$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ff7898c3-7996-33eb-8215-9ca64f698bd9.roa File: ff7898c3-7996-33eb-8215-9ca64f698bd9.roa (raw, json) Hash identifier: nBLIdLCrrOVELLvsmqKpavatKMjXsyXHwdmUqv0TGmk= Subject key identifier: D8:18:BA:1C:61:94:22:75:75:CC:6C:F0:BD:74:23:BB:FA:CE:B9:B3 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285849E7BA7168E5BD543AAAF04680 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ff7898c3-7996-33eb-8215-9ca64f698bd9.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 19905 IP address blocks: 64.209.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:71:68:e5:bd:54:3a:aa:f0:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=5aa7e04e-1afb-45b9-9495-5bafcd9940ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2a:77:03:53:30:9f:cf:dd:92:09:a9:c7:0a: 0e:ca:10:59:64:b8:a5:40:46:98:dc:39:12:3e:b9: ed:96:b9:91:6c:ae:02:c8:af:d6:82:2e:e2:63:c6: e1:40:95:67:67:f8:42:49:a5:a1:51:89:78:e4:ca: 8b:8e:9b:86:6d:1a:d9:92:86:ed:68:de:14:c6:42: 7e:d4:96:95:36:17:b7:ff:3b:f2:0e:6f:4a:71:2c: 7f:f0:26:28:ad:e7:ae:e3:8b:bc:06:31:3b:4a:44: c7:b4:fd:9e:9e:39:da:80:47:e0:e1:fc:5d:92:bd: ac:73:21:80:16:48:71:8b:83:43:34:11:79:5e:24: 71:9c:79:aa:21:34:7d:b4:af:76:b5:94:31:41:28: e5:4e:26:25:34:97:d3:c1:ff:be:61:70:3e:ba:3b: 4c:cb:02:05:70:4c:c1:52:c8:7d:db:07:96:5c:a0: 4f:8e:fd:12:9c:b3:d2:91:33:f0:fb:9d:d6:b0:66: 90:07:74:a0:8d:e1:be:b0:81:75:d5:3b:5c:fe:3e: d5:ab:77:57:66:48:e6:c1:20:dc:d7:7c:db:30:3f: 52:53:e4:e9:b3:39:85:da:5f:14:d5:4a:fa:6e:da: 4a:cd:23:bd:06:75:d2:0a:1d:6b:c9:45:72:0e:bb: f2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:18:BA:1C:61:94:22:75:75:CC:6C:F0:BD:74:23:BB:FA:CE:B9:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ff7898c3-7996-33eb-8215-9ca64f698bd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.209.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:81:6c:4b:af:be:fe:cd:5a:06:a1:f9:3f:97:33:21:4a:43: 16:df:10:15:2b:9e:82:3b:f1:eb:0d:0f:0f:db:7a:4e:0f:56: 00:22:a4:1b:3e:83:71:f4:46:84:a1:7f:9f:b4:39:eb:d3:e6: 26:f4:48:22:da:67:e4:84:0e:c0:63:6f:b7:7c:41:1f:39:e5: d7:c3:d0:70:32:0f:ba:0b:05:f5:af:72:38:9a:83:d6:4f:83: 47:20:37:5f:10:31:2a:7d:80:a7:1e:c0:d4:36:e2:b8:87:93: e2:77:80:7c:59:b3:c6:7e:e8:38:eb:63:6a:c9:e7:cb:4f:6e: 7f:bf:1a:f1:cd:a1:69:c6:dc:fb:d8:ce:e7:a0:e3:5c:66:fe: 4d:0d:b5:17:1a:67:6f:f8:96:65:4b:a7:de:32:74:1d:4d:3e: 35:c9:b1:46:ad:76:7b:49:52:85:7b:74:f6:c1:1b:74:65:f7: 74:24:eb:49:ec:78:06:85:b9:22:a7:d1:50:1c:bd:fa:0e:1c: d4:53:72:b6:b1:1b:6b:df:3e:1b:8f:d8:bc:71:6d:8f:1b:7e: 57:0d:b2:90:6e:d3:8c:5b:b1:14:67:d4:24:94:51:ec:3b:a2: 53:25:5d:84:43:ab:1c:06:b7:53:85:ce:34:15:55:85:ab:cc: 8d:d7:ff:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnunFo5b1UOqrwRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk NWFhN2UwNGUtMWFmYi00NWI5LTk0OTUtNWJhZmNkOTk0MGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnip3A1Mwn8/dkgmpxwoOyhBZZLilQEaY3DkS PrntlrmRbK4CyK/Wgi7iY8bhQJVnZ/hCSaWhUYl45MqLjpuGbRrZkobtaN4UxkJ+ 1JaVNhe3/zvyDm9KcSx/8CYoreeu44u8BjE7SkTHtP2enjnagEfg4fxdkr2scyGA Fkhxi4NDNBF5XiRxnHmqITR9tK92tZQxQSjlTiYlNJfTwf++YXA+ujtMywIFcEzB Ush92weWXKBPjv0SnLPSkTPw+53WsGaQB3SgjeG+sIF11Ttc/j7Vq3dXZkjmwSDc 13zbMD9SU+TpszmF2l8U1Ur6btpKzSO9BnXSCh1ryUVyDrvykwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgYuhxhlCJ1dcxs8L10I7v6zrmzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZmY3ODk4YzMtNzk5Ni0z M2ViLTgyMTUtOWNhNjRmNjk4YmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQNFZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqBbEuvvv7NWgah+T+XMyFKQxbfEBUrnoI78esNDw/bek4PVgAipBs+ g3H0RoShf5+0OevT5ib0SCLaZ+SEDsBjb7d8QR855dfD0HAyD7oLBfWvcjiag9ZP g0cgN18QMSp9gKcewNQ24riHk+J3gHxZs8Z+6DjrY2rJ58tPbn+/GvHNoWnG3PvY zueg41xm/k0NtRcaZ2/4lmVLp94ydB1NPjXJsUatdntJUoV7dPbBG3Rl93Qk60ns eAaFuSKn0VAcvfoOHNRTcraxG2vfPhuP2LxxbY8bflcNspBu04xbsRRn1CSUUew7 olMlXYRDqxwGt1OFzjQVVYWrzI3X/zo= -----END CERTIFICATE-----Generated at Sun Jun 15 03:49:56 2025 by rpki-client