$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06fa9e3e-f6b3-32ca-a500-cf072d26489f.roa File: 06fa9e3e-f6b3-32ca-a500-cf072d26489f.roa (raw, json) Hash identifier: rjJkr3hFGVcN9EHtL4pYUooPpf5x7WwmcUVDI7twPcI= Subject key identifier: 9C:CA:26:54:D6:68:96:3D:A3:1C:42:56:A1:EC:26:80:C0:9B:FB:2F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849D6EA3487610B0787AF1ED380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06fa9e3e-f6b3-32ca-a500-cf072d26489f.roa Signing time: Tue 13 May 2025 12:28:42 +0000 ROA not before: Tue 13 May 2025 12:28:42 +0000 ROA not after: Mon 11 Aug 2025 12:28:42 +0000 asID: 20940 IP address blocks: 23.204.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d6:ea:34:87:61:0b:07:87:af:1e:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 13 12:28:42 2025 GMT Not After : Aug 11 12:28:42 2025 GMT Subject: CN=96e318aa-a3ac-4145-b7e2-912e94775f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:99:3d:86:52:28:a8:74:ad:e9:62:bb:f5:b4: e9:b9:ef:26:c5:42:69:5a:19:4c:51:1d:0e:51:c4: 44:f8:ab:cb:63:ab:2d:0c:f5:26:b1:60:0f:5d:98: 75:af:a6:08:41:69:1d:32:1d:20:ae:cb:3a:50:02: 34:34:d2:09:fb:5b:c8:10:7a:97:39:3a:e1:4c:68: e0:e0:61:c9:91:08:c4:d0:9e:3b:5d:20:43:ee:b3: 6c:57:0d:85:ee:e9:08:67:90:04:00:f7:4f:23:04: f5:76:ca:c8:8a:37:e2:63:8f:94:f2:70:cc:98:22: 2f:ba:4b:5f:b6:e0:2a:66:f6:2e:b4:6a:ae:c5:ff: 9d:d1:57:49:98:83:7a:59:7b:cd:ea:f5:d2:7b:39: d9:e1:db:6b:2c:fe:af:27:d8:13:93:c8:2e:90:f6: ad:12:9e:48:42:6a:90:b3:85:d9:41:e1:ca:7b:90: e6:8b:b7:61:9c:fd:a3:bf:8f:16:fb:e9:59:8f:c8: a8:e7:31:4f:61:6d:af:32:f5:ce:ad:c7:45:6c:68: 85:fd:e8:3f:2c:8c:c3:57:19:ff:61:a6:5b:fc:f3: 31:9b:fd:8a:58:a4:81:f7:39:4e:bd:34:b8:84:c9: 04:01:9f:eb:6a:1e:8a:cc:12:2d:86:5b:3d:da:ca: 84:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CA:26:54:D6:68:96:3D:A3:1C:42:56:A1:EC:26:80:C0:9B:FB:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06fa9e3e-f6b3-32ca-a500-cf072d26489f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:fb:84:02:dc:86:a4:9b:2c:e9:ca:7a:cf:49:8f:d2:d4:14: 21:d2:b0:a1:45:2b:c3:21:8e:35:9b:be:75:7f:04:23:fa:d1: 5b:df:44:1c:1b:6e:b1:f6:0b:86:34:11:17:65:88:46:72:9f: 9d:0c:96:9a:f2:ee:5d:85:cc:26:50:d0:fd:67:f0:b5:1c:18: 31:9a:31:cc:29:12:ed:46:80:80:a8:21:8d:92:0e:9e:97:c1: ce:6c:52:79:2f:67:d1:95:c4:13:a2:50:f4:c7:00:1d:a9:b3: 53:e7:9a:ab:49:a4:ed:e4:f4:91:b5:23:56:a2:4e:2a:6b:18: ec:d7:4c:71:58:20:0f:83:78:2a:54:0f:65:b1:49:e7:57:22: e7:1c:c6:cd:13:dc:c2:73:5c:f2:d0:b8:da:cd:b7:d3:fd:c1: 6a:e7:15:de:62:2c:40:54:8e:3c:2d:59:dc:12:01:05:2c:bf: 81:97:2d:84:9c:4f:1d:87:6e:ed:d7:88:9e:de:f3:29:ee:74: 5f:ce:8a:9e:89:6b:6c:f5:e3:88:d3:17:82:d5:20:2a:56:93: dc:08:d8:d3:7f:22:3e:c5:4d:ca:d0:7d:55:42:b5:e3:b8:6d: fa:40:6a:aa:b8:4d:cb:7f:38:9c:cd:52:5e:19:71:4a:23:82: bc:cf:0d:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnW6jSHYQsHh68e04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMzEyMjg0MloXDTI1MDgxMTEyMjg0MlowLzEtMCsGA1UEAxMk OTZlMzE4YWEtYTNhYy00MTQ1LWI3ZTItOTEyZTk0Nzc1Zjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpk9hlIoqHSt6WK79bTpue8mxUJpWhlMUR0O UcRE+KvLY6stDPUmsWAPXZh1r6YIQWkdMh0grss6UAI0NNIJ+1vIEHqXOTrhTGjg 4GHJkQjE0J47XSBD7rNsVw2F7ukIZ5AEAPdPIwT1dsrIijfiY4+U8nDMmCIvuktf tuAqZvYutGquxf+d0VdJmIN6WXvN6vXSeznZ4dtrLP6vJ9gTk8gukPatEp5IQmqQ s4XZQeHKe5Dmi7dhnP2jv48W++lZj8io5zFPYW2vMvXOrcdFbGiF/eg/LIzDVxn/ YaZb/PMxm/2KWKSB9zlOvTS4hMkEAZ/rah6KzBIthls92sqEbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzKJlTWaJY9oxxCVqHsJoDAm/svMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDZmYTllM2UtZjZiMy0z MmNhLWE1MDAtY2YwNzJkMjY0ODlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8xnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI77hALchqSbLOnKes9Jj9LUFCHSsKFFK8MhjjWbvnV/BCP60VvfRBwb brH2C4Y0ERdliEZyn50Mlpry7l2FzCZQ0P1n8LUcGDGaMcwpEu1GgICoIY2SDp6X wc5sUnkvZ9GVxBOiUPTHAB2ps1PnmqtJpO3k9JG1I1aiTiprGOzXTHFYIA+DeCpU D2WxSedXIuccxs0T3MJzXPLQuNrNt9P9wWrnFd5iLEBUjjwtWdwSAQUsv4GXLYSc Tx2Hbu3XiJ7e8ynudF/Oip6Ja2z144jTF4LVICpWk9wI2NN/Ij7FTcrQfVVCteO4 bfpAaqq4Tct/OJzNUl4ZcUojgrzPDTc= -----END CERTIFICATE-----Generated at Thu Jun 5 18:22:58 2025 by rpki-client