$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ffeb7dd-f695-360d-bef8-615dc87f0881.roa File: 0ffeb7dd-f695-360d-bef8-615dc87f0881.roa (raw, json) Hash identifier: r12k1MT4gBIICN61d1YlGYA9Qzyw541iH5PQiGSz990= Subject key identifier: 66:33:FD:9B:AB:4D:38:63:F2:C6:79:46:4E:27:2D:08:B8:7B:C6:58 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849F2E54D3BBE74781751C57880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ffeb7dd-f695-360d-bef8-615dc87f0881.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 55836 IP address blocks: 23.64.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:4d:3b:be:74:78:17:51:c5:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=0c1427d5-9156-42d2-bdbe-9f16c0277eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:18:81:42:8c:45:5f:a5:62:d1:43:f5:6c:9c: 66:6d:94:97:f9:ae:0a:7d:41:39:c2:4e:d1:4d:10: 78:a5:38:55:61:cc:f0:cc:0d:24:6d:ec:cf:86:54: 6b:d7:89:6e:ff:aa:c5:b9:bb:68:8e:7d:15:c6:55: cd:e1:fc:64:f3:6d:27:47:4a:9d:f0:51:e6:dd:5a: c5:bb:c7:e1:3d:38:0f:e7:12:4f:30:7e:9a:bc:cc: 54:34:80:50:c6:6f:4a:83:a9:ab:2a:c7:a1:30:2c: ab:74:00:4c:31:21:54:13:c0:c8:8e:68:21:0f:e5: be:47:38:e7:31:0e:bb:91:ee:97:03:0e:ae:01:0e: 27:76:fc:b7:b3:88:de:05:53:54:a4:33:48:54:46: ad:76:9b:c3:97:a7:13:0f:8f:a1:38:d7:1f:c4:c0: 82:12:2d:85:32:a7:0b:3d:f9:8d:f6:86:e6:9c:fa: db:09:c8:87:07:75:bb:ae:91:65:b5:51:94:d0:ad: 38:3b:a2:05:8e:9a:28:8e:7b:0d:cc:07:e8:78:cd: 97:8c:fb:11:e7:aa:c6:49:82:0a:a2:21:26:15:b8: 06:c6:24:b8:00:8d:ba:d5:56:41:42:12:ba:53:8b: e6:5e:e2:9a:b4:2e:98:2d:e0:6d:33:6d:99:55:ef: 95:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:33:FD:9B:AB:4D:38:63:F2:C6:79:46:4E:27:2D:08:B8:7B:C6:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ffeb7dd-f695-360d-bef8-615dc87f0881.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.64.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:91:27:79:7e:8e:c2:d8:6f:dd:ec:f0:33:b7:f2:2b:91:7a: 9b:97:9d:f7:01:13:5c:44:4c:4f:7a:0e:84:55:90:01:0a:95: 6a:f3:db:22:40:43:34:a1:fb:f3:b9:85:a9:0f:1c:f1:86:b0: 3c:be:52:01:a0:f2:f8:95:7a:31:5c:ba:4a:4d:ac:c0:7d:50: 5f:8c:60:97:e7:cf:9e:21:93:e2:cb:fa:78:5a:07:ca:db:3a: 48:fa:d4:e3:fe:1f:6b:47:2a:8e:98:b8:2c:cf:24:1c:34:96: 62:f2:4a:86:3b:78:a6:80:35:1f:0f:b9:5e:48:01:b1:9d:0c: a8:0e:c4:65:b4:79:e2:70:f6:8a:2c:2b:54:7a:ad:f1:ae:cd: d4:54:50:af:5f:db:e9:a8:e5:4d:59:ce:61:be:51:2f:1d:92: 19:e3:e2:97:ed:7f:c9:89:08:03:da:2e:df:a6:3f:d6:f7:ba: 72:cf:e3:34:50:f4:bc:ec:fa:95:9d:42:8c:2d:61:73:8a:d5: 8c:d0:4d:9d:24:ac:36:90:0d:e8:1c:52:8b:58:64:77:78:4d: c1:77:56:34:47:88:dc:a4:c8:41:b5:0c:41:e7:be:32:c6:b0: ce:77:4e:ac:70:62:20:87:c1:8c:7e:19:d3:ce:1e:5c:ee:3d: 59:91:c6:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5U07vnR4F1HFeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk MGMxNDI3ZDUtOTE1Ni00MmQyLWJkYmUtOWYxNmMwMjc3ZWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRiBQoxFX6Vi0UP1bJxmbZSX+a4KfUE5wk7R TRB4pThVYczwzA0kbezPhlRr14lu/6rFubtojn0VxlXN4fxk820nR0qd8FHm3VrF u8fhPTgP5xJPMH6avMxUNIBQxm9Kg6mrKsehMCyrdABMMSFUE8DIjmghD+W+Rzjn MQ67ke6XAw6uAQ4ndvy3s4jeBVNUpDNIVEatdpvDl6cTD4+hONcfxMCCEi2FMqcL PfmN9obmnPrbCciHB3W7rpFltVGU0K04O6IFjpoojnsNzAfoeM2XjPsR56rGSYIK oiEmFbgGxiS4AI261VZBQhK6U4vmXuKatC6YLeBtM22ZVe+VKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYz/ZurTThj8sZ5Rk4nLQi4e8ZYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGZmZWI3ZGQtZjY5NS0z NjBkLWJlZjgtNjE1ZGM4N2YwODgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0CMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiRJ3l+jsLYb93s8DO38iuRepuXnfcBE1xETE96DoRVkAEKlWrz2yJA QzSh+/O5hakPHPGGsDy+UgGg8viVejFcukpNrMB9UF+MYJfnz54hk+LL+nhaB8rb Okj61OP+H2tHKo6YuCzPJBw0lmLySoY7eKaANR8PuV5IAbGdDKgOxGW0eeJw9oos K1R6rfGuzdRUUK9f2+mo5U1ZzmG+US8dkhnj4pftf8mJCAPaLt+mP9b3unLP4zRQ 9Lzs+pWdQowtYXOK1YzQTZ0krDaQDegcUotYZHd4TcF3VjRHiNykyEG1DEHnvjLG sM53TqxwYiCHwYx+GdPOHlzuPVmRxmc= -----END CERTIFICATE-----Generated at Thu Jun 5 18:25:19 2025 by rpki-client