$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11d9fc95-279c-3b6c-adc9-dff5a0966e33.roa File: 11d9fc95-279c-3b6c-adc9-dff5a0966e33.roa (raw, json) Hash identifier: IemgLanst/H4jl9I0Q8YiUxToMTyaNUIdMdHVjzdKwA= Subject key identifier: 82:C5:92:01:EB:C4:A1:25:E8:E2:5B:60:45:B3:A6:D1:B4:D0:65:63 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A03A56A491A88365C9DA0B3C8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11d9fc95-279c-3b6c-adc9-dff5a0966e33.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 16625 IP address blocks: 23.7.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:6a:49:1a:88:36:5c:9d:a0:b3:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=861c4eaf-47a3-40f4-b276-f3973bdd721d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ae:ff:08:9a:95:53:04:a6:aa:7c:a0:de:5c: cc:46:61:80:f4:80:19:86:3b:9b:6b:78:e9:39:dd: e3:79:e4:97:94:3a:ef:f7:45:a9:0b:31:3d:a2:69: 9c:f3:8d:38:20:00:6b:9e:87:1b:dd:ee:77:9f:95: a3:2b:a8:42:e2:f5:4c:10:d1:d6:e2:e0:ed:a9:99: 66:bb:6b:40:b1:01:84:8f:49:18:71:3e:45:96:59: 0c:88:e8:6c:9a:34:a5:b1:ff:02:78:79:7a:04:ca: e8:68:85:c9:da:34:36:ee:7c:e0:cb:bc:cd:7a:a9: f9:24:57:95:60:72:62:73:64:f7:e1:a7:36:8e:53: 4e:66:7b:0b:b8:df:27:f5:f9:b9:19:27:1c:fd:5a: 5c:b4:85:98:fe:9a:6a:cc:ae:49:64:fb:bd:15:26: bd:c4:bc:7b:3a:9a:fa:87:04:d9:f2:5e:96:74:48: 69:d5:8a:e5:6a:49:c9:5f:f1:2f:62:e9:13:0c:f8: 6e:a5:62:a9:90:d7:ee:50:10:21:08:cc:1c:78:95: 5d:93:60:f9:6e:99:ee:c6:fe:71:a9:99:59:31:03: 71:18:0c:5b:79:94:28:7d:59:35:69:d3:31:45:0c: c9:98:1d:1d:87:83:24:03:f4:09:32:eb:5e:27:d4: 94:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C5:92:01:EB:C4:A1:25:E8:E2:5B:60:45:B3:A6:D1:B4:D0:65:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11d9fc95-279c-3b6c-adc9-dff5a0966e33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.7.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:c8:c0:8b:68:1b:16:51:24:5c:54:a1:2a:7c:91:bc:60:8b: f7:86:9a:fd:fc:5a:0c:0a:a5:b6:48:62:01:2e:c7:e3:2c:17: c0:35:a1:85:87:bb:51:2f:36:70:e6:1c:91:75:f3:61:3e:19: e7:b6:eb:f8:ca:ad:d8:c1:5e:b2:0a:38:f6:06:3c:7e:8d:e9: 1b:3d:e0:f0:8c:ce:29:69:b3:11:81:3f:7f:35:38:70:7b:51: d6:52:46:9e:5e:df:b9:29:62:8b:45:a0:aa:cc:b8:fa:6f:42: 82:81:e2:c3:db:14:55:dd:7f:a8:ce:37:e8:0d:29:d4:73:8a: a9:be:66:e4:b7:70:6a:b8:21:66:1a:89:fd:59:32:44:9b:f4: 73:a8:37:10:ad:66:f6:c5:94:7c:65:bc:90:78:9b:f6:3e:d7: 16:2d:7f:6a:c3:91:40:09:36:d3:36:d0:f8:9f:a6:83:aa:bb: 2d:62:cc:9a:16:dd:36:89:75:1a:74:9e:45:86:61:77:3b:bd: 70:1e:3e:c3:e2:61:44:36:b1:49:67:00:bc:46:04:5c:28:13: 8c:94:b6:4e:c9:18:c0:63:58:cf:2b:bb:f1:24:69:a9:28:f6: ef:32:5d:0f:0e:ae:de:11:42:90:63:05:46:5e:3d:17:d2:c3: 6e:57:d1:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpWpJGog2XJ2gs8gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk ODYxYzRlYWYtNDdhMy00MGY0LWIyNzYtZjM5NzNiZGQ3MjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK7/CJqVUwSmqnyg3lzMRmGA9IAZhjuba3jp Od3jeeSXlDrv90WpCzE9ommc8404IABrnocb3e53n5WjK6hC4vVMENHW4uDtqZlm u2tAsQGEj0kYcT5FllkMiOhsmjSlsf8CeHl6BMroaIXJ2jQ27nzgy7zNeqn5JFeV YHJic2T34ac2jlNOZnsLuN8n9fm5GScc/VpctIWY/ppqzK5JZPu9FSa9xLx7Opr6 hwTZ8l6WdEhp1YrlaknJX/EvYukTDPhupWKpkNfuUBAhCMwceJVdk2D5bpnuxv5x qZlZMQNxGAxbeZQofVk1adMxRQzJmB0dh4MkA/QJMuteJ9SUTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILFkgHrxKEl6OJbYEWzptG00GVjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTFkOWZjOTUtMjc5Yy0z YjZjLWFkYzktZGZmNWEwOTY2ZTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfIwItoGxZRJFxUoSp8kbxgi/eGmv38WgwKpbZIYgEux+MsF8A1oYWH u1EvNnDmHJF182E+Gee26/jKrdjBXrIKOPYGPH6N6Rs94PCMzilpsxGBP381OHB7 UdZSRp5e37kpYotFoKrMuPpvQoKB4sPbFFXdf6jON+gNKdRziqm+ZuS3cGq4IWYa if1ZMkSb9HOoNxCtZvbFlHxlvJB4m/Y+1xYtf2rDkUAJNtM20PifpoOquy1izJoW 3TaJdRp0nkWGYXc7vXAePsPiYUQ2sUlnALxGBFwoE4yUtk7JGMBjWM8ru/Ekaako 9u8yXQ8Ort4RQpBjBUZePRfSw25X0Sw= -----END CERTIFICATE-----Generated at Sat Jun 7 13:43:51 2025 by rpki-client