$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5077d23-9172-3596-a81e-3de27f48f53a.roa File: b5077d23-9172-3596-a81e-3de27f48f53a.roa (raw, json) Hash identifier: JqEefNLbs+PwsTJsk3ibmsZwQJ6/a/ot4J6Hi4ZDUzI= Subject key identifier: 4B:12:42:73:8E:98:C3:41:0B:81:E9:AF:A8:3B:15:92:8C:A1:B3:81 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A2D859293E714C10421662680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5077d23-9172-3596-a81e-3de27f48f53a.roa Signing time: Fri 13 Jun 2025 13:01:04 +0000 ROA not before: Fri 13 Jun 2025 13:01:04 +0000 ROA not after: Thu 11 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.33.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:85:92:93:e7:14:c1:04:21:66:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 13 13:01:04 2025 GMT Not After : Sep 11 13:01:04 2025 GMT Subject: CN=31513e57-ad67-4b69-842c-f630f2faeec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0a:2f:51:2e:5c:d0:86:69:15:79:59:34:5c: 23:6e:9b:35:15:dc:f8:65:bc:79:eb:68:5f:71:fd: 28:c7:54:7e:ab:a1:91:62:b9:fb:89:1e:69:7a:7a: b1:a5:67:e7:9b:17:95:47:61:89:48:ba:e1:3f:e2: 57:bd:60:6b:a6:5b:ac:3e:49:4b:fa:d1:08:23:3d: 27:d7:0e:12:86:af:da:8e:d0:ec:bf:8c:03:b1:9a: ed:34:d8:10:2b:7a:f9:4e:18:55:49:6b:b0:9d:91: 57:69:fb:83:55:2f:46:d1:da:a0:b9:c9:ad:cf:89: 2a:06:82:53:6c:61:5e:f2:c6:18:61:da:33:ad:90: da:8e:de:12:10:44:86:e2:ce:0c:af:da:58:b2:e5: 8a:d0:ef:75:96:5b:2f:4d:2e:da:90:dd:e5:d9:ef: 70:48:6a:dc:1f:14:77:43:d2:66:30:1f:68:34:f4: d1:7e:1c:17:39:b3:16:e1:52:cd:c5:e6:fd:aa:44: 9e:d0:b2:77:9c:b8:bb:15:c1:95:fe:b0:b5:21:60: a4:7d:ab:1f:f0:b3:19:f2:bb:c8:ac:02:e5:ce:50: 2d:d0:ab:e9:e5:e3:c7:73:7d:b9:57:e8:56:e8:db: d5:af:51:d2:4a:13:c5:49:92:8c:66:1c:a4:b4:12: dc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:12:42:73:8E:98:C3:41:0B:81:E9:AF:A8:3B:15:92:8C:A1:B3:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5077d23-9172-3596-a81e-3de27f48f53a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:f6:74:65:bf:5a:b9:91:05:f7:61:d5:77:c6:48:a5:52:9e: 8b:85:63:4f:56:95:98:05:09:bc:38:d8:a4:78:4a:6f:38:6b: a0:e6:b0:e6:88:6f:ee:ff:9b:d5:75:40:b1:6a:24:25:74:c1: f6:63:4e:18:ba:56:cd:16:b0:fa:0e:48:44:46:32:e8:c7:5f: e8:38:e0:37:62:e1:4e:3a:12:63:74:9b:7f:64:90:ea:17:0c: 6c:d5:3d:f7:3a:1f:4c:a0:fb:81:c6:8c:a3:37:59:db:3e:5b: a9:c5:18:19:20:bc:4d:72:32:f3:dc:1e:57:0a:a4:7c:58:67: d9:98:5c:d5:ce:2e:ca:83:89:43:36:3c:4f:e4:f6:b3:f0:77: 92:40:de:a1:a5:ff:b6:23:10:d8:f7:9c:d4:1a:51:cc:68:7f: 61:c8:a6:3d:58:fa:88:79:49:fe:81:b0:96:e1:af:95:7a:69: 1e:cc:92:c5:d1:1f:cb:a5:3d:88:53:aa:42:b0:08:f8:1e:bb: cb:42:01:fa:d0:a5:d1:15:5a:47:a3:a9:5b:9f:85:84:68:9e: 70:e2:a1:a8:d0:79:d6:09:fa:da:d5:15:0e:80:6f:1b:10:1b: 19:2c:4f:5d:b6:0a:87:d0:36:cf:3d:f5:eb:fb:c7:88:cf:16: ea:74:ac:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEothZKT5xTBBCFmJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxMzEzMDEwNFoXDTI1MDkxMTEzMDEwNFowLzEtMCsGA1UEAxMk MzE1MTNlNTctYWQ2Ny00YjY5LTg0MmMtZjYzMGYyZmFlZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgovUS5c0IZpFXlZNFwjbps1Fdz4Zbx562hf cf0ox1R+q6GRYrn7iR5penqxpWfnmxeVR2GJSLrhP+JXvWBrplusPklL+tEIIz0n 1w4Shq/ajtDsv4wDsZrtNNgQK3r5ThhVSWuwnZFXafuDVS9G0dqgucmtz4kqBoJT bGFe8sYYYdozrZDajt4SEESG4s4Mr9pYsuWK0O91llsvTS7akN3l2e9wSGrcHxR3 Q9JmMB9oNPTRfhwXObMW4VLNxeb9qkSe0LJ3nLi7FcGV/rC1IWCkfasf8LMZ8rvI rALlzlAt0Kvp5ePHc325V+hW6NvVr1HSShPFSZKMZhyktBLcPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsSQnOOmMNBC4Hpr6g7FZKMobOBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjUwNzdkMjMtOTE3Mi0z NTk2LWE4MWUtM2RlMjdmNDhmNTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyGMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGj2dGW/WrmRBfdh1XfGSKVSnouFY09WlZgFCbw42KR4Sm84a6DmsOaI b+7/m9V1QLFqJCV0wfZjThi6Vs0WsPoOSERGMujHX+g44Ddi4U46EmN0m39kkOoX DGzVPfc6H0yg+4HGjKM3Wds+W6nFGBkgvE1yMvPcHlcKpHxYZ9mYXNXOLsqDiUM2 PE/k9rPwd5JA3qGl/7YjENj3nNQaUcxof2HIpj1Y+oh5Sf6BsJbhr5V6aR7MksXR H8ulPYhTqkKwCPgeu8tCAfrQpdEVWkejqVufhYRonnDioajQedYJ+trVFQ6AbxsQ GxksT122CofQNs899ev7x4jPFup0rDc= -----END CERTIFICATE-----Generated at Sun Jun 15 19:01:50 2025 by rpki-client