$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a6e7276-f805-32f2-9ae0-877f17e86d0d.roa File: 3a6e7276-f805-32f2-9ae0-877f17e86d0d.roa (raw, json) Hash identifier: k97beehJOjbAH8x57Ha42FT9RW1EEXdoaZ0ggGQ7wqY= Subject key identifier: 4D:0E:FD:69:BE:99:D0:40:13:6C:EE:D8:B6:3A:1A:3C:C6:CC:EF:8C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849F01A9326E983943E5AEFAB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a6e7276-f805-32f2-9ae0-877f17e86d0d.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 16625 IP address blocks: 23.66.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:93:26:e9:83:94:3e:5a:ef:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=a9c9f1db-73e8-4333-9632-0ff501faf176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:95:ec:9f:d0:89:db:2a:7b:40:01:94:48:63: 9f:b0:b1:02:af:65:d2:58:e7:0d:5d:ae:29:74:e8: 81:53:28:c0:8b:02:7d:37:ae:65:63:38:68:74:71: e3:fc:61:58:90:de:ad:20:81:c4:35:be:29:f3:d7: ac:cb:d3:d0:b9:51:d3:b8:6d:a4:07:86:af:d2:f1: 01:44:ec:17:2e:49:78:fb:db:b8:c2:d6:7a:4d:42: a8:5b:99:81:52:b2:2d:d2:61:ea:5b:c1:29:86:af: 28:f9:f8:54:d3:88:9a:a1:df:9f:4b:c7:a4:6f:82: f8:f0:17:4d:fc:70:63:2f:a5:f7:97:b5:15:1b:9b: cf:a9:39:3f:0e:b9:57:80:74:89:ce:73:03:f4:9f: 32:9c:42:41:f5:82:68:1b:23:52:aa:3a:d5:3b:38: 42:9b:1e:5a:96:8e:3c:1a:a1:d6:c9:ed:e2:bf:72: 5a:bd:6c:32:9b:9e:f0:d2:76:61:d7:a2:2a:19:d9: 0d:29:1f:96:fa:90:66:d6:c8:f9:f4:00:83:6d:de: cc:87:2e:2a:38:06:c9:b5:13:61:4a:18:36:9a:48: dc:b4:88:d8:9d:4a:8e:61:f1:d0:03:31:c2:e8:f2: d7:f3:af:b7:e1:1e:46:c3:33:c0:84:5a:a2:44:30: 2a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0E:FD:69:BE:99:D0:40:13:6C:EE:D8:B6:3A:1A:3C:C6:CC:EF:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a6e7276-f805-32f2-9ae0-877f17e86d0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.66.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:0e:42:5a:cb:f5:6c:36:af:fb:c9:ac:2c:36:5e:1c:11:dc: 87:1a:81:87:d5:ba:25:a8:7e:6c:2e:bd:65:b2:3b:d1:36:53: c4:60:0e:d7:c6:e9:87:01:52:9c:04:b9:7e:24:26:50:9e:cc: 55:03:14:cf:4a:03:b3:e2:53:00:53:ef:e3:0d:b8:69:0f:45: 35:02:75:78:50:b1:fa:7b:15:df:e6:87:5b:1b:e0:2f:1a:2a: d5:31:45:b4:ba:c4:32:a1:3a:d0:7a:63:7e:22:7f:f9:86:50: 1d:aa:8d:df:0d:cc:0a:d8:35:17:c5:5b:65:46:a0:bd:11:d7: c0:50:a4:9e:69:f6:0c:b9:9b:49:0a:99:5f:22:f1:a4:6f:eb: 8f:02:a2:91:a7:fe:34:aa:a5:8b:2e:87:95:c7:06:04:53:8c: 6a:dc:0a:00:fe:d9:79:24:e9:8a:b9:29:d6:76:7c:37:05:4e: 8b:b0:29:12:90:87:df:6a:b4:c8:38:13:49:2a:d9:ed:e1:b6: e7:89:f1:37:35:ed:67:5b:6a:6d:cf:76:f4:94:f9:32:17:06: cb:6c:a9:76:91:0e:54:b2:b8:41:c0:9d:f5:a2:d0:21:46:70: d8:70:e9:0c:2f:89:d5:b9:12:f5:a4:3a:7d:37:5e:ca:b7:85: e0:37:cf:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGpMm6YOUPlrvqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk YTljOWYxZGItNzNlOC00MzMzLTk2MzItMGZmNTAxZmFmMTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5Xsn9CJ2yp7QAGUSGOfsLECr2XSWOcNXa4p dOiBUyjAiwJ9N65lYzhodHHj/GFYkN6tIIHENb4p89esy9PQuVHTuG2kB4av0vEB ROwXLkl4+9u4wtZ6TUKoW5mBUrIt0mHqW8Ephq8o+fhU04iaod+fS8ekb4L48BdN /HBjL6X3l7UVG5vPqTk/DrlXgHSJznMD9J8ynEJB9YJoGyNSqjrVOzhCmx5alo48 GqHWye3iv3JavWwym57w0nZh16IqGdkNKR+W+pBm1sj59ACDbd7Mhy4qOAbJtRNh Shg2mkjctIjYnUqOYfHQAzHC6PLX86+34R5GwzPAhFqiRDAqQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0O/Wm+mdBAE2zu2LY6GjzGzO+MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2E2ZTcyNzYtZjgwNS0z MmYyLTlhZTAtODc3ZjE3ZTg2ZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF0KUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAOQlrL9Ww2r/vJrCw2XhwR3IcagYfVuiWofmwuvWWyO9E2U8RgDtfG 6YcBUpwEuX4kJlCezFUDFM9KA7PiUwBT7+MNuGkPRTUCdXhQsfp7Fd/mh1sb4C8a KtUxRbS6xDKhOtB6Y34if/mGUB2qjd8NzArYNRfFW2VGoL0R18BQpJ5p9gy5m0kK mV8i8aRv648CopGn/jSqpYsuh5XHBgRTjGrcCgD+2Xkk6Yq5KdZ2fDcFTouwKRKQ h99qtMg4E0kq2e3htueJ8Tc17Wdbam3PdvSU+TIXBstsqXaRDlSyuEHAnfWi0CFG cNhw6QwvidW5EvWkOn03Xsq3heA3z+Y= -----END CERTIFICATE-----Generated at Sat Jun 7 23:05:25 2025 by rpki-client