$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06650fcf-560e-38ec-a1fd-79e474d084d2.roa File: 06650fcf-560e-38ec-a1fd-79e474d084d2.roa (raw, json) Hash identifier: 5NUu+dfL6SRq1W0ADlIGlEuRUP8iPt7XqWkf/YtDr5Y= Subject key identifier: 0D:89:14:F3:0B:BB:61:FA:7F:99:09:5A:41:D7:2D:1F:4B:2D:66:1D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A00DAEEB4EC664BBA3435D9C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06650fcf-560e-38ec-a1fd-79e474d084d2.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 16625 IP address blocks: 23.1.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:ee:b4:ec:66:4b:ba:34:35:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=8d2ba4c3-e187-4f30-8255-6ab1e46dff87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3e:37:0a:a7:f2:a8:c9:f1:d5:01:b9:f0:d4: 45:a2:90:16:57:dd:4b:2f:6e:5d:27:a4:57:09:61: 10:df:a0:e9:6c:9a:f5:fd:eb:ad:a6:5a:ba:d5:4d: 49:ad:79:8f:52:2f:09:ce:23:46:51:6a:6b:35:62: e9:56:40:cd:6d:f5:ef:c4:48:d9:4f:63:e1:8b:7f: 6d:79:cd:cd:33:0a:94:41:46:09:b6:3e:31:ca:8b: 8e:be:ce:b5:c3:fd:9e:d5:ff:53:e4:b0:55:07:68: 70:70:4c:44:4f:20:ef:c4:0e:c7:4d:81:7b:d7:94: 0d:64:aa:52:69:27:60:41:29:10:b6:60:05:52:8c: bb:4c:7b:ac:62:bc:37:67:cd:db:4a:48:8a:5c:a9: 54:74:da:8b:70:0c:77:b1:89:37:1d:43:92:a9:0d: 2b:d0:54:48:fa:4d:20:4c:cd:53:02:17:51:44:bb: 25:dd:f9:3d:eb:07:7a:ca:ee:94:6b:82:a1:93:a5: b4:8e:eb:8f:5f:cd:0b:4d:d8:54:34:83:9f:8e:95: 60:2e:d6:40:33:da:dc:fc:35:87:ee:42:64:9b:b0: de:dd:6a:c8:0d:cc:16:ef:a1:fb:44:c8:8a:87:9c: 6a:0a:62:ec:b6:9d:5b:d7:67:4f:08:25:cf:dc:e5: 09:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:89:14:F3:0B:BB:61:FA:7F:99:09:5A:41:D7:2D:1F:4B:2D:66:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06650fcf-560e-38ec-a1fd-79e474d084d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:48:7c:e9:a4:91:f5:36:66:68:28:65:ca:ba:b5:c6:54:f9: 94:53:0e:81:ea:90:30:26:2f:7a:35:dc:90:6b:c3:3e:c5:2d: b8:09:b7:86:f4:a8:8f:d8:6d:45:b8:c1:0d:29:dc:71:47:1b: 47:4d:39:2d:fd:a2:43:9c:fc:e3:6f:9e:de:c8:b9:e7:13:1f: 9e:b7:31:5d:cd:af:9e:34:14:5b:d3:57:4e:9e:62:02:d8:03: 24:be:56:a2:54:ea:d5:10:bf:6c:fb:30:f9:55:36:d4:63:10: 88:04:58:29:08:a3:89:38:c0:87:18:ba:d6:7e:06:60:6f:f8: ab:3a:99:ee:a7:84:40:ad:31:cb:9c:26:83:a2:6c:9e:ba:47: 23:ac:96:77:1f:5f:06:5f:ad:06:a1:7d:b3:78:84:ea:8e:34: 8b:c7:a7:bf:f0:e2:4d:8b:ad:a7:e9:91:5b:c1:5f:24:cf:e6: 70:ba:cc:d9:23:a0:e6:16:d5:96:55:b4:a6:0f:5e:15:73:c5: 74:7e:74:68:fb:fb:41:2e:ed:b5:f9:a2:92:09:f6:fb:5a:4b: 13:74:5e:bd:59:68:e3:30:79:76:9d:57:56:0c:01:02:5d:c0: d2:d1:c6:3f:ed:33:47:28:3d:ee:c9:86:49:16:a4:ec:5d:3b: 9d:09:79:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2u607GZLujQ12cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk OGQyYmE0YzMtZTE4Ny00ZjMwLTgyNTUtNmFiMWU0NmRmZjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD43CqfyqMnx1QG58NRFopAWV91LL25dJ6RX CWEQ36DpbJr1/eutplq61U1JrXmPUi8JziNGUWprNWLpVkDNbfXvxEjZT2Phi39t ec3NMwqUQUYJtj4xyouOvs61w/2e1f9T5LBVB2hwcExETyDvxA7HTYF715QNZKpS aSdgQSkQtmAFUoy7THusYrw3Z83bSkiKXKlUdNqLcAx3sYk3HUOSqQ0r0FRI+k0g TM1TAhdRRLsl3fk96wd6yu6Ua4Khk6W0juuPX80LTdhUNIOfjpVgLtZAM9rc/DWH 7kJkm7De3WrIDcwW76H7RMiKh5xqCmLstp1b12dPCCXP3OUJuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2JFPMLu2H6f5kJWkHXLR9LLWYdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDY2NTBmY2YtNTYwZS0z OGVjLWExZmQtNzllNDc0ZDA4NGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBIfOmkkfU2ZmgoZcq6tcZU+ZRTDoHqkDAmL3o13JBrwz7FLbgJt4b0 qI/YbUW4wQ0p3HFHG0dNOS39okOc/ONvnt7IuecTH563MV3Nr540FFvTV06eYgLY AyS+VqJU6tUQv2z7MPlVNtRjEIgEWCkIo4k4wIcYutZ+BmBv+Ks6me6nhECtMcuc JoOibJ66RyOslncfXwZfrQahfbN4hOqONIvHp7/w4k2LrafpkVvBXyTP5nC6zNkj oOYW1ZZVtKYPXhVzxXR+dGj7+0Eu7bX5opIJ9vtaSxN0Xr1ZaOMweXadV1YMAQJd wNLRxj/tM0coPe7JhkkWpOxdO50JeSE= -----END CERTIFICATE-----Generated at Sun Jun 15 19:09:39 2025 by rpki-client