$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d34c6f4d-8650-3de2-816c-8df24a5e8be8.roa File: d34c6f4d-8650-3de2-816c-8df24a5e8be8.roa (raw, json) Hash identifier: s85gjazOidBcCVRT2jQzuR5g04Gx+1cyGynb+EiQ+Fo= Subject key identifier: 49:DC:72:A1:5E:11:D8:23:50:9C:75:A0:90:FB:C5:7A:AC:6E:43:90 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A88409EE5B8FE0AADA7D5CC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d34c6f4d-8650-3de2-816c-8df24a5e8be8.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 16625 IP address blocks: 23.48.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:9e:e5:b8:fe:0a:ad:a7:d5:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=f7be9c98-23f4-4263-a9b5-dc5684d3c7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:18:71:e4:d7:18:6e:d3:c8:a8:65:16:a2:8c: e1:86:d3:e4:95:93:85:b2:ff:b0:1f:ba:43:34:0f: 63:1a:80:ee:27:ce:31:e8:14:1a:66:1b:67:80:78: 46:68:35:11:36:96:32:b9:95:84:86:2c:5c:7b:e7: 98:e1:15:e3:13:1f:bc:53:32:cf:22:d1:6f:2a:f5: 85:c7:7d:e4:71:e9:a2:4b:c7:28:3a:18:1b:4c:d9: 5a:f1:41:aa:2d:72:d0:95:b4:54:3d:7f:60:a4:ed: 51:db:bb:2b:92:d9:03:fb:47:bd:9b:b4:8d:d8:f8: 2e:2a:dc:7d:bb:8b:67:e3:84:11:c6:1c:23:49:10: 37:fb:31:06:76:d1:25:56:80:83:1b:87:50:8d:f2: 1a:f3:a6:13:99:62:17:d8:77:7e:8b:0a:c7:c6:3a: 8e:49:cc:b1:87:91:21:10:e9:9b:97:69:4a:d8:9f: 87:07:b6:4b:45:5b:4c:25:5d:67:62:2d:63:48:36: 44:ed:a6:17:8c:15:a6:3e:e9:d3:05:ec:5a:93:a9: 5f:2a:5f:75:77:00:6d:e8:79:8c:24:63:e9:bb:39: b9:ab:7c:34:be:db:72:43:a0:e6:bd:84:bc:bf:f7: b4:50:aa:4d:70:f9:8a:28:d6:67:46:04:74:ea:ee: 9a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DC:72:A1:5E:11:D8:23:50:9C:75:A0:90:FB:C5:7A:AC:6E:43:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d34c6f4d-8650-3de2-816c-8df24a5e8be8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:06:56:1d:50:7d:b1:e5:86:1d:ca:2e:ed:35:7a:59:5e:3a: 3f:a1:c5:06:ba:9c:29:0e:20:72:55:a8:69:c2:56:5b:b3:de: df:d1:8c:46:90:95:a5:e1:55:9e:0d:e5:65:29:64:62:e3:92: 5c:2a:36:40:b2:ca:24:cf:f9:d4:27:f2:ae:e8:2d:05:82:60: 98:5d:72:65:bf:94:f0:cb:64:b0:1d:92:cb:6a:98:92:b3:f9: ec:1e:db:db:7f:81:5f:4e:8a:04:d8:2c:bc:9a:b3:69:84:a0: 18:05:1a:c8:29:b2:63:15:b0:17:53:d1:40:d6:59:e0:03:62: 24:ce:11:4b:c7:99:8e:fc:ce:43:29:01:19:7f:ff:e2:13:c2: 77:66:dd:b1:18:57:d4:81:16:58:11:ce:f0:e1:d1:77:a8:bf: 0a:d1:62:9c:85:91:89:26:09:ca:8c:2a:8d:a1:4e:09:ee:cf: b5:68:05:5a:08:d7:bc:a6:9f:45:33:66:5d:1e:cd:37:f6:58: 35:a5:89:8e:30:44:3a:b9:79:15:a2:c3:a6:4b:df:2d:2d:0c: 2a:ed:1b:94:94:86:92:69:b7:97:1a:ba:26:d7:ea:b5:c8:af: ce:b4:2b:f9:bd:81:66:32:d4:9c:9d:87:45:9f:36:e9:cb:7d: a5:73:5d:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQJ7luP4KrafVzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk ZjdiZTljOTgtMjNmNC00MjYzLWE5YjUtZGM1Njg0ZDNjN2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBhx5NcYbtPIqGUWoozhhtPklZOFsv+wH7pD NA9jGoDuJ84x6BQaZhtngHhGaDURNpYyuZWEhixce+eY4RXjEx+8UzLPItFvKvWF x33kcemiS8coOhgbTNla8UGqLXLQlbRUPX9gpO1R27srktkD+0e9m7SN2PguKtx9 u4tn44QRxhwjSRA3+zEGdtElVoCDG4dQjfIa86YTmWIX2Hd+iwrHxjqOScyxh5Eh EOmbl2lK2J+HB7ZLRVtMJV1nYi1jSDZE7aYXjBWmPunTBexak6lfKl91dwBt6HmM JGPpuzm5q3w0vttyQ6DmvYS8v/e0UKpNcPmKKNZnRgR06u6arwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnccqFeEdgjUJx1oJD7xXqsbkOQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDM0YzZmNGQtODY1MC0z ZGUyLTgxNmMtOGRmMjRhNWU4YmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcGVh1QfbHlhh3KLu01elleOj+hxQa6nCkOIHJVqGnCVluz3t/RjEaQ laXhVZ4N5WUpZGLjklwqNkCyyiTP+dQn8q7oLQWCYJhdcmW/lPDLZLAdkstqmJKz +ewe29t/gV9OigTYLLyas2mEoBgFGsgpsmMVsBdT0UDWWeADYiTOEUvHmY78zkMp ARl//+ITwndm3bEYV9SBFlgRzvDh0XeovwrRYpyFkYkmCcqMKo2hTgnuz7VoBVoI 17ymn0UzZl0ezTf2WDWliY4wRDq5eRWiw6ZL3y0tDCrtG5SUhpJpt5cauibX6rXI r860K/m9gWYy1Jydh0WfNunLfaVzXd4= -----END CERTIFICATE-----Generated at Tue Jul 22 19:34:04 2025 by rpki-client