuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk Mzk2NzNmMmEtN2RmMi00NDhiLWI4Y2ItMWY1YWE1MWY1YzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcQI2hrwboIM1t0bRKWYQ1xz5O3lx5wCa6n+ BdJHuf0W6tOu4lFRVrZvgJuMTFxL+kvaXk25dQ7fuarTO96RAkI+05u8YgAHdnbn rvGc1C6G6xGylFvOQLniuWEhBIe+hBuCDj080QQX3JN9y934QxvpKT1Yy1Tof1FU WmkN8if3XSbgs5F8VJ/+m/Xvr7voe5ViAg0FKbwS9ig6FzqBAwFJryMl5EzyHkuH pvoI+jGYZUfV0UfgtZeR3/S5eN6G+E/hvSdlYMJx80dHArL6okUz7rrcZYllEDUC LOBm0uLMfqgTyhhtauJqwXmTT8LGlyE2gXp6MulzL1VLk9fPCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHnUCAnz3HMae2tvtFSf3UeJjhTIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOWJlYzc2OGMtZGE4YS0z OTRhLTljNmYtMmNlZTcwMjVkZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQNVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdXUyxmysm8kmhF6VMjJ2R2yNKqH45aHfl39hP2OuwiOpJ1j/EoAXKv h4IS/uGnQ53VvQNwEU/raFerKd353Uq5oPyN0ffM45C9GdIR7OWuvzFe2gTMFMec w16evo1WzQC4rwp/TtKm6/5fS3Mj7Ml+uQRvTdqL4uwInONMrnoHbGtHHrt/GJl8 oEjdrWi+VKAXUoDLszZbYlIzUOZ+YSAS1l+NgpmvhZ1iuEUEct+qVAUQ2gX229lr YbywOEcSjfz8ulZIr2r46csPdlUasexdskW9whYgRCVZMDaNHh8qqnKz1EGgH3N+ XFLybQ0sS9ig9dFEL9fuD+iXXkw1g18= -----END CERTIFICATE-----Generated at Mon Jun 16 13:27:51 2025 by rpki-client