$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/59909e65-5a05-323c-879f-bcfb3a64d534.roa File: 59909e65-5a05-323c-879f-bcfb3a64d534.roa (raw, json) Hash identifier: jNTxm7NVmPppBtMVcitB8xyktgEBIIIUT5toV9mD/7E= Subject key identifier: BC:3C:11:08:FF:8C:82:5A:C8:D5:FD:36:8A:04:94:AF:F9:90:5A:4C Certificate issuer: /CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41 Certificate serial: 010D0C9F43285849CE9A3FF32C9FF9AFDA194A00 Authority key identifier: 42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/59909e65-5a05-323c-879f-bcfb3a64d534.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 397131 IP address blocks: 23.170.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:3f:f3:2c:9f:f9:af:da:19:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=7000939d-a470-448a-91a6-1e6d7682554b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6a:7b:5b:c3:3c:d2:ef:a5:3e:41:d7:a1:1f: 25:2c:37:4a:75:74:14:e0:ed:dd:36:20:df:fb:14: c3:38:2c:2f:81:ba:81:a0:ca:bf:cc:72:64:3f:aa: a7:be:45:7e:90:f2:c4:b0:84:4c:e3:6f:bf:0b:6c: 44:25:c4:d1:49:94:d2:cb:d9:26:6b:d8:32:29:6f: 8e:d4:9a:9a:29:27:c7:84:d9:12:79:a1:2d:9e:21: a1:06:4e:bf:1c:c2:1d:72:ea:1e:29:b4:86:86:2e: 85:35:bd:df:0e:5b:49:23:db:1b:0d:0a:80:11:e8: 8f:70:16:39:87:e1:1a:df:7a:51:07:ca:31:ff:30: de:15:e8:ee:fe:73:8d:6f:3c:8d:b4:6b:6b:7e:9c: a5:87:d5:94:58:6e:3a:b4:6a:53:35:fb:07:51:a6: 8e:56:b8:53:e2:05:16:08:20:22:fb:fe:08:bb:42: 01:f3:e6:8c:a4:59:ab:43:e8:ec:0a:95:d0:db:cc: 20:98:24:6c:40:23:db:41:ce:93:ca:c6:c2:c9:63: 56:67:44:01:24:3e:7d:0e:be:e1:f8:df:7b:b8:79: 58:97:22:90:95:6d:47:d5:a1:af:23:24:af:d0:e0: 27:cf:dd:19:03:b6:01:5f:c0:1b:57:10:b1:57:40: 81:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3C:11:08:FF:8C:82:5A:C8:D5:FD:36:8A:04:94:AF:F9:90:5A:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/59909e65-5a05-323c-879f-bcfb3a64d534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl X509v3 Authority Key Identifier: keyid:42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer sbgp-ipAddrBlock: critical IPv4: 23.170.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:ba:80:95:46:b1:7d:05:e4:f4:9b:15:06:b9:b4:d0:ef:43: fa:e1:41:0c:7c:5d:58:86:37:57:7d:7a:4b:dd:d1:40:d5:e0: ef:c1:27:83:7b:7f:08:d0:f6:82:f0:1e:19:01:c2:fb:61:ca: 13:bf:06:57:a7:3a:bd:b4:5d:17:af:cc:8b:f4:dd:7d:01:3c: 65:e5:e0:69:2b:5a:3e:89:3e:78:af:ab:9c:e4:c5:ca:71:62: dc:85:2a:5b:8d:aa:f6:73:3d:44:c8:a9:cf:b8:f2:26:d1:b7: 02:c5:d2:c3:c2:3b:5e:31:65:fe:3f:08:d5:84:da:7c:f1:32: d2:f8:ea:24:42:30:5c:95:60:69:45:17:cf:c1:47:7e:2e:68: 12:9c:3c:8d:24:fe:8d:3f:0d:d0:40:44:33:23:2f:6b:1f:ff: cb:63:05:f2:f4:52:ea:db:2d:16:2d:1e:a9:07:f7:26:77:89: 16:44:b9:e8:85:1d:41:49:80:13:63:fd:7b:02:17:dc:24:00: 08:63:89:c9:14:d7:db:4b:27:5b:18:a1:cc:64:28:43:3b:d4: 58:4a:3c:b1:46:d9:a6:4d:c1:a2:04:f5:1c:bc:bd:12:c0:3e: 5a:d9:67:c5:c6:8a:99:76:a4:0d:7a:b0:bf:32:5e:9b:c2:43: e4:c1:f1:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmj/zLJ/5r9oZSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjIxMTJjZTAtYzkxYy00NDllLThiYmItMTJlNDRmNWEz ZTQxMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NzAwMDkzOWQtYTQ3MC00NDhhLTkxYTYtMWU2ZDc2ODI1NTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmp7W8M80u+lPkHXoR8lLDdKdXQU4O3dNiDf +xTDOCwvgbqBoMq/zHJkP6qnvkV+kPLEsIRM42+/C2xEJcTRSZTSy9kma9gyKW+O 1JqaKSfHhNkSeaEtniGhBk6/HMIdcuoeKbSGhi6FNb3fDltJI9sbDQqAEeiPcBY5 h+Ea33pRB8ox/zDeFeju/nONbzyNtGtrfpylh9WUWG46tGpTNfsHUaaOVrhT4gUW CCAi+/4Iu0IB8+aMpFmrQ+jsCpXQ28wgmCRsQCPbQc6TysbCyWNWZ0QBJD59Dr7h +N97uHlYlyKQlW1H1aGvIySv0OAnz90ZA7YBX8AbVxCxV0CBKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLw8EQj/jIJayNX9NooElK/5kFpMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMjEx MmNlMC1jOTFjLTQ0OWUtOGJiYi0xMmU0NGY1YTNlNDEvNTk5MDllNjUtNWEwNS0z MjNjLTg3OWYtYmNmYjNhNjRkNTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjIxMTJjZTAtYzkxYy00NDllLThi YmItMTJlNDRmNWEzZTQxLzIyMTEyY2UwLWM5MWMtNDQ5ZS04YmJiLTEyZTQ0ZjVh M2U0MS5jcmwwHwYDVR0jBBgwFoAUQrbxv8/ixWXOZWVoHK3h4/ijp1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMjExMmNlMC1jOTFjLTQ0OWUtOGJiYi0xMmU0 NGY1YTNlNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6ohMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGe6gJVGsX0F5PSbFQa5tNDvQ/rhQQx8XViGN1d9ekvd0UDV4O/BJ4N7 fwjQ9oLwHhkBwvthyhO/BlenOr20XRevzIv03X0BPGXl4GkrWj6JPnivq5zkxcpx YtyFKluNqvZzPUTIqc+48ibRtwLF0sPCO14xZf4/CNWE2nzxMtL46iRCMFyVYGlF F8/BR34uaBKcPI0k/o0/DdBARDMjL2sf/8tjBfL0UurbLRYtHqkH9yZ3iRZEueiF HUFJgBNj/XsCF9wkAAhjickU19tLJ1sYocxkKEM71FhKPLFG2aZNwaIE9Ry8vRLA PlrZZ8XGipl2pA16sL8yXpvCQ+TB8eA= -----END CERTIFICATE-----Generated at Mon Jun 16 15:37:21 2025 by rpki-client