$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f10702c-f16c-36b8-8b38-fa178cacaea8.roa File: 0f10702c-f16c-36b8-8b38-fa178cacaea8.roa (raw, json) Hash identifier: DqE+6E5yudVX7Dk40vwHBsU/w5GT5ZZQ/pKtSqUWQXk= Subject key identifier: 5F:CF:0B:36:56:98:DE:7B:75:DD:F5:2B:A8:A0:D2:C3:FB:C4:D2:DA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A2D8597638A6881841B7018C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f10702c-f16c-36b8-8b38-fa178cacaea8.roa Signing time: Fri 13 Jun 2025 13:01:04 +0000 ROA not before: Fri 13 Jun 2025 13:01:04 +0000 ROA not after: Thu 11 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.33.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:85:97:63:8a:68:81:84:1b:70:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 13 13:01:04 2025 GMT Not After : Sep 11 13:01:04 2025 GMT Subject: CN=71d9fbbd-5bbb-44a0-979d-f315796685b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:71:bf:41:a0:2d:f7:be:5f:eb:93:46:2b:f9: b1:f2:dd:bc:4f:ac:1a:96:d2:a8:05:00:b6:76:26: 55:08:73:75:75:7a:9e:c2:83:94:cd:c4:8b:7d:b4: b6:0d:52:db:e8:6d:85:04:0e:19:34:c4:d8:c0:42: db:49:d0:c5:aa:e2:01:48:a8:b7:7d:a2:9b:42:8d: 36:79:f8:63:dd:19:c0:38:c0:48:a8:1f:d1:9b:db: 30:33:e0:dc:78:07:cb:0c:51:60:b1:85:b6:94:cb: f2:a3:96:2b:3c:fa:90:a1:19:20:48:b0:22:ff:6e: 0e:16:56:6f:59:3d:37:83:db:74:83:4f:44:7e:91: f9:d5:ee:ce:5e:ea:ab:d9:d8:00:d0:64:b8:9f:6a: 86:9e:c0:9b:82:75:ec:68:cf:19:04:51:5c:e6:f3: f6:d8:7b:c6:9a:03:fd:a2:7a:87:67:8e:e4:ca:0e: 82:07:a1:0b:4a:32:60:20:2f:f4:2f:ac:7d:3a:21: 1f:b9:a3:da:f4:52:74:80:21:e3:54:d3:04:44:2a: f1:7f:4f:86:c0:5b:3c:bb:d9:82:53:d6:b3:79:21: 9b:0e:80:7c:41:17:8a:27:d4:77:0b:94:5a:03:d3: 9a:c3:fd:6d:e6:b5:01:52:2b:dd:10:72:2e:9f:7f: 80:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:CF:0B:36:56:98:DE:7B:75:DD:F5:2B:A8:A0:D2:C3:FB:C4:D2:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f10702c-f16c-36b8-8b38-fa178cacaea8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:16:e1:4c:71:45:ea:6c:78:df:36:a2:94:9d:ca:4f:c9:a3: 96:cb:ae:9c:38:04:6b:8c:1b:3d:12:c1:1d:b0:13:21:f5:87: 89:9e:c8:be:d1:33:a8:32:cb:21:bb:49:c7:1b:4b:4c:74:eb: 9f:b4:8d:23:da:0a:f2:bd:4b:bd:5f:8a:91:b6:da:92:d2:67: 0e:b3:64:c8:04:04:a3:69:b0:e6:b1:9b:4d:98:ec:1c:9d:41: e0:a4:6a:9e:6f:18:b9:a0:67:7b:35:11:b3:c8:41:3f:c7:a5: 40:6c:78:d1:04:1b:93:d5:46:04:f9:ac:f5:eb:01:a0:0b:01: f3:82:fa:97:c2:93:3f:94:49:cc:45:88:e8:e7:a9:28:a6:e0: 6c:8a:e0:b7:7c:55:02:4e:33:fa:bf:d2:38:69:4b:66:2b:01: 49:22:f6:13:43:fb:34:c4:cc:02:a6:c4:7c:4f:d0:c3:a2:47: c1:a3:bb:ca:37:55:52:19:02:91:1b:dc:5c:4e:6d:11:23:3c: 5c:24:f2:18:c8:d4:67:7c:ac:86:0c:96:e8:b4:88:c0:56:c0: e4:e4:28:f4:65:c5:07:73:ff:a3:ff:01:78:f2:a8:59:5d:36: b7:08:67:2e:f0:4a:dd:d1:20:48:f0:1a:ca:22:1f:65:13:65: a3:a7:bb:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEothZdjimiBhBtwGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxMzEzMDEwNFoXDTI1MDkxMTEzMDEwNFowLzEtMCsGA1UEAxMk NzFkOWZiYmQtNWJiYi00NGEwLTk3OWQtZjMxNTc5NjY4NWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8nG/QaAt975f65NGK/mx8t28T6waltKoBQC2 diZVCHN1dXqewoOUzcSLfbS2DVLb6G2FBA4ZNMTYwELbSdDFquIBSKi3faKbQo02 efhj3RnAOMBIqB/Rm9swM+DceAfLDFFgsYW2lMvyo5YrPPqQoRkgSLAi/24OFlZv WT03g9t0g09EfpH51e7OXuqr2dgA0GS4n2qGnsCbgnXsaM8ZBFFc5vP22HvGmgP9 onqHZ47kyg6CB6ELSjJgIC/0L6x9OiEfuaPa9FJ0gCHjVNMERCrxf0+GwFs8u9mC U9azeSGbDoB8QReKJ9R3C5RaA9Oaw/1t5rUBUivdEHIun3+AeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/PCzZWmN57dd31K6ig0sP7xNLaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGYxMDcwMmMtZjE2Yy0z NmI4LThiMzgtZmExNzhjYWNhZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0W4UxxRepseN82opSdyk/Jo5bLrpw4BGuMGz0SwR2wEyH1h4meyL7R M6gyyyG7SccbS0x065+0jSPaCvK9S71fipG22pLSZw6zZMgEBKNpsOaxm02Y7Byd QeCkap5vGLmgZ3s1EbPIQT/HpUBseNEEG5PVRgT5rPXrAaALAfOC+pfCkz+UScxF iOjnqSim4GyK4Ld8VQJOM/q/0jhpS2YrAUki9hND+zTEzAKmxHxP0MOiR8Gju8o3 VVIZApEb3FxObREjPFwk8hjI1Gd8rIYMlui0iMBWwOTkKPRlxQdz/6P/AXjyqFld NrcIZy7wSt3RIEjwGsoiH2UTZaOnu0I= -----END CERTIFICATE-----Generated at Mon Jun 16 09:01:42 2025 by rpki-client