$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fc38961-8a26-3e33-843e-f94ab4d130a5.roa File: 3fc38961-8a26-3e33-843e-f94ab4d130a5.roa (raw, json) Hash identifier: l3x1uxFRuv5jW5zI+wNlRIFHKxJwfeuAcwkTW+rKYBo= Subject key identifier: BD:2E:BE:EE:D9:22:2C:79:BB:79:E9:46:B4:4B:57:9F:0C:2C:DC:F3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A03A55C3763A08F69E36CBD60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fc38961-8a26-3e33-843e-f94ab4d130a5.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.2.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:5c:37:63:a0:8f:69:e3:6c:bd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=c4ca4f3c-857c-43fc-b300-f6726e1dcd97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c0:b1:dd:f5:2f:54:de:04:d6:49:4a:43:9a: 14:ed:4b:e2:67:83:9a:f9:69:1b:b6:2a:86:38:e2: ff:12:35:b4:13:26:fc:70:29:45:ea:20:33:b0:66: 0a:19:54:54:ed:57:e2:ab:88:66:28:0d:f1:9b:40: 08:e6:cb:f7:bc:87:6a:81:87:77:b7:4f:01:27:23: 79:d7:c6:c2:43:fc:14:81:1a:0b:ef:64:f3:6a:ec: b2:ca:19:f5:ef:46:bf:3a:77:5a:ac:48:19:53:15: 3d:dc:e6:b1:67:ab:77:44:73:9e:97:5b:20:df:a9: eb:1a:f7:0d:d7:c1:b3:58:28:0a:ff:6c:91:5c:79: 25:57:00:19:1b:73:54:f5:a1:f4:d6:8b:bd:a9:1a: db:ad:74:b4:5b:ea:15:fc:53:a5:c5:1c:ac:1e:91: fb:5d:3e:e7:8e:d7:2f:c2:d8:7d:8f:ef:d2:3a:d1: 94:ba:d2:67:04:4e:b4:22:04:e3:37:cc:a3:8b:a4: a8:d3:d6:35:e4:89:ed:00:75:14:74:3d:05:75:c8: 88:1f:19:55:f0:d0:c1:64:a0:8e:44:6a:69:41:db: b9:6b:e6:25:9d:24:a5:e9:6a:0d:0b:a0:4e:f4:a2: ad:75:a4:3e:dc:81:a3:94:f1:d9:64:4b:15:1e:d4: fa:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2E:BE:EE:D9:22:2C:79:BB:79:E9:46:B4:4B:57:9F:0C:2C:DC:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fc38961-8a26-3e33-843e-f94ab4d130a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.2.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:1e:24:27:73:fd:9e:e2:ba:90:ef:04:bf:2b:59:5c:05:8b: c8:86:71:05:61:f3:42:3f:cd:c6:10:26:81:98:9d:b7:8b:d2: 2d:37:7a:1e:63:c1:4f:8a:42:41:f0:40:e3:85:aa:a6:9d:c4: c2:eb:39:a1:7a:90:89:35:81:95:15:27:c4:2b:c7:5d:87:95: ba:a3:87:45:88:16:69:80:54:8d:b2:77:18:0a:69:88:7c:dc: 42:53:05:32:3e:06:31:67:c4:72:ee:a6:0f:73:ac:96:62:8b: 53:c0:d1:8c:d8:3d:00:dd:6b:c9:c7:d6:cd:52:c1:0c:ea:90: 9c:fa:88:86:b8:99:64:63:0a:c7:c3:a6:3d:69:c1:dd:0c:d2: 5a:29:c5:c3:ef:63:1d:86:bf:04:21:4d:c7:9d:36:f6:a9:0d: dc:0d:43:85:69:f1:87:23:88:47:16:c2:55:ea:78:29:38:87: c4:29:a3:50:43:e0:9d:c4:f4:8f:50:73:6b:df:c5:f4:8d:45: 09:3b:66:89:f9:9e:4b:bb:be:7d:74:e9:a2:8b:c2:26:4e:8c: 09:99:e3:13:f7:f2:87:81:87:02:1e:30:20:e4:03:0e:68:df: bf:9c:51:c5:1c:7e:28:a0:ad:67:86:a3:99:d4:67:64:88:10: 01:06:1f:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpVw3Y6CPaeNsvWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk YzRjYTRmM2MtODU3Yy00M2ZjLWIzMDAtZjY3MjZlMWRjZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMCx3fUvVN4E1klKQ5oU7UviZ4Oa+WkbtiqG OOL/EjW0Eyb8cClF6iAzsGYKGVRU7Vfiq4hmKA3xm0AI5sv3vIdqgYd3t08BJyN5 18bCQ/wUgRoL72Tzauyyyhn170a/OndarEgZUxU93OaxZ6t3RHOel1sg36nrGvcN 18GzWCgK/2yRXHklVwAZG3NU9aH01ou9qRrbrXS0W+oV/FOlxRysHpH7XT7njtcv wth9j+/SOtGUutJnBE60IgTjN8yji6So09Y15IntAHUUdD0FdciIHxlV8NDBZKCO RGppQdu5a+YlnSSl6WoNC6BO9KKtdaQ+3IGjlPHZZEsVHtT61QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0uvu7ZIix5u3npRrRLV58MLNzzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2ZjMzg5NjEtOGEyNi0z ZTMzLTg0M2UtZjk0YWI0ZDEzMGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFweJCdz/Z7iupDvBL8rWVwFi8iGcQVh80I/zcYQJoGYnbeL0i03eh5j wU+KQkHwQOOFqqadxMLrOaF6kIk1gZUVJ8Qrx12Hlbqjh0WIFmmAVI2ydxgKaYh8 3EJTBTI+BjFnxHLupg9zrJZii1PA0YzYPQDda8nH1s1SwQzqkJz6iIa4mWRjCsfD pj1pwd0M0lopxcPvYx2GvwQhTcedNvapDdwNQ4Vp8YcjiEcWwlXqeCk4h8Qpo1BD 4J3E9I9Qc2vfxfSNRQk7Zon5nku7vn106aKLwiZOjAmZ4xP38oeBhwIeMCDkAw5o 37+cUcUcfiigrWeGo5nUZ2SIEAEGH2g= -----END CERTIFICATE-----Generated at Thu Jun 5 18:22:28 2025 by rpki-client