$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3882b44a-ca1e-3221-b251-988c637fe6f9.roa File: 3882b44a-ca1e-3221-b251-988c637fe6f9.roa (raw, json) Hash identifier: ilCBHKEDX4N/rLRdG82LsMvcbvhEowLaA/w8QOuE2lI= Subject key identifier: 6F:77:33:BA:11:5C:64:E7:69:3C:85:D4:34:94:0D:BF:16:A2:A5:79 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849E7BA61FCCD021FF4682C8380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3882b44a-ca1e-3221-b251-988c637fe6f9.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 16625 IP address blocks: 23.49.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:61:fc:cd:02:1f:f4:68:2c:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=cc050c43-c939-4451-a2b4-edde56ee3a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8c:da:0f:4d:84:01:21:1a:0a:33:8f:94:ca: b9:2b:1c:16:c7:9c:66:1a:25:a4:d8:b4:44:b4:dc: 38:a4:fa:d3:8c:98:39:38:f6:ba:bf:fd:73:34:06: 0c:cc:af:9f:2a:25:1a:68:5b:16:03:39:20:85:89: 58:f3:08:7d:96:27:c8:dd:8d:77:11:21:98:2d:1f: fa:22:26:60:99:7f:ef:4d:cc:6b:5c:9c:e0:1d:74: f3:3d:64:97:e1:80:ca:71:3d:d9:c3:81:dc:5a:92: 3a:47:ea:a2:00:47:93:c9:6f:f6:06:71:19:c4:aa: bd:f0:42:68:94:b3:8a:2c:65:1c:e4:d4:6b:22:1a: 7e:92:62:6d:92:95:af:9c:bb:d5:c4:f0:97:98:5a: e7:0f:f5:2c:46:74:df:03:75:0e:e3:55:f0:60:e9: 90:9e:69:0d:c4:26:af:29:06:47:32:f0:09:72:c1: 83:5f:59:59:9f:62:b5:9e:d4:96:39:13:a1:3e:00: 1f:51:61:ed:55:2f:10:87:95:b3:7b:41:eb:e1:81: c2:d0:ec:4b:d5:4e:1b:21:21:1a:ef:06:b6:2f:8f: 52:1e:e9:46:23:75:2f:5b:93:29:fd:ee:e8:5d:9a: 48:99:b7:7b:69:69:cd:2c:7f:b6:61:47:11:8f:61: 65:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:77:33:BA:11:5C:64:E7:69:3C:85:D4:34:94:0D:BF:16:A2:A5:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3882b44a-ca1e-3221-b251-988c637fe6f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.49.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:f0:7c:5e:de:ea:39:a6:91:59:b9:fb:3c:d0:14:85:06:0f: 72:88:8c:89:d0:59:8a:6f:c9:1e:c5:fe:4d:a6:26:ff:67:70: 60:30:68:77:97:7a:c8:01:68:cc:20:67:be:b3:d7:73:21:ec: bf:74:aa:47:a1:55:01:2c:ad:fe:5a:07:69:86:ad:50:16:06: 97:b5:db:79:b1:9f:c1:2c:fb:5c:60:f1:73:ce:f8:27:09:74: 55:d3:c3:c0:49:ae:73:c2:d9:16:e0:d4:0b:d0:30:f2:8d:28: 07:37:b3:d2:b8:0a:ae:2e:db:19:40:1f:b8:aa:58:bb:b9:23: 3e:f0:6c:a5:54:a2:65:97:c2:12:ae:6b:64:9f:97:ff:81:c7: 90:d6:cf:36:66:0e:29:b4:e9:8f:8d:57:7d:cb:dc:c1:37:2a: 4b:90:0f:7d:32:c6:aa:f6:84:a1:45:34:c7:22:91:fa:56:4e: 95:ed:25:00:8b:f4:f2:be:43:eb:2c:f3:e8:26:13:50:d9:41: 40:87:4d:a0:d0:60:01:ff:4e:fa:f4:48:9a:c6:90:83:59:1f: 84:df:46:41:6e:7f:1a:5d:c7:c1:7b:35:76:f4:c2:3b:4c:7f: 70:31:5a:70:df:5a:1b:0c:46:48:a5:6b:04:46:10:36:11:62: 4e:b2:58:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnumH8zQIf9Ggsg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk Y2MwNTBjNDMtYzkzOS00NDUxLWEyYjQtZWRkZTU2ZWUzYTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YzaD02EASEaCjOPlMq5KxwWx5xmGiWk2LRE tNw4pPrTjJg5OPa6v/1zNAYMzK+fKiUaaFsWAzkghYlY8wh9lifI3Y13ESGYLR/6 IiZgmX/vTcxrXJzgHXTzPWSX4YDKcT3Zw4HcWpI6R+qiAEeTyW/2BnEZxKq98EJo lLOKLGUc5NRrIhp+kmJtkpWvnLvVxPCXmFrnD/UsRnTfA3UO41XwYOmQnmkNxCav KQZHMvAJcsGDX1lZn2K1ntSWOROhPgAfUWHtVS8Qh5Wze0Hr4YHC0OxL1U4bISEa 7wa2L49SHulGI3UvW5Mp/e7oXZpImbd7aWnNLH+2YUcRj2FlVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG93M7oRXGTnaTyF1DSUDb8WoqV5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzg4MmI0NGEtY2ExZS0z MjIxLWIyNTEtOTg4YzYzN2ZlNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/wfF7e6jmmkVm5+zzQFIUGD3KIjInQWYpvyR7F/k2mJv9ncGAwaHeX esgBaMwgZ76z13Mh7L90qkehVQEsrf5aB2mGrVAWBpe123mxn8Es+1xg8XPO+CcJ dFXTw8BJrnPC2Rbg1AvQMPKNKAc3s9K4Cq4u2xlAH7iqWLu5Iz7wbKVUomWXwhKu a2Sfl/+Bx5DWzzZmDim06Y+NV33L3ME3KkuQD30yxqr2hKFFNMcikfpWTpXtJQCL 9PK+Q+ss8+gmE1DZQUCHTaDQYAH/Tvr0SJrGkINZH4TfRkFufxpdx8F7NXb0wjtM f3AxWnDfWhsMRkilawRGEDYRYk6yWC8= -----END CERTIFICATE-----Generated at Sat Jun 7 23:06:03 2025 by rpki-client