$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/215471b5-2100-3f40-ae75-911f05bd076e.roa File: 215471b5-2100-3f40-ae75-911f05bd076e.roa (raw, json) Hash identifier: hsnSpz/laNsmjRJrYrv7jesD8ztVsJ4gLHMZBquBea4= Subject key identifier: 38:AF:6B:9A:C9:5E:59:3D:62:0A:5D:AE:B2:5F:AD:7D:26:98:1F:45 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A03A55E2AB32E5E470941AF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/215471b5-2100-3f40-ae75-911f05bd076e.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.10.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:5e:2a:b3:2e:5e:47:09:41:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=429f2fb4-c8aa-45d6-9ccf-af3faced8cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:81:9a:b7:06:e7:17:cb:5c:52:8a:e0:95:a0: 3e:ed:44:7e:c5:8f:2f:99:2f:19:f7:ae:97:50:ca: a3:e4:05:d6:14:57:d4:35:78:a5:07:5d:87:97:2b: e9:a1:1b:ef:53:c4:6b:df:16:01:09:ab:0d:24:e4: b4:e4:ae:f1:8f:31:74:07:e6:5f:93:24:36:7d:57: e0:fd:0f:0d:62:63:57:2e:a5:45:8b:6d:17:a6:1c: da:b9:be:ee:0e:8e:99:df:df:57:33:4d:72:f0:37: d2:74:2e:39:d0:de:5d:bb:4d:e6:b0:ab:a1:f3:9c: 6a:a8:8c:1c:5a:8e:fb:f8:39:d2:aa:e4:91:0b:6a: be:f6:8f:d0:89:75:bf:32:e7:41:2a:fa:e0:ca:71: bc:ff:43:0f:78:29:42:70:c7:71:9c:34:1c:29:86: 30:f4:59:12:f4:ae:56:5d:b6:9f:5d:af:bd:3c:b0: d1:b7:12:6e:d6:d2:5e:3a:08:a6:3b:78:a5:17:87: ea:da:57:9a:4c:73:82:74:03:f9:44:3c:0e:f2:cc: 5e:88:01:43:96:04:a3:25:87:93:54:fc:26:63:db: 70:60:de:6d:d9:0b:05:49:e5:a2:7b:7d:4e:6c:2c: d9:1d:9e:b0:bb:30:94:55:cc:78:f0:4e:f2:86:10: 91:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AF:6B:9A:C9:5E:59:3D:62:0A:5D:AE:B2:5F:AD:7D:26:98:1F:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/215471b5-2100-3f40-ae75-911f05bd076e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.10.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:b3:ba:cf:09:f5:a7:25:66:93:28:cb:69:90:fd:f7:26:8b: ad:71:93:b5:2f:4c:e9:62:93:a3:ce:ff:01:ba:2f:1b:14:95: 37:d3:2b:97:8e:90:ad:86:33:d3:ae:e2:af:e7:7c:72:5e:7b: d5:09:68:96:d1:e1:f7:f0:2c:34:67:24:5c:31:2c:7d:b1:0c: f3:74:aa:d7:5f:81:84:8f:93:5f:d6:b9:99:04:be:ae:e6:1e: 3a:c0:06:25:3e:b9:02:6b:50:3e:29:e9:d7:a5:79:f9:76:89: 8a:f8:da:00:e3:4a:9d:87:9b:69:93:16:35:1b:31:ad:a4:59: 39:7c:d0:00:55:33:07:71:da:49:16:3e:c1:d6:46:3a:85:6a: 53:b7:88:de:4e:99:02:d7:d5:84:8b:80:c5:11:22:9a:21:0b: b2:aa:37:75:49:82:34:0e:ad:ee:b3:56:01:5c:9a:02:59:57: a9:46:42:97:ea:97:78:7e:71:ff:4b:19:c4:22:6c:4b:90:ce: 5c:dd:06:37:42:b2:2d:b3:0a:04:db:71:46:3a:63:03:c4:4a: 9b:3a:60:b9:d6:f9:f2:2a:02:3a:f9:5b:aa:d4:1d:c8:f1:1a: a7:eb:8b:af:47:09:3f:d2:a2:1d:1f:6c:34:75:df:4f:14:41: 59:64:38:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpV4qsy5eRwlBrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk NDI5ZjJmYjQtYzhhYS00NWQ2LTljY2YtYWYzZmFjZWQ4Y2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoGatwbnF8tcUorglaA+7UR+xY8vmS8Z966X UMqj5AXWFFfUNXilB12HlyvpoRvvU8Rr3xYBCasNJOS05K7xjzF0B+ZfkyQ2fVfg /Q8NYmNXLqVFi20Xphzaub7uDo6Z399XM01y8DfSdC450N5du03msKuh85xqqIwc Wo77+DnSquSRC2q+9o/QiXW/MudBKvrgynG8/0MPeClCcMdxnDQcKYYw9FkS9K5W XbafXa+9PLDRtxJu1tJeOgimO3ilF4fq2leaTHOCdAP5RDwO8sxeiAFDlgSjJYeT VPwmY9twYN5t2QsFSeWie31ObCzZHZ6wuzCUVcx48E7yhhCReQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiva5rJXlk9YgpdrrJfrX0mmB9FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjE1NDcxYjUtMjEwMC0z ZjQwLWFlNzUtOTExZjA1YmQwNzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGzus8J9aclZpMoy2mQ/fcmi61xk7UvTOlik6PO/wG6LxsUlTfTK5eO kK2GM9Ou4q/nfHJee9UJaJbR4ffwLDRnJFwxLH2xDPN0qtdfgYSPk1/WuZkEvq7m HjrABiU+uQJrUD4p6delefl2iYr42gDjSp2Hm2mTFjUbMa2kWTl80ABVMwdx2kkW PsHWRjqFalO3iN5OmQLX1YSLgMURIpohC7KqN3VJgjQOre6zVgFcmgJZV6lGQpfq l3h+cf9LGcQibEuQzlzdBjdCsi2zCgTbcUY6YwPESps6YLnW+fIqAjr5W6rUHcjx Gqfri69HCT/Soh0fbDR1308UQVlkOBs= -----END CERTIFICATE-----Generated at Thu Jun 5 18:40:52 2025 by rpki-client