$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/239720e0-e11d-30ca-af45-e60757f8a209.roa File: 239720e0-e11d-30ca-af45-e60757f8a209.roa (raw, json) Hash identifier: gXkT9wD9YYzqft+AZp+iJ8tKQMtemq2AMCrDG01mkc4= Subject key identifier: BD:96:2E:77:4B:F0:38:66:25:34:21:44:DD:54:E6:2C:88:C9:9A:AD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A03A56D37F6875DB52668E600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/239720e0-e11d-30ca-af45-e60757f8a209.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 16625 IP address blocks: 23.3.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:6d:37:f6:87:5d:b5:26:68:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=b5e0097d-36e1-4b1a-8750-76bd5d280e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:57:82:d4:85:6b:8b:01:34:23:70:80:4e:dd: d4:c8:de:85:37:ba:c5:6f:b4:59:8d:41:04:22:b0: 14:82:62:90:96:0c:50:19:b5:0a:93:56:42:dc:87: be:0e:79:72:e1:6b:e5:5c:38:93:58:22:67:2f:a8: 32:77:7a:48:b6:ae:81:94:ba:66:12:d1:73:fe:43: 08:0f:95:ce:a6:ac:34:55:f1:f7:94:ca:2f:75:0e: 7a:d3:d2:88:b2:2c:04:76:87:77:f0:06:1a:82:44: d1:b7:70:2d:7f:6c:1d:a8:fd:92:47:b8:4f:24:fd: 00:2e:21:75:b7:a1:69:81:fa:5c:4b:5a:b5:b6:37: b1:81:45:e6:a1:e1:49:fc:04:98:d8:c7:41:ed:bd: b8:ea:cb:71:c9:73:fe:09:a1:f8:74:8a:da:f1:6c: b2:7f:43:42:3e:5f:13:b2:ba:f3:ef:ee:6d:e4:2f: ea:c9:ac:90:0c:e2:60:cf:19:ac:3f:3c:a9:71:74: 2e:02:79:86:06:e1:d9:d5:bb:24:ca:fe:b0:89:4f: 9d:16:67:d5:ee:24:d4:06:39:a5:e2:7c:71:98:d2: 17:49:f3:f0:66:54:79:df:a7:07:70:60:9d:00:a7: 09:28:17:91:45:2f:25:55:9c:d1:c7:2b:1e:f5:dd: c1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:96:2E:77:4B:F0:38:66:25:34:21:44:DD:54:E6:2C:88:C9:9A:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/239720e0-e11d-30ca-af45-e60757f8a209.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:9f:06:01:20:7f:19:72:e2:bc:bb:33:8e:09:28:af:65:ad: 66:ba:87:28:96:1d:32:04:a4:4d:c9:47:82:35:c5:26:c2:bc: a2:ba:f7:ac:93:53:56:c1:07:d1:cd:fb:e6:42:5d:18:17:e2: 17:8c:4a:4a:7a:15:b0:ea:69:82:2c:fd:17:9d:7f:4f:3d:1a: e0:10:79:16:0f:03:ee:e0:2f:63:52:66:29:7f:9f:d2:44:30: a3:bf:d0:8e:91:1c:79:7e:75:79:0f:de:f0:32:f5:ac:29:a1: 1a:cf:5e:e3:34:5f:a2:52:6e:61:57:5a:1c:2c:ed:1b:33:a5: 1f:e6:6c:03:dc:df:2b:e4:00:ad:41:f4:d0:a5:c5:2f:05:0b: a9:4e:7f:f0:12:d8:38:7b:0a:3e:0b:08:b8:fd:04:9a:a2:73: 80:4d:b9:9c:b6:c2:e6:cb:89:07:2d:0e:07:50:e6:49:31:c4: 4c:96:b4:ee:34:52:a4:d9:4e:b9:46:e8:2a:e9:ea:5a:21:ff: 5b:b4:5b:5f:55:1d:99:20:67:f5:3c:e2:be:68:fe:a3:ca:a3: 9e:85:22:14:60:76:72:6b:77:ff:50:f2:e6:1f:e4:8d:2a:a8: 41:27:d8:8b:19:e8:31:54:e2:0b:f9:9e:e8:18:03:93:aa:10: 8b:71:a5:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpW039oddtSZo5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk YjVlMDA5N2QtMzZlMS00YjFhLTg3NTAtNzZiZDVkMjgwZTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+1eC1IVriwE0I3CATt3UyN6FN7rFb7RZjUEE IrAUgmKQlgxQGbUKk1ZC3Ie+Dnly4WvlXDiTWCJnL6gyd3pItq6BlLpmEtFz/kMI D5XOpqw0VfH3lMovdQ5609KIsiwEdod38AYagkTRt3Atf2wdqP2SR7hPJP0ALiF1 t6FpgfpcS1q1tjexgUXmoeFJ/ASY2MdB7b246stxyXP+CaH4dIra8Wyyf0NCPl8T srrz7+5t5C/qyayQDOJgzxmsPzypcXQuAnmGBuHZ1bskyv6wiU+dFmfV7iTUBjml 4nxxmNIXSfPwZlR536cHcGCdAKcJKBeRRS8lVZzRxyse9d3BvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2WLndL8DhmJTQhRN1U5iyIyZqtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjM5NzIwZTAtZTExZC0z MGNhLWFmNDUtZTYwNzU3ZjhhMjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKfBgEgfxly4ry7M44JKK9lrWa6hyiWHTIEpE3JR4I1xSbCvKK696yT U1bBB9HN++ZCXRgX4heMSkp6FbDqaYIs/Redf089GuAQeRYPA+7gL2NSZil/n9JE MKO/0I6RHHl+dXkP3vAy9awpoRrPXuM0X6JSbmFXWhws7RszpR/mbAPc3yvkAK1B 9NClxS8FC6lOf/AS2Dh7Cj4LCLj9BJqic4BNuZy2wubLiQctDgdQ5kkxxEyWtO40 UqTZTrlG6Crp6loh/1u0W19VHZkgZ/U84r5o/qPKo56FIhRgdnJrd/9Q8uYf5I0q qEEn2IsZ6DFU4gv5nugYA5OqEItxpdo= -----END CERTIFICATE-----Generated at Sun Jun 8 06:21:18 2025 by rpki-client