$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5eac9c2f-a80c-3580-b512-852f9cc27405.roa File: 5eac9c2f-a80c-3580-b512-852f9cc27405.roa (raw, json) Hash identifier: lC8CkqMU+YX+YRpUM+7atoSabDhZuwe6jbTm1hWV+YA= Subject key identifier: DC:69:20:5C:7A:52:D0:10:68:0E:84:ED:E0:69:24:B9:D4:91:3B:DC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849FCAA8D31A642E3313167BC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5eac9c2f-a80c-3580-b512-852f9cc27405.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.209.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:8d:31:a6:42:e3:31:31:67:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=6aa2d0a2-2217-46e8-870d-08545cdbfa1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d6:f4:cc:9c:f9:9d:95:f2:7a:1d:d5:d3:21: 25:72:5d:9b:da:e5:37:10:b8:31:0f:88:82:98:6e: 55:a7:f7:d0:9c:34:1b:1d:4a:f8:1f:9c:82:14:c8: 29:a0:69:8a:37:84:76:6c:f2:ee:11:cc:1f:b0:b1: 36:7a:e6:58:80:07:4b:11:b9:da:7b:e3:64:7f:00: 6f:d6:66:d0:95:73:9c:8a:63:bb:95:25:23:13:34: a3:34:f6:69:13:45:09:6d:c4:47:51:2e:b9:26:78: 6c:4a:79:70:16:3c:d0:77:81:47:29:6d:07:b9:99: 1e:f6:48:a8:c1:19:9f:ea:07:e4:40:b5:bb:24:86: 9a:ee:cc:a1:57:67:76:03:b6:bb:d2:4c:11:e4:2f: 60:fa:1d:e9:d1:6e:13:4c:2a:e1:fa:dc:df:1a:54: 72:13:1b:c0:0e:19:c7:1d:7b:c9:d1:17:16:2b:ab: 7c:a2:ae:74:58:00:90:e6:b2:80:24:f7:36:bf:e0: ed:5a:6b:62:75:d4:f8:73:63:1f:72:27:bf:06:e3: 96:3f:bb:35:11:3f:92:1b:5c:39:39:a1:4d:d5:bf: 06:e8:53:03:01:72:46:09:58:52:4f:49:0f:3e:ac: e7:4e:2c:62:fc:06:86:80:15:d2:85:fa:0e:42:ea: ee:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:69:20:5C:7A:52:D0:10:68:0E:84:ED:E0:69:24:B9:D4:91:3B:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5eac9c2f-a80c-3580-b512-852f9cc27405.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:d0:79:87:fc:be:68:2d:64:f1:53:1a:77:6d:10:e3:2c:3c: cc:c9:8a:bf:be:77:a5:d6:8e:9b:e7:38:af:f0:82:81:1e:23: 3b:33:5b:c5:e6:55:15:8f:6b:a4:0c:33:79:c8:14:b1:20:de: fb:2b:c1:40:de:43:36:08:98:22:86:01:46:90:c4:9c:ef:a5: 4a:5a:0d:57:4a:d1:04:29:f1:fa:77:cf:21:ce:ad:07:e5:e6: e0:c8:db:df:33:69:0f:2a:2e:cb:c2:ae:1e:77:64:6b:78:9c: 62:8d:33:bd:fa:d4:39:2f:4e:3b:eb:c4:7a:b7:ab:f2:90:da: fc:51:d1:bb:aa:3f:e0:13:48:a8:b5:91:49:c8:f2:82:8d:d5: 5a:15:70:be:9f:6b:16:97:c2:11:fc:19:0f:90:85:8e:3b:0e: 7f:35:0f:cb:38:4e:f8:1d:d9:a6:09:cc:d4:71:fd:09:bc:0d: 7f:75:cd:ca:8c:80:f4:92:ea:f4:0f:20:ad:a5:a0:8e:2c:04: bf:b4:1a:66:f0:94:2a:d2:b6:be:32:cd:58:0c:b7:05:2b:68: a2:72:8f:74:c1:2b:bd:ad:25:92:20:14:fc:a5:f3:1e:a0:08: 71:2a:5a:c0:dc:14:51:f9:77:d1:a8:4e:ae:b1:a7:71:2e:b2: e2:ff:98:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qo0xpkLjMTFnvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk NmFhMmQwYTItMjIxNy00NmU4LTg3MGQtMDg1NDVjZGJmYTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztb0zJz5nZXyeh3V0yElcl2b2uU3ELgxD4iC mG5Vp/fQnDQbHUr4H5yCFMgpoGmKN4R2bPLuEcwfsLE2euZYgAdLEbnae+NkfwBv 1mbQlXOcimO7lSUjEzSjNPZpE0UJbcRHUS65JnhsSnlwFjzQd4FHKW0HuZke9kio wRmf6gfkQLW7JIaa7syhV2d2A7a70kwR5C9g+h3p0W4TTCrh+tzfGlRyExvADhnH HXvJ0RcWK6t8oq50WACQ5rKAJPc2v+DtWmtiddT4c2Mfcie/BuOWP7s1ET+SG1w5 OaFN1b8G6FMDAXJGCVhST0kPPqznTixi/AaGgBXShfoOQuruywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxpIFx6UtAQaA6E7eBpJLnUkTvcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWVhYzljMmYtYTgwYy0z NTgwLWI1MTItODUyZjljYzI3NDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9EgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvQeYf8vmgtZPFTGndtEOMsPMzJir++d6XWjpvnOK/wgoEeIzszW8Xm VRWPa6QMM3nIFLEg3vsrwUDeQzYImCKGAUaQxJzvpUpaDVdK0QQp8fp3zyHOrQfl 5uDI298zaQ8qLsvCrh53ZGt4nGKNM7361DkvTjvrxHq3q/KQ2vxR0buqP+ATSKi1 kUnI8oKN1VoVcL6faxaXwhH8GQ+QhY47Dn81D8s4Tvgd2aYJzNRx/Qm8DX91zcqM gPSS6vQPIK2loI4sBL+0GmbwlCrStr4yzVgMtwUraKJyj3TBK72tJZIgFPyl8x6g CHEqWsDcFFH5d9GoTq6xp3EusuL/mD8= -----END CERTIFICATE-----Generated at Sun Jun 15 18:57:00 2025 by rpki-client