$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2af4ac4e-dd1b-3c21-8847-6e562cb10d88.roa File: 2af4ac4e-dd1b-3c21-8847-6e562cb10d88.roa (raw, json) Hash identifier: 8Ga53PXnqWZbPyBuM2p8xV6skck9srLUrwkdXuQ7z+s= Subject key identifier: 69:B0:7C:62:F5:7B:14:C8:D3:37:F3:BB:E5:38:56:C8:DE:F2:A5:7D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849D85F847DA097A0132892B300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2af4ac4e-dd1b-3c21-8847-6e562cb10d88.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 33905 IP address blocks: 23.1.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:84:7d:a0:97:a0:13:28:92:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=326420a9-8195-4816-9445-7c9713adb07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e5:4d:da:bc:7d:25:57:82:b9:2b:0f:05:28: ba:57:d6:6e:69:6c:55:34:21:b2:50:4b:d3:6e:3b: b0:70:66:cd:dd:bc:61:64:28:18:3c:e7:a1:2f:10: d1:8a:dc:31:b4:f6:ef:8a:ba:88:51:64:01:7d:7b: 21:c3:5b:92:a3:6d:e4:a6:68:93:10:01:5f:3a:49: d2:99:d7:73:4c:64:59:fc:05:12:b1:34:41:87:fd: bc:5c:12:03:0f:69:0d:48:bb:b2:5c:2b:01:53:e0: b4:34:ee:4f:9f:ca:64:af:27:93:e7:c0:19:c2:69: dd:69:db:ec:5b:8c:89:d3:e0:b5:9f:55:a0:0e:a7: fb:5e:ba:6a:aa:76:d1:af:c0:40:ab:4c:c8:91:2a: 20:38:1c:46:5d:db:56:38:41:8f:4f:6b:13:0a:58: f1:b3:0d:9f:f6:25:92:14:47:77:08:9c:94:ce:c6: ff:24:74:3a:0f:01:b1:4f:ca:59:02:8d:f9:d1:af: 4d:bf:a4:48:a6:c0:fe:30:dc:24:c7:80:e4:33:19: 8b:23:0e:be:84:c3:c6:ea:29:17:5d:11:36:5a:cc: 71:e6:4d:88:e2:02:79:45:8e:11:38:a2:2f:df:2c: fd:68:1b:ab:50:2d:7e:dc:a8:5b:2f:2d:9f:39:87: 83:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B0:7C:62:F5:7B:14:C8:D3:37:F3:BB:E5:38:56:C8:DE:F2:A5:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2af4ac4e-dd1b-3c21-8847-6e562cb10d88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:cf:39:55:21:46:92:05:5d:b1:b7:87:20:a2:9b:b7:b8:89: 26:c5:94:08:cc:54:2f:43:cd:ab:10:6e:81:9e:e9:35:b1:95: 29:ca:c1:ae:a6:94:61:6b:1b:5f:56:b5:1c:45:86:37:03:cc: a4:40:dc:8f:cd:f5:24:8d:d4:65:27:8a:eb:c3:30:4e:9b:73: f2:8b:18:ab:20:16:09:34:d8:4a:07:f1:1d:56:ec:23:3c:52: af:fe:9c:83:00:9b:4d:80:55:01:be:b1:d7:d6:88:44:2a:1a: bb:5b:15:6d:65:e9:b1:8c:60:04:7a:62:27:57:2c:e5:22:49: 8d:51:bb:a4:c1:54:af:19:2a:a2:28:c7:9b:55:92:54:1b:c2: 6f:78:75:67:45:2c:af:7e:f5:a0:b4:18:c4:e1:69:89:27:9d: a5:bd:ab:01:ce:31:53:3b:53:1d:16:a5:a5:64:27:9a:66:d0: 20:43:5b:aa:96:bb:53:68:3c:50:1d:85:58:88:13:b9:36:bb: 0e:2f:84:8d:c8:10:3f:e8:73:12:33:ee:fe:b9:c4:73:21:a7: 73:8e:32:a8:f2:a9:ae:ed:f8:c2:df:7b:12:92:36:7c:6d:6b: b2:23:44:80:15:42:65:ea:49:6b:66:60:f6:9a:10:0c:50:15: 2d:09:3b:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX4R9oJegEyiSswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MzI2NDIwYTktODE5NS00ODE2LTk0NDUtN2M5NzEzYWRiMDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOVN2rx9JVeCuSsPBSi6V9ZuaWxVNCGyUEvT bjuwcGbN3bxhZCgYPOehLxDRitwxtPbvirqIUWQBfXshw1uSo23kpmiTEAFfOknS mddzTGRZ/AUSsTRBh/28XBIDD2kNSLuyXCsBU+C0NO5Pn8pkryeT58AZwmndadvs W4yJ0+C1n1WgDqf7XrpqqnbRr8BAq0zIkSogOBxGXdtWOEGPT2sTCljxsw2f9iWS FEd3CJyUzsb/JHQ6DwGxT8pZAo350a9Nv6RIpsD+MNwkx4DkMxmLIw6+hMPG6ikX XRE2Wsxx5k2I4gJ5RY4ROKIv3yz9aBurUC1+3KhbLy2fOYeDgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmwfGL1exTI0zfzu+U4Vsje8qV9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmFmNGFjNGUtZGQxYi0z YzIxLTg4NDctNmU1NjJjYjEwZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwFjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzPOVUhRpIFXbG3hyCim7e4iSbFlAjMVC9DzasQboGe6TWxlSnKwa6m lGFrG19WtRxFhjcDzKRA3I/N9SSN1GUniuvDME6bc/KLGKsgFgk02EoH8R1W7CM8 Uq/+nIMAm02AVQG+sdfWiEQqGrtbFW1l6bGMYAR6YidXLOUiSY1Ru6TBVK8ZKqIo x5tVklQbwm94dWdFLK9+9aC0GMThaYknnaW9qwHOMVM7Ux0WpaVkJ5pm0CBDW6qW u1NoPFAdhViIE7k2uw4vhI3IED/ocxIz7v65xHMhp3OOMqjyqa7t+MLfexKSNnxt a7IjRIAVQmXqSWtmYPaaEAxQFS0JOxI= -----END CERTIFICATE-----Generated at Sat Jun 7 14:02:05 2025 by rpki-client