$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3cd6ac5-4e08-3fe3-a0f8-49942ce9f661.roa File: c3cd6ac5-4e08-3fe3-a0f8-49942ce9f661.roa (raw, json) Hash identifier: Oz8//KbP+zVXMoFQ2cQe2PW5YG1RXhPT8ap6jknb0uc= Subject key identifier: F1:34:6D:48:79:03:25:71:40:3C:77:E8:2C:8E:F0:9C:45:45:52:60 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A2D85934FF958EA03E25E0400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3cd6ac5-4e08-3fe3-a0f8-49942ce9f661.roa Signing time: Fri 13 Jun 2025 13:01:04 +0000 ROA not before: Fri 13 Jun 2025 13:01:04 +0000 ROA not after: Thu 11 Sep 2025 13:01:04 +0000 asID: 16625 IP address blocks: 23.33.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:85:93:4f:f9:58:ea:03:e2:5e:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 13 13:01:04 2025 GMT Not After : Sep 11 13:01:04 2025 GMT Subject: CN=d73fc9a5-76a3-46da-bc46-a6fbb21b7809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b6:cc:58:b1:9c:e6:10:22:fb:e6:06:e2:ea: f7:34:7f:46:64:a1:c3:ba:c2:1c:48:27:3a:78:96: 9a:99:d0:84:a6:16:38:7f:f4:67:24:40:89:bb:c2: af:6c:21:dc:43:cc:d2:ef:d0:37:ce:f8:f6:f2:b7: eb:b6:8e:df:c5:55:94:f1:e9:38:58:38:7c:30:bd: e9:06:c9:62:e6:b2:35:02:6d:a8:05:9f:8e:66:6e: b8:ca:89:fa:be:99:c5:fc:4b:19:5c:d5:42:14:fc: 80:34:3d:80:25:01:89:b6:e6:33:54:5c:96:7b:86: 8d:f4:0d:e5:16:7b:ab:65:dc:fb:45:25:f3:64:6d: 73:64:48:aa:7c:69:97:65:8f:6c:32:d0:76:9a:93: 65:a1:b8:e6:41:2f:a3:84:2a:71:0b:80:d2:bd:0a: de:85:cc:c5:cc:54:73:b9:75:38:24:5c:62:cc:06: b4:32:9a:73:17:a1:6a:19:50:25:f8:36:51:be:15: 41:30:ea:8e:92:9c:f8:ab:b8:ee:f0:67:15:9b:6c: 4b:79:09:a1:79:09:e1:c2:d6:93:35:eb:32:c8:a5: 44:6b:2b:f7:af:94:39:33:18:22:7f:66:a8:3a:3f: c1:52:cb:54:98:e2:a0:0e:ac:38:17:e6:4d:3f:0c: 7d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:34:6D:48:79:03:25:71:40:3C:77:E8:2C:8E:F0:9C:45:45:52:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3cd6ac5-4e08-3fe3-a0f8-49942ce9f661.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:6e:f8:0b:76:7d:45:3a:63:d7:2e:fb:b0:d3:f4:b9:3d:02: 3b:c0:9d:64:1c:4f:e4:f9:5e:65:ec:25:d1:f4:d6:f7:e6:eb: cf:f2:e3:96:ef:5d:63:0b:21:e9:3d:d1:97:a9:ef:5a:8c:e6: d4:8e:76:14:7c:f8:43:cd:64:12:a5:fb:2b:22:45:0f:32:b3: 20:3a:3f:a3:50:ff:1f:11:91:f4:9b:47:da:87:d7:8b:39:fc: b1:df:d2:36:77:3a:8c:5f:5e:02:f3:a9:d4:5d:e2:fd:bd:5a: c8:4b:fb:15:9b:af:df:e3:72:1b:a2:fe:f5:d7:10:f0:60:bf: 37:b9:5b:d8:9f:f6:5e:67:ee:64:21:b2:f2:67:05:b7:8a:a8: 83:43:f4:ef:6d:98:a4:30:e9:0b:a7:e1:2b:ab:b8:a6:5d:a8: 95:f3:ea:60:3e:73:33:55:58:29:e2:27:3c:3e:e8:8b:b3:a9: fe:86:96:f5:f9:e3:96:0f:c4:d9:fd:44:44:1d:71:d2:0f:01: 07:0c:15:0c:f6:0b:69:08:13:ce:10:7b:62:38:b8:d5:e3:9f: 34:71:a6:98:b7:02:00:96:94:c9:25:9c:1a:db:7c:1c:f9:3a: a7:75:f9:79:04:4c:44:e6:ff:4b:0c:d1:14:f2:67:f9:16:5b: ab:1d:ad:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEothZNP+VjqA+JeBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxMzEzMDEwNFoXDTI1MDkxMTEzMDEwNFowLzEtMCsGA1UEAxMk ZDczZmM5YTUtNzZhMy00NmRhLWJjNDYtYTZmYmIyMWI3ODA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrbMWLGc5hAi++YG4ur3NH9GZKHDusIcSCc6 eJaamdCEphY4f/RnJECJu8KvbCHcQ8zS79A3zvj28rfrto7fxVWU8ek4WDh8ML3p Bsli5rI1Am2oBZ+OZm64yon6vpnF/EsZXNVCFPyAND2AJQGJtuYzVFyWe4aN9A3l FnurZdz7RSXzZG1zZEiqfGmXZY9sMtB2mpNlobjmQS+jhCpxC4DSvQrehczFzFRz uXU4JFxizAa0MppzF6FqGVAl+DZRvhVBMOqOkpz4q7ju8GcVm2xLeQmheQnhwtaT NesyyKVEayv3r5Q5Mxgif2aoOj/BUstUmOKgDqw4F+ZNPwx95QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPE0bUh5AyVxQDx36CyO8JxFRVJgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzNjZDZhYzUtNGUwOC0z ZmUzLWEwZjgtNDk5NDJjZTlmNjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdu+At2fUU6Y9cu+7DT9Lk9AjvAnWQcT+T5XmXsJdH01vfm68/y45bv XWMLIek90Zep71qM5tSOdhR8+EPNZBKl+ysiRQ8ysyA6P6NQ/x8RkfSbR9qH14s5 /LHf0jZ3OoxfXgLzqdRd4v29WshL+xWbr9/jchui/vXXEPBgvze5W9if9l5n7mQh svJnBbeKqIND9O9tmKQw6Qun4SuruKZdqJXz6mA+czNVWCniJzw+6Iuzqf6GlvX5 45YPxNn9REQdcdIPAQcMFQz2C2kIE84Qe2I4uNXjnzRxppi3AgCWlMklnBrbfBz5 Oqd1+XkETETm/0sM0RTyZ/kWW6sdraU= -----END CERTIFICATE-----Generated at Sun Jun 15 18:35:17 2025 by rpki-client