$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1eafcbb5-7511-36b7-a287-09f5b527f0c4.roa File: 1eafcbb5-7511-36b7-a287-09f5b527f0c4.roa (raw, json) Hash identifier: Hs9pFR3O+mCCRaFYJEPaf31jO5hujRlCnpBzBkhTdeI= Subject key identifier: D8:E3:39:A7:21:1F:A8:E8:D9:3C:8A:83:39:FE:E6:92:E5:D5:0F:21 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A1B6014606C91B976BB4B2080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1eafcbb5-7511-36b7-a287-09f5b527f0c4.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 4775 IP address blocks: 23.48.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:14:60:6c:91:b9:76:bb:4b:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=ee47cf2c-bd11-43f7-ad73-fa5e030f39b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0d:35:69:04:cf:80:9e:7f:4f:fc:06:bf:72: 74:a8:77:61:73:06:dc:0b:ae:36:d8:1a:45:93:ad: 70:c0:e1:55:d1:53:dd:17:2a:25:d7:e0:16:b4:33: db:71:7e:39:f3:75:1f:17:79:cf:50:17:54:b9:ff: 23:be:86:f5:78:26:62:56:c5:fb:90:b7:ad:5d:26: a1:db:33:af:17:79:c6:d5:fa:49:54:b4:66:55:af: ec:59:94:47:73:e3:4d:ab:d8:fc:80:ea:1b:6f:87: 4b:f6:3d:1b:d0:6b:9d:10:ac:cb:75:34:33:3a:be: 80:52:de:87:22:fb:ba:77:ca:6f:18:82:7e:71:4a: 60:d6:10:05:33:9c:4b:24:41:20:ff:48:fe:9d:42: e6:04:19:9a:46:0d:1e:0e:c9:7b:1a:bd:d2:ad:7b: e9:0d:83:90:68:13:11:b0:24:0a:f0:bd:5c:f3:5e: 55:c9:85:be:0f:89:0f:ec:5e:3c:29:8f:14:7b:82: 8b:c0:95:81:a4:1b:3b:20:b1:47:0a:c3:b3:72:51: 89:21:da:43:c1:64:76:cc:46:e1:39:09:ab:99:05: b4:73:db:e7:76:6d:d4:fc:da:33:3a:17:94:8c:d4: d2:a8:35:3e:aa:da:02:c9:70:a4:ea:84:87:3b:74: 4b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E3:39:A7:21:1F:A8:E8:D9:3C:8A:83:39:FE:E6:92:E5:D5:0F:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1eafcbb5-7511-36b7-a287-09f5b527f0c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.92.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:59:9b:89:00:f5:fb:60:b0:b6:9c:56:fe:2a:c2:93:7c:f2: 03:06:d6:60:ed:cd:29:5c:b0:44:a2:e7:f6:e0:91:a2:63:0e: c9:4e:ca:47:43:42:a9:36:3c:5b:1f:2c:6a:76:b8:b7:7d:b9: 5b:f6:a9:b9:84:55:20:e6:4b:17:e5:3f:21:f2:73:04:4c:8e: 83:55:67:d6:96:09:1c:c7:16:bc:44:5e:8d:23:38:3c:26:db: 36:a2:a0:bd:09:9f:76:d3:02:37:69:f8:4c:0e:5f:2c:72:7f: 2b:2a:0d:21:78:cc:b4:2a:48:3a:9c:8c:af:9a:79:a6:74:41: e2:46:7b:7c:ed:95:b5:a2:35:49:14:26:63:e5:e6:9e:39:1c: bf:24:80:9c:8c:d5:3d:3f:89:68:cf:05:28:1b:76:80:c5:dd: be:64:fa:e5:bc:31:e7:6b:ca:bf:ad:72:fd:70:ee:e7:ea:fa: 3f:bb:f9:82:78:84:65:be:83:07:1a:9c:b0:a3:55:ae:bd:be: 5c:66:e1:1f:2e:40:6f:eb:09:41:d0:a2:67:47:32:1f:d0:43: 6d:80:37:51:5f:29:09:28:fc:d5:07:5f:d4:2e:77:42:bd:cf: b2:0a:33:a4:24:49:f5:61:52:35:ec:a7:f5:16:f8:d7:51:80: 44:ec:90:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYBRgbJG5drtLIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk ZWU0N2NmMmMtYmQxMS00M2Y3LWFkNzMtZmE1ZTAzMGYzOWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ01aQTPgJ5/T/wGv3J0qHdhcwbcC6422BpF k61wwOFV0VPdFyol1+AWtDPbcX4583UfF3nPUBdUuf8jvob1eCZiVsX7kLetXSah 2zOvF3nG1fpJVLRmVa/sWZRHc+NNq9j8gOobb4dL9j0b0GudEKzLdTQzOr6AUt6H Ivu6d8pvGIJ+cUpg1hAFM5xLJEEg/0j+nULmBBmaRg0eDsl7Gr3SrXvpDYOQaBMR sCQK8L1c815VyYW+D4kP7F48KY8Ue4KLwJWBpBs7ILFHCsOzclGJIdpDwWR2zEbh OQmrmQW0c9vndm3U/NozOheUjNTSqDU+qtoCyXCk6oSHO3RLYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjjOachH6jo2TyKgzn+5pLl1Q8hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWVhZmNiYjUtNzUxMS0z NmI3LWEyODctMDlmNWI1MjdmMGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFzBcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdZm4kA9ftgsLacVv4qwpN88gMG1mDtzSlcsESi5/bgkaJjDslOykdD Qqk2PFsfLGp2uLd9uVv2qbmEVSDmSxflPyHycwRMjoNVZ9aWCRzHFrxEXo0jODwm 2zaioL0Jn3bTAjdp+EwOXyxyfysqDSF4zLQqSDqcjK+aeaZ0QeJGe3ztlbWiNUkU JmPl5p45HL8kgJyM1T0/iWjPBSgbdoDF3b5k+uW8Medryr+tcv1w7ufq+j+7+YJ4 hGW+gwcanLCjVa69vlxm4R8uQG/rCUHQomdHMh/QQ22AN1FfKQko/NUHX9Qud0K9 z7IKM6QkSfVhUjXsp/UW+NdRgETskOQ= -----END CERTIFICATE-----Generated at Sat Jun 7 04:07:23 2025 by rpki-client