$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43083772-3eb5-35cd-a8ea-5deefe5de773.roa File: 43083772-3eb5-35cd-a8ea-5deefe5de773.roa (raw, json) Hash identifier: GOKqjU3Zq2nECWpVXMISFLyEZW7pMqHU/GH29WSFPmw= Subject key identifier: E9:74:33:D0:A6:43:57:B5:75:7C:D5:4F:A1:B7:EC:89:82:4F:D7:3C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A07D53940D4AD414F1D933150 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43083772-3eb5-35cd-a8ea-5deefe5de773.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.0.0.0/12 maxlen: 12 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:39:40:d4:ad:41:4f:1d:93:31:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=0ad0f5da-6eac-4532-a3ae-f997f7c3d569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:04:77:1f:1b:50:59:3a:13:80:a0:bf:31:c1: ac:6a:c3:c8:6e:fa:49:dd:96:47:26:c5:39:01:94: 4d:9d:c6:4d:ee:63:9d:42:39:69:23:d8:44:65:03: 83:fe:58:ef:cd:7e:42:b5:3c:75:8c:32:31:43:e9: fd:fc:4d:4a:97:e9:eb:1a:04:9b:90:ca:36:5c:dd: fe:9c:be:33:8e:b9:0c:aa:e3:b2:c0:8d:5e:e6:e4: a1:75:a2:cc:1b:ac:07:0d:4a:d3:18:f0:39:70:46: 0e:b2:4b:c5:4c:94:df:48:39:15:05:13:29:db:78: e9:05:28:56:bc:fd:3d:65:ba:de:85:71:fd:43:1b: 88:86:d9:3b:fe:e5:92:22:0c:38:9c:e1:07:bf:6b: c3:10:30:69:8d:0c:49:4f:32:f4:fc:a5:7d:a9:48: a0:fb:ca:fd:93:99:b3:d9:d0:48:c5:9b:7b:f2:da: 6b:11:87:61:60:99:78:61:2e:ba:4f:1b:51:68:09: 1d:e4:7e:54:c5:65:86:a9:d5:6a:08:03:3e:ea:11: a7:be:04:6a:04:04:1d:0a:70:de:a6:3b:d5:f9:37: 07:c1:96:00:8f:f6:a6:2f:89:58:e2:27:b4:18:55: ce:28:a9:13:d6:55:97:a0:fd:65:1d:5c:a4:f5:8a: d8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:74:33:D0:A6:43:57:B5:75:7C:D5:4F:A1:B7:EC:89:82:4F:D7:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43083772-3eb5-35cd-a8ea-5deefe5de773.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.0.0.0/12 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:b5:b3:1b:1c:4c:65:d9:e3:71:cb:b0:10:e0:e7:39:9c:f7: 74:dd:70:a8:0a:ee:06:b9:73:4f:4b:c7:f2:15:42:9a:d7:a4: 4b:7a:9f:e0:e7:ba:73:75:96:b3:bf:01:82:d3:6c:7f:09:04: 9e:cb:6a:e9:eb:5b:25:7d:38:75:d9:03:d0:27:bc:dd:5f:aa: 3e:0f:ea:6d:b9:76:b1:cc:85:26:ca:32:c2:fd:f5:e3:81:67: ab:55:06:0a:e3:9d:b7:3e:3b:0c:f7:23:b1:7c:4b:e8:18:d5: aa:60:5c:0f:c9:e5:83:5d:19:4d:89:11:34:5b:3d:05:11:39: 2c:ca:bf:5e:eb:db:bd:77:ce:af:46:c2:6d:90:71:a0:d5:d2: 95:12:18:a6:b2:b8:ee:7a:46:f4:dd:46:6a:a3:9b:f4:11:01: 44:07:42:63:3d:ba:42:e2:30:00:35:da:92:1f:29:8c:ba:4d: c5:2e:79:d8:19:f9:03:e4:8e:28:37:06:26:30:85:a3:79:d5: 91:57:73:ea:00:fa:4d:37:9a:41:7b:7d:08:02:0a:82:a1:93: 6c:c7:34:13:ab:bc:e3:8a:60:52:f3:21:ea:17:f6:8e:17:20: c3:39:76:9a:59:d1:80:49:48:f7:4a:ef:1d:bc:c1:7c:ac:b7: 09:2f:1e:33 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEoH1TlA1K1BTx2TMVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk MGFkMGY1ZGEtNmVhYy00NTMyLWEzYWUtZjk5N2Y3YzNkNTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywR3HxtQWToTgKC/McGsasPIbvpJ3ZZHJsU5 AZRNncZN7mOdQjlpI9hEZQOD/ljvzX5CtTx1jDIxQ+n9/E1Kl+nrGgSbkMo2XN3+ nL4zjrkMquOywI1e5uShdaLMG6wHDUrTGPA5cEYOskvFTJTfSDkVBRMp23jpBShW vP09ZbrehXH9QxuIhtk7/uWSIgw4nOEHv2vDEDBpjQxJTzL0/KV9qUig+8r9k5mz 2dBIxZt78tprEYdhYJl4YS66TxtRaAkd5H5UxWWGqdVqCAM+6hGnvgRqBAQdCnDe pjvV+TcHwZYAj/amL4lY4ie0GFXOKKkT1lWXoP1lHVyk9YrY5wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOl0M9CmQ1e1dXzVT6G37ImCT9c8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDMwODM3NzItM2ViNS0z NWNkLWE4ZWEtNWRlZWZlNWRlNzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMEFwAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAfrWzGxxMZdnjccuwEODnOZz3dN1wqAruBrlzT0vH8hVCmtekS3qf4Oe6 c3WWs78BgtNsfwkEnstq6etbJX04ddkD0Ce83V+qPg/qbbl2scyFJsoywv3144Fn q1UGCuOdtz47DPcjsXxL6BjVqmBcD8nlg10ZTYkRNFs9BRE5LMq/XuvbvXfOr0bC bZBxoNXSlRIYprK47npG9N1GaqOb9BEBRAdCYz26QuIwADXakh8pjLpNxS552Bn5 A+SOKDcGJjCFo3nVkVdz6gD6TTeaQXt9CAIKgqGTbMc0E6u844pgUvMh6hf2jhcg wzl2mlnRgElI90rvHbzBfKy3CS8eMw== -----END CERTIFICATE-----Generated at Thu Jun 5 18:38:44 2025 by rpki-client