$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08d18411-4d88-3602-b659-5517f402ef3d.roa File: 08d18411-4d88-3602-b659-5517f402ef3d.roa (raw, json) Hash identifier: 4JzHllxwX1stRYDASh3xDxYpppiiD3IIYeqbI3mzXJ0= Subject key identifier: 72:A8:43:DA:A2:AB:46:67:69:1D:C2:EC:43:24:95:39:23:CA:84:FC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849B14A4DD41BDBF20AAEFA1B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08d18411-4d88-3602-b659-5517f402ef3d.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 25019 IP address blocks: 23.39.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:4d:d4:1b:db:f2:0a:ae:fa:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=83a39d46-1855-4d12-aede-763c0bf39998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:be:14:76:a1:da:29:05:42:5c:30:8b:b6:45: d5:d0:01:b1:2d:32:37:35:de:01:64:a9:0d:3b:73: 6a:1a:d9:69:23:88:01:7b:6a:c0:0c:43:1b:ad:4c: 56:30:1b:97:af:28:8f:8a:50:39:9c:b3:2b:2c:87: ab:8e:28:52:59:45:81:89:89:a6:1a:d7:48:5e:85: d8:54:39:e7:77:e4:30:ef:a5:17:b8:37:c4:cc:96: 56:3d:5d:da:50:06:53:e8:29:f4:45:0b:7e:e5:1c: ea:b5:52:d2:24:55:05:37:90:61:c4:df:9c:b8:30: 0b:56:4e:4a:a3:81:2d:b8:44:f6:b4:9f:f1:9d:b1: 46:fa:a6:ff:66:3a:0a:8b:9d:2c:9c:22:71:fc:d3: 44:83:e1:15:dc:d6:1d:32:6b:dd:e9:48:7c:51:90: c8:42:32:41:93:9c:50:13:53:17:1b:ea:a6:bc:cd: 45:31:6a:d2:73:0c:42:d9:4b:90:dc:10:01:85:05: 02:10:f7:ab:68:4a:1a:39:6b:89:63:e6:50:57:fe: ea:9e:95:c9:7a:12:09:e7:98:9c:b7:a4:49:9e:ab: 69:aa:fc:94:0b:4b:6f:8b:b4:09:0a:c2:6d:85:6c: 34:23:bf:5f:59:27:2a:6f:bf:48:d1:2e:f4:56:57: 33:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A8:43:DA:A2:AB:46:67:69:1D:C2:EC:43:24:95:39:23:CA:84:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08d18411-4d88-3602-b659-5517f402ef3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:f1:22:0b:46:af:44:51:a4:db:05:a1:f3:80:44:ad:0f:24: 24:73:ea:20:6c:ed:ec:96:11:07:87:17:49:a5:7d:4c:ec:de: 41:dc:6d:98:e8:37:f9:b1:31:ab:28:ea:d6:1d:52:d8:93:22: 6f:f9:99:e5:da:19:50:64:77:02:dd:b7:b6:0c:b8:a0:ae:94: 1f:cc:da:44:84:72:df:f9:0c:34:85:49:2e:03:fc:f6:6a:4b: e6:89:a7:a0:07:20:0b:2c:a0:83:c1:e1:15:c0:37:98:83:b5: 1d:11:4b:0b:23:a5:6e:5d:95:92:55:7b:f5:e0:3f:0a:8f:b3: 8e:a2:18:1a:33:4c:81:79:83:cb:a7:cb:3a:3c:c3:e2:3b:b5: c2:a2:f0:0b:a1:7a:8e:8f:a6:90:c5:10:bc:61:22:55:eb:b0: 8b:be:e4:34:15:42:db:af:62:a9:61:10:4c:d7:dd:c3:8f:17: 6c:f4:b1:b7:9d:97:05:cf:df:a6:9e:8c:45:9d:cf:f0:9b:da: 03:74:c7:01:c9:78:92:4c:bb:95:f1:8d:96:37:51:7e:d3:53: ea:08:c7:c9:22:8b:1c:04:98:62:b9:29:6b:c0:b4:9c:2f:9c: a7:9b:54:50:e2:48:a4:d2:ae:3d:b4:d9:8d:03:8c:53:d3:2d: 09:e4:fe:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSk3UG9vyCq76GwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ODNhMzlkNDYtMTg1NS00ZDEyLWFlZGUtNzYzYzBiZjM5OTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb4UdqHaKQVCXDCLtkXV0AGxLTI3Nd4BZKkN O3NqGtlpI4gBe2rADEMbrUxWMBuXryiPilA5nLMrLIerjihSWUWBiYmmGtdIXoXY VDnnd+Qw76UXuDfEzJZWPV3aUAZT6Cn0RQt+5RzqtVLSJFUFN5BhxN+cuDALVk5K o4EtuET2tJ/xnbFG+qb/ZjoKi50snCJx/NNEg+EV3NYdMmvd6Uh8UZDIQjJBk5xQ E1MXG+qmvM1FMWrScwxC2UuQ3BABhQUCEPeraEoaOWuJY+ZQV/7qnpXJehIJ55ic t6RJnqtpqvyUC0tvi7QJCsJthWw0I79fWScqb79I0S70VlczzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKoQ9qiq0ZnaR3C7EMklTkjyoT8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDhkMTg0MTEtNGQ4OC0z NjAyLWI2NTktNTUxN2Y0MDJlZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyfIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfxIgtGr0RRpNsFofOARK0PJCRz6iBs7eyWEQeHF0mlfUzs3kHcbZjo N/mxMaso6tYdUtiTIm/5meXaGVBkdwLdt7YMuKCulB/M2kSEct/5DDSFSS4D/PZq S+aJp6AHIAssoIPB4RXAN5iDtR0RSwsjpW5dlZJVe/XgPwqPs46iGBozTIF5g8un yzo8w+I7tcKi8Auheo6PppDFELxhIlXrsIu+5DQVQtuvYqlhEEzX3cOPF2z0sbed lwXP36aejEWdz/Cb2gN0xwHJeJJMu5XxjZY3UX7TU+oIx8kiixwEmGK5KWvAtJwv nKebVFDiSKTSrj202Y0DjFPTLQnk/i8= -----END CERTIFICATE-----Generated at Sat Jun 7 14:53:31 2025 by rpki-client